The below table shows an option for businesses with thousands of staff and multiple sites or stand alone facilities with a footfall in the thousands

Examples: Retail; Theme Parks; Entertainment Facilities; Night Time Economy, Supermarkets etc.

 

UK Government Threat Levels Private sector CT mitigation designed to escalate with the UK Government Threat Levels

Note:  The following information is for example purposes only and not the exact escalation options
Low

 

 Develop Policy & Procedures to assist Prevention, Response, Recovery and comply with the law.

Must include a training programme to educate, revise and remind all staff on policy, procedures and situational awareness.

 

The CT policy should have implementation levels that escalate with the Government Threat Levels – Example, level 1 = Threat Level Low

 
Moderate

 

 Implement level 2 of the CT policy.

Examples:

  • Weekly toolbox talk training programme.
  • Management test of risk communication systems.
  • Quarterly management table-top exercises.
  • Rehearse individual parts of an evacuation plan.
  • Quarterly review of level 3 & 4 options in the CT policy.
Substantial

 

 Implement level 3 of the CT policy.

Examples:

  • Review all relevant business plans and update as required.
  • Hold a monthly management team meeting and review functional responsibilities.
  • Focus the weekly toolbox talks on Key areas.
  • ALL staff should take part in the tool box talk sessions.
Severe

 

 Implement level 4 of the CT policy.

Examples:

  • Review level 5 options in the CT policy.
  • Hold a management team meeting, review all open source intelligence and information from government agencies about the threat.
  • Staff to report suspicious activity, people, and raise awareness of unattended packages and vehicles and records kept.
  • Increase the security posture.
  • Focus weekly toolbox talks on situational awareness.
  • Business point of contact to maintain weekly communication with Police etc.
Critical

 

 Implement level 5 of the CT policy.

Examples:

Weekly test of all risk communication systems.

Rehearsal of evacuation plans at least once a month.

Focus the training programme on staff situational awareness.

Weekly management review of open source intelligence and government agency briefings.