A warehouse manager in the Midlands flagged up a fire door at the back of the site not long ago, because it had stopped shutting as it should. What worried the security engineer who came out to look wasn’t really the door. It was the fact that it had gone unnoticed for weeks. The hinge had sagged just far enough to leave a gap, staff had wedged the door open to let air in on more than one occasion, and the alarm sensor watching that entrance hadn’t been checked once since the system went in three years earlier.
As it turned out, nothing came of it. Nobody broke in, nothing went missing, and there was no incident to report. Still, that’s precisely the sort of weakness that makes a chancer’s job simple, and it crops up far more often than most owners think.
The Home Office’s Commercial Victimisation Survey suggests that nearly a third of businesses in the UK will be hit by crime of one sort or another over the course of this year. That covers a broad mix of incidents, from shoplifting by customers to attacks on staff, but burglary and vandalism, which are exactly what decent security is meant to stop, still make up a sizeable chunk: 8% of businesses say they suffer a burglary or an attempted one in a typical year, and another 8% report vandalism. On top of that, ONS data covering the twelve months to March 2025 showed 78,707 non-domestic burglaries in England and Wales alone. That’s a big number, and it isn’t spread out evenly. Some buildings are just easier to hit than others, and what separates them is usually a small number of physical and procedural weaknesses that creep in gradually, not a single obvious failing.
People who do commercial site surveys for a living, whether that’s a single shop unit or a sprawling multi-building warehouse site, keep spotting the same five warning signs crop up time after time. On their own, none of them look like much. Put them together, though, and they show plainly how exposed a site really is.
1. Gaps in Camera Coverage
Almost every business has cameras. Far fewer have them pointed at the places where somebody would actually try to break in.
You see it all the time: a commercial CCTV system put in years back and then bolted onto bit by bit as the building grew, with extensions, storerooms or new parts of the car park never properly included. Installers often come across old analogue kit still running, with picture quality too poor to make out a face or a number plate from any sensible distance, recorders that only hold a few days of footage before recording over it, and cameras aimed at the car park entrance while a side loading bay goes completely unwatched.
The answer isn’t always “install more cameras.” Sometimes it just means moving two existing units to get rid of a blind spot, or swapping an old DVR for an IP-based NVR setup with decent retention, remote viewing and alerts triggered by motion. The real question is whether the cameras line up with the building’s actual weak points, not simply where someone happened to fix them to the wall a decade ago.
2. Dim or Patchy Lighting Outside
This is one of the easiest problems to sort out, and one of the most often missed. Bushes that have grown over a dusk-to-dawn sensor. A motion-activated floodlight that stopped working months ago and never got reported, because nobody’s around after dark to spot it. Lights fitted when the building went up but never looked at again as the planting grew or extensions went on.
Bad lighting doesn’t only make a site harder to keep an eye on. It also makes CCTV less effective, because even a decent camera has trouble in the dark unless there’s enough light or infrared support suited to the distance it’s covering. Spending five minutes walking the perimeter after dark gives engineers more information than most people would guess: which spots are properly lit, which are lit but from the wrong angle, and which have quietly gone dark with nobody noticing.
3. Alarms That Nobody Has Tested or Serviced
Finding an intruder alarm that hasn’t seen a service engineer in over a year is so routine that seasoned installers hardly mention it now. Systems are fitted, signed off, and then mostly forgotten about until something sets off a false alarm.
There are two reasons this is a problem. The first is that sensors wear out. PIR detectors can gradually lose their calibration, backup batteries get older than their useful lifespan, and dual-technology detectors, which pair microwave with infrared sensing, need recalibrating every so often to keep working properly. The second, and often the bigger deal, is compliance. If a system is kept up to BS EN 50131 and linked to an alarm receiving centre approved by the NSI or SSAIB, it can get a police response under current national policy. Let the servicing slip, clock up a handful of false alarms, and that police priority can be taken away altogether, so the business is left depending on a keyholder or a third-party response and nothing else.
Servicing regularly isn’t about ticking boxes. It’s what keeps the system doing the job it was put in to do in the first place.
4. Access That’s Out of Date or Out of Control
This one catches owners out more than any other, because it hardly ever looks like a security issue until someone actually writes it all down. Master keys that have stayed the same through several waves of staff leaving. Alarm codes handed round a team years ago and never updated. Fobs given to people who’ve since left, still working because nobody switched them off.
Consultants regularly turn up at sites where the person in charge honestly has no idea how many people can still get in with a key or code. That isn’t a dig at the manager. It’s simply what happens over years of people coming and going when nothing like a proper access control system is in place to record who entered, who left and at what time.
Up-to-date access control, whether it uses cards, fobs or biometrics, does two things shared keys simply can’t. It limits who can get in, where and when, and it leaves an audit trail. If something does go wrong, that record is often what separates knowing exactly what happened from just guessing.
5. Nothing Connecting the Alarm to a Response
An alarm that just keeps ringing with nobody coming is, in reality, no better than not having one at all. Engineers still find sites where the intruder alarm works as a standalone box with no link to a monitoring station, counting on the racket alone to scare someone off or get a passer-by’s attention.
Systems that are monitored by an alarm receiving centre, with a keyholder list that’s kept up to date, plug that hole. Once a signal comes in, the ARC can check the alert is genuine, ring keyholders in the right order and, if the system qualifies, ask for the police to attend. Without that connection, how quickly anyone reacts is down to luck: whether somebody happens to hear it, whether they know who to phone, and whether that person actually picks up.
It’s worth checking keyholder lists in their own right as well. Engineers often come across lists full of dead numbers, people who’ve left the company, or a contact order that doesn’t match who can actually get there at short notice anymore.
Putting It All Together
On its own, none of these five problems is a disaster. A floodlight that’s a bit weak, or a keyholder list nobody has checked, won’t sink a business by itself. The trouble is they tend to come in groups. A site with bad lighting often has an old CCTV setup that nobody ever upgraded to make up for it. A company that’s slack about switching off old fobs is usually just as slack about getting the alarm serviced. It all adds up.
What makes a proper site review worthwhile isn’t spotting one big flaw. It’s about noticing the pattern running through all five areas and working out how they affect each other. A warehouse with great CCTV but no monitored alarm link still has a serious hole in it. A shop unit with a well-looked-after alarm but gaps in its camera coverage is still open to opportunistic theft the alarm by itself won’t pick up.
If you’re a business owner and one or two of these sound familiar, the sensible next move is simple: get a qualified person to walk round the site properly, instead of waiting for an incident to force the issue. The warehouse manager from the start of this piece was fortunate. The gap came to light before anyone took advantage of it. Not every business will be that lucky by accident, and with commercial burglary rates where they are right now, luck isn’t a plan you should count on.
