In the Midlands, a warehouse manager recently raised concerns about a back fire door that had stopped closing fully. The security engineer who inspected it worried less about the door itself than about the delay: weeks had gone by without anyone picking up on the fault. A dropped hinge had left a gap, staff had held the door ajar several times to ventilate the space, and nobody had tested the alarm sensor on that entry point in the three years since fitters commissioned the system.
Luckily, the story ended there: no intruder, no stolen goods, no incident log. Yet gaps like this hand opportunists an easy crime, and business owners badly underestimate how often such lapses occur.
The Home Office’s Commercial Victimisation Survey predicts that nearly a third of British firms will experience crime of some kind this year. That estimate spans many incident types, from till-side theft to violence against workers, yet burglary and vandalism, precisely the offences good security aims to prevent, still form a significant slice of it: annually, 8% of firms face an actual or attempted burglary, and 8% more fall prey to vandals. Meanwhile, the ONS counted 78,707 non-domestic burglaries in the twelve months ending March 2025, and that tally covers England and Wales only. That is a substantial figure, and the risk falls unevenly. Certain sites invite trouble more readily than their neighbours, and the difference rarely stems from a single glaring flaw; far more often, a cluster of small practical and procedural lapses builds up quietly over the years.
Security specialists survey everything from lone shop units to warehouse complexes spanning several buildings, and they meet five familiar danger signals time and again. None of the five looks dramatic when viewed in isolation. Combined, they paint a vivid picture of a site’s true exposure.
1. Where the Cameras Miss
Cameras sit on almost every set of business premises. Only a minority of owners aim them at the likely points of entry.
Engineers see the same story repeatedly: someone fitted a commercial CCTV system years ago, then added to it piecemeal as the site changed, and nobody widened its coverage to take in new extensions, stores or fresh stretches of car park. Installers often find old analogue equipment whose images cannot resolve faces or registration numbers at a workable distance, recorders that wipe footage within days, and cameras fixed on the car park gate while nobody watches the loading bay at the side.
Owners don’t always need to “install more cameras.” Engineers can sometimes clear a blind spot simply by relocating two existing units, or upgrade to an IP-based NVR, retiring the ageing DVR, to gain motion-triggered alerts, remote access and decent retention. The key question is whether coverage tracks the building’s true weak spots, not where somebody chose to bolt the cameras up a decade ago.
2. Outdoor Lights That Fall Short
Owners overlook few problems as often, though few cost so little to put right. Hedges creep across a dusk-to-dawn sensor. A motion-activated floodlight fails and stays dead for months, since the premises sit empty at night and no one sees it. Builders fitted lighting when they put the building up, and nobody reassessed it as the landscaping matured and the footprint expanded.
Weak lighting hampers more than visual monitoring. It actively undermines CCTV, because even a high-quality camera loses detail in darkness unless the site provides enough illumination, or infrared matched to the range. Engineers need just five minutes on the perimeter once night falls to learn a surprising amount: which areas are genuinely lit, which have lamps pointing the wrong way, and which have slipped into gloom without anyone realising.
3. Intruder Alarms Missing Tests and Servicing
Seasoned installers regularly find alarms no engineer has touched for upwards of twelve months, and the discovery barely earns a comment any more. Businesses install and commission the kit, then largely forget it unless a false alarm jolts them into action.
Two factors make this matter. First, sensors wear. PIR detectors drift out of calibration, backup batteries pass their useful life, and dual-technology detectors, blending infrared with microwave sensing, require periodic recalibration to keep functioning as designed. The second factor, compliance, often carries more weight. When engineers keep a system to the BS EN 50131 standard and an NSI or SSAIB-approved receiving centre watches it, the system qualifies for police attendance under national policy as it currently stands. If the business lets maintenance lapse and piles up false alarms, police can strip that priority altogether, and the firm must then fall back on its keyholder, or on a third-party responder, and nothing more.
Routine servicing does more than tick a box. It keeps the system performing the task that justified installing it in the first place.
4. Access Rights Nobody Keeps Under Control
Owners find this issue the most startling, because it hardly resembles a security risk until someone draws up the full picture. Several rounds of staff departures pass, yet the master keys stay the same. Colleagues swapped alarm codes long ago, and those codes still work today. Ex-employees keep access fobs that no one ever deactivated.
Consultants regularly visit premises where whoever runs the building has no reliable count of the working keys and codes in circulation. The manager deserves no blame for this. Years of staff turnover produce exactly this outcome whenever the building lacks a genuine access control system tracking arrivals, departures and their timings.
Modern access control, whether it relies on swipe cards, key fobs or biometric readers, achieves two things that shared keys cannot: it confines each person to set hours and areas, and it builds an audit trail. If an incident happens, that record often lets a business establish the facts rather than speculate about them.
5. Alarms That Sound but Summon Nobody
An alarm that rings on and on while nobody answers achieves, in practice, nothing an absent alarm would not. Engineers still discover sites running the intruder alarm as an isolated unit without any monitoring connection, counting solely on the noise to frighten burglars away or prompt someone walking past to act.
Hooking the system up to a monitored receiving centre, with an accurate keyholder list behind it, removes that weakness. On receiving a signal, the ARC verifies the alert, phones keyholders in the proper sequence and, if the site qualifies, calls for police attendance. Without that connection, chance alone determines the response time: whether anyone hears the alarm, whether the listener knows the right number, and whether that contact answers.
Keyholder lists merit their own review too. Engineers routinely uncover dead numbers, departed staff and contact sequences that no longer match who can realistically arrive at short notice.
Seeing How the Weaknesses Connect
Taken one at a time, these five issues rarely spell catastrophe. A floodlight gone slightly dim, or a keyholder list no one has reviewed, will not bring a company down unaided. Yet the problems usually travel in clusters. Sites with poor lighting frequently run ageing cameras that nobody upgraded to compensate. Firms that neglect to deactivate former staff fobs often neglect alarm servicing too. The weaknesses compound one another.
A proper site review proves its worth not by exposing one dramatic flaw but by tracing the links between the five areas and the way each shapes the others. Picture a warehouse with first-rate CCTV and an unmonitored alarm: it still has a critical weakness. Likewise, a shop whose cameras miss key corners remains vulnerable, even with a carefully maintained alarm, to opportunist thieves that the alarm on its own cannot detect.
Any owner who sees a couple of these warning signs at their own site should act simply: ask a qualified specialist to inspect the premises in full, rather than let an incident force the matter. The Midlands warehouse manager got lucky. Someone caught the fault before anyone exploited it. Few firms will prove so fortunate unaided, and given current commercial burglary rates, owners should not stake their security on luck.
