Identifying your weaknesses

How can we get business in the UK to reduce its vulnerability to an attack from terrorists, whether they be a group linked to Al Qaeda (AQ) or a lone wolf who may even work in the community? This question is at the core of our work here at the National Counter Terrorism Security Office (NaCTSO).

Those of us who have access to the threat picture are quite clear on this – the threat of terrorism in the UK is very worrying indeed and shows no sign of going away in the near future. Crowded places are still the preferred target of terrorists.

The National Counter Terrorism Security Office (NaCTSO) has produced a number of products and tools to help business make positive changes. We help businesses understand the threat and then guide them through the vulnerability process. Counter Terrorism Security Advisers across the UK have delivered thousands of briefings and bespoke surveys to business. However, we cannot get to all so we have to prioritise our work. It is common sense that those businesses at the most risk receive the most attention from the Police and Security Service.

This could leave a big gap. Realising the importance of the small to medium enterprises (SMEs) to the UK, we have now produced a product especially designed for these businesses, to give them access to the same best practice as the larger companies, all for no cost. I mentioned this product in the last issue, however, I will now give some more detail on the Vulnerability Self Assessment Tool (VSAT).

Vulnerability Self Assessment Tool
The basic tenant to this tool is that it will allow a business to look at itself and its business process, identify its vulnerabilities and then receive free advice that will allow it to reduce those weaknesses. Sounds simple, and for the end user it is.

Importantly, the VSAT has been developed in partnership with leading businesses and associations such as the Federation of Small Business across the UK. We wanted it to be completely user friendly. It had to be helpful and detailed enough for those with a security background but also easy enough for someone considering these issues for the first time to complete and, vitally, to understand.

Furthermore, it needed to give a means of reducing vulnerabilities that will not involve massive expense. Therefore much that can be achieved is common sense such as a clear desk policy or keeping people out of staff only areas. It also deals with more structural issues such as having a glass audit. There are many glazing firms that offer this free of charge.

Aware of the tight financial constraints on business we have been fortunate enough to have been given a free of charge business continuity plan product by a company used to providing BCP to blue chip companies, Non-Verba Ltd, to support those businesses that would baulk at the normal cost.

Getting hold of the tool
Counter Terrorism Security Advisers (CTSAs) will be registering users and you may receive an e-mail inviting you to complete the assessment. Alternatively, users can register by contacting their local CTSA. Guidance on how to register can be found on the main NaCTSO website, www.nactso.gov.uk. In the case of businesses with large numbers of sites, user accounts can be created centrally by NaCTSO.

The VSAT will offer a number of options for the user. On accessing the site they will be asked to input what type of business they are and their capacity. They will then be guided through the process.

There are 33 questions which should be quick to complete (depending on the knowledge of the user). The process can be paused to allow the user to investigate for information and processes of which they are not aware. This in itself is good news as at the very least by looking for the current situation the user is likely to identify what needs to be done to improve. It will provide owners, operators or management with an understanding of what they need to put in place to reduce their vulnerability to terrorist attack. Furthermore, the self assessment process will signpost the owner, operator or manager to the appropriate measures to reduce their vulnerability.

At the end of the report the VSAT will give a detailed report on the current status of the business and the user will be able to print out a commercially sensitive report of recommendations. This will only be visible and available to the user and this is vital. The user can be assured that no one else will see their answers or what vulnerabilities they may have.

The results
The overall assessment result will be displayed without showing numerical values but will assist the user to prioritise where they may need to make improvements.

Following the initial launch users will be able to view a business sector base line to see how their assessments sit in comparison with other assessments within the UK. Improvements may include the use of a comprehensive Business Continuity Management (BCM) template or a CTSA delivered Project ARGUS or GRIFFIN training event.

Each question will provide a means for the user to seek further guidance by way of sign posting. The options will encourage owners/operators to review their working and recruiting practices, risk management or site evacuation and invacuation procedures. Users will also be able to access the latest advice via the main NaCTSO website blog.

This work is ground breaking. No other country in the world is offering this free service to business. If you are a business who deals in crowds or are in a place where crowds are, please make use of this tool. It will allow you to help yourself and your community to be safer, more resilient and make the work of terrorists more difficult.

Further information:
E-mail: nactso@btconnect.com
Web: www.nactso.gov.uk