Guide

Small business security basics

Protecting a small business starts with understanding what you stand to lose and when you are most exposed. These basics help owners build a sensible, layered plan.

In this guide
  1. Start with a risk walk-through
  2. Secure the physical layer
  3. Alarms, cameras and access control
  4. People and procedures
  5. Recording, privacy and legal points
  6. Maintain and review

Start with a risk walk-through

Walk the building as if you were a stranger. Note the doors, windows, roof access, loading areas and parking. Identify what is valuable: cash, inventory, equipment, files and the people who work there. Consider when the space is most exposed, such as after closing, during deliveries or when only one employee is present.

List the incidents that would hurt most. A break-in, theft by a customer or employee, a vandalized window, a flood or a freezer failure each need a different response. Ranking them tells you where to spend first.

Include technology in the walk-through. Computers, point-of-sale systems and networks hold customer and financial data, and a physical break-in can lead to data loss. Keep devices out of sight, lock screens, back up files and secure the Wi-Fi. Physical security and digital security support each other, and a gap in either one weakens the whole.

Secure the physical layer

Doors, frames and locks are the base. Commercial doors often get heavy use, so hardware should be built to cope. Check hinges, strike plates and glass near locks. Lighting at entrances, parking and loading areas helps staff, customers and cameras.

Control keys. Keep a list of who has a key to what, avoid leaving spare keys in obvious places and change locks or codes when staff leave. Consider keeping cash and valuables in a safe that is anchored and kept out of sight.

Pay attention to rear and side doors. Many break-ins use the entrance least visible from the street. Doors that open to alleys, loading areas or shared hallways should have solid hardware, good lighting and, where appropriate, alarm contacts. If you lease the space, find out what changes your landlord permits.

Alarms, cameras and access control

An intrusion alarm covers the closed hours. Cameras help document what happens and can discourage theft. Access control gives each person their own credential and shows who entered. Used together, they cover prevention, detection and review. The service pages for business security and smart locks and access control explain how we approach each.

Think about monitoring too. If no one can respond reliably at night, a monitored system may be worth considering. Compare the models in professional versus self-monitoring.

Cash handling deserves special thought. Keep counting, safe access and deposits out of public view where possible, vary routines and avoid having one person handle the process alone at the same time every day. Cameras that cover the register and the safe area provide a record that protects both the business and honest employees.

People and procedures

Technology fails without habits. Write down opening and closing steps, including arming the alarm, checking doors and counting cash in a safe area. Train every employee who uses the system, and give each a unique code. Review the list of active codes regularly and remove those of former employees the day they leave.

Set a policy for visitors, vendors and cleaners. Decide who may enter after hours and how they are logged. Small routines like these prevent many problems, including false alarms, which you can read about in how to reduce false alarms.

Plan for emergencies as well as crime. Post clear instructions for fire, medical events and power outages, and make sure everyone knows the exits and who to call. Keep a current contact list for the owner, a manager and key vendors, including your alarm company. Practice the opening and closing routine with new staff until it is automatic.

Handle departures promptly. When an employee leaves, collect keys and fobs, disable credentials, change shared passwords and remove the person from the monitoring contact list on the same day. This single habit closes a gap that many small businesses leave open for months.

Recording, privacy and legal points

Video in a workplace needs care. Avoid cameras in restrooms, locker areas and other private spaces. Audio recording is a separate legal issue: Utah's wiretap statute is generally described as a one-party consent law, but the rules differ in other states, and recording conversations in which the business is not a participant is risky. Many businesses disable audio on cameras.

Telling employees what is recorded is widely recommended, and some places may require it. Check with an attorney about notice, retention and use of footage in personnel matters. Alarm work is also regulated: Utah requires alarm companies and agents to be licensed, so verify the license of any vendor.

Customers matter too. Cameras placed at entrances and registers are common, but consider whether they make customers feel watched in areas such as fitting rooms or waiting rooms, and avoid those spaces. Keep footage secure, limit who can view it and delete it according to a written retention policy, so it is not kept longer than needed or shared casually.

Maintain and review

Schedule a routine: test sensors, check camera views, confirm that recordings are saved, replace batteries and update contacts. Review the plan whenever the layout, staff or hours change. Ask your insurer which measures they recognize.

Security is never finished, but it can be manageable. A few well-chosen layers, kept in working order, serve a small business better than a complex system no one understands.

Document your system. Keep a record of where each sensor and camera is, how to reach your alarm provider, where recordings are stored and who has administrator access to each account. If the person who set everything up is unavailable, the documentation lets someone else keep the system running. Store a copy somewhere safe and update it when things change.

Questions

Common Questions

What should a small business secure first?

Start with doors, locks and lighting, then add an alarm for closed hours. Cameras and access control follow based on your risks.

Do I need to tell customers about cameras?

Signs are common and may help, and some places have notice rules. Check current local law or ask an attorney.

Can my store record audio with its cameras?

Audio rules are stricter than video rules and differ by state. Utah is generally described as a one-party consent state, yet capturing conversations between customers is a different matter. Many shops simply turn audio off.

Should every employee have a code?

Individual codes make it possible to track activity and cancel access for one person without affecting others.

Keep Reading

Related

Request a Free Security Consultation

Tell us about your home or business and we will reply to set up a no-cost conversation about what makes sense.

Request a Free Security Consultation