The Atlantic hurricane season begins on 1 June. After last October, few organisations in Jamaica need reminding what a major storm can do. Hurricane Melissa showed how quickly power, communications, transport and staffing can fail together — and how long recovery can take.
Most organisations now have some form of business continuity plan. It usually covers data backups, critical suppliers, communication with staff and customers, and alternative work arrangements. What it often lacks is a security section.
Why security belongs in the plan
After a major storm, the normal layers of protection weaken at the same time. Alarms, cameras and electric gates depend on power. Fences and walls may be damaged. Guards and staff may be unable to travel. Meanwhile, fuel, generators, building materials and stock are in short supply and in demand.
Without a plan, decisions about security are made in the middle of the disruption, by whoever happens to be available.
What the security section should cover
Before the storm
- Who decides when to secure the site, and what that involves
- Moving or securing high-value items, records and equipment
- Confirming backup power for critical security systems and how long it lasts
- Confirming which guards and key holders will be available
During and immediately after
- Minimum security cover if normal staffing is not possible
- How the site will be checked, and by whom, once it is safe
- Temporary measures for damaged perimeters, doors and windows
- How incidents will be recorded when systems are down
During recovery
- Access control for contractors, adjusters and volunteers
- Secure storage for deliveries of materials and equipment
- A review of what worked and what didn't
Test it
A plan nobody has read will not be followed in an emergency. Walk through it with the people named in it before the season starts.
What this means in practice
- Add a one- or two-page security section to your continuity plan.
- Name the people responsible, with backups.
- Check backup power for alarms, cameras and access control.
- Agree minimum guard cover for the two weeks after an event.
- Hold a short walkthrough before the end of May.
Talk to us about a continuity and security risk review. → Risk assessments
