Skip Navigation

  • Home
  • Contact us
  • FAQ
  • Glossary
  • Public key
  • Sitemap
  • Cymraeg
  • What's new
CPNI - Centre for the Protection of National Infastructure

Advanced search

  • About CPNI
    • What we do
    • Who we work with
    • Top ten guidelines
    • Job vacancies
    • CPNI events
  • The threats
  • Security planning
  • Methods of attack
  • Protecting your assets
  • Products and services
  • Research
Home > About CPNI > Top ten guidelines

Top ten guidelines

Whether you are creating, reviewing, or updating your security plans, keep these key points in mind:

  • carry out a risk assessment to decide on the threats you might be facing and their likelihood. Identify your vulnerabilities and the potential impact of exploitation.
    Click here to find out more about risk assessment
  • if acquiring or extending premises, consider security at the planning stage. It will be cheaper and more effective than adding measures later.
    Click here to find out more about creating a security plan
  • make security awareness part of your organisation's culture and ensure security is represented at a senior level.
    Click here to find out more about security planning
  • ensure good basic housekeeping throughout your premises. Keep public areas tidy and well-lit, remove unnecessary furniture and keep garden areas clear.
    Click here to find out more about physical security measures
  • keep access points to a minimum and issue staff and visitors with passes. Where possible, do not allow unauthorised vehicles close to your building.
    Click here to find out more about physical security measures
  • install appropriate physical measures such as locks, alarms, CCTV surveillance, complementary lighting and glazing protection.
    Click here to find out more about physical security measures
  • examine your mail-handling procedures
    Click here to find out more about security of mail and deliveries
  • when recruiting staff or hiring contractors, check identities and follow up references.
    Click here to find out more about personnel security measures
  • consider how best to protect your information and take proper IT security precautions. Examine your methods for disposing of confidential waste.
    Click here to find out more about electronic security measures
  • plan and test your business continuity plans, ensuring that you can continue to function without access to your main premises and IT systems.
    Click here to find out more about electronic security measures
13/09/2007
  • Accessibility |
  • Terms and conditions |
  • Privacy statement |
  • Data protection act |
  • Freedom of information |