Identifying Suspicious Activity
Security officers play a crucial role in detecting and preventing security threats. One of the most effective ways to stop incidents before they occur is by identifying suspicious behaviour early.
Terrorists and criminals often conduct hostile reconnaissance—gathering information on a target before carrying out an attack. Recognising and reporting unusual behaviour can disrupt their plans and save lives.
This guide will help security officers understand suspicious activity, identify common warning signs, and take appropriate action.
1. What is Suspicious Activity?
security breach.
Not all unusual behaviour is linked to a crime, but security officers must assess and report anything that appears out of the ordinary.
Common Types of Suspicious Activity:
📌 Unusual interest in security measures (e.g., CCTV, patrol routes, exits).
📌 Loitering or repeated visits to restricted or high-security areas.
📌 Taking photos, notes, or making sketches of sensitive locations.
📌 Asking unusual or overly specific questions about security procedures.
📌 Testing security responses (e.g., setting off false alarms, leaving unattended bags).
📌 Vehicles parked for long periods near entrances, exits, or loading docks.
📌 Attempts to disguise identity (e.g., wearing heavy clothing in warm weather).
💡 Security officers must stay alert and be able to differentiate between normal and suspicious behaviour.
2. Recognising Hostile Reconnaissance
Hostile reconnaissance is the deliberate observation of a site by criminals or terrorists to identify security weaknesses.
Signs of Hostile Reconnaissance:
🔹 Unusual interest in building security features, including cameras and access points.
🔹 Multiple visits to the same location without a clear reason.
🔹 People avoiding security staff or acting nervously.
🔹 Taking photos or videos of restricted areas.
🔹 Asking detailed security-related questions about procedures or access points.
🔹 Individuals trying to blend in while monitoring activity.
🔹 Sudden increase in false alarm activations, which could be testing security response times.
3. How to Disrupt Suspicious Activity
Security officers can deter hostile reconnaissance through active engagement and a strong security presence.
Effective Ways to Disrupt Suspicious Activity:
✔ Visible Security Presence – Maintain a strong and professional presence to deter potential threats.
✔ Regular Patrols – Conduct frequent and unpredictable patrols to monitor high-risk areas.
✔ Proactive Customer Service – Approach individuals politely but confidently and ask if they need help.
✔ Monitor CCTV Footage – Keep track of individuals exhibiting repetitive or unusual behaviour.
✔ Enforce Access Control – Challenge unauthorised individuals and verify credentials when necessary.
✔ Report Suspicious Activity – Notify supervisors and law enforcement if something seems unusual.
🚨 Security personnel should always trust their instincts and take immediate action if they notice something suspicious.
4. Responding to Suspicious Behaviour – ACT Procedure
Security officers should follow the ACT (Assess, Communicate, Take Action) procedure when identifying suspicious activity.
1️⃣ Assess the Situation
🔹 Observe the individual’s behaviour, body language, and actions.
🔹 Check if they have suspicious items (e.g., large bags, concealed objects).
🔹 Identify if they are loitering, monitoring security, or avoiding detection.
2️⃣ Communicate & Report
🔹 Alert your supervisor or control room.
🔹 Provide detailed descriptions (clothing, height, facial features, behaviour).
🔹 If immediate danger is present, call 999.
3️⃣ Take Action If Necessary
🔹 Politely engage the individual using customer service techniques.
🔹 If needed, ask for identification or report to law enforcement.
🔹 Do not put yourself at risk—follow site security protocols.
💡 Taking quick action can prevent security incidents before they escalate.
5. Reporting Suspicious Activity
Security officers must accurately document and report any suspicious behaviour.
How to Report Suspicious Activity:
📌 Non-Urgent Cases: Call the UK Anti-Terrorism Hotline (0800 789 321) or 101.
📌 Immediate Threats: Call 999 and provide:
- Location of the suspicious individual.
- Detailed description (clothing, age, gender, ethnicity).
- Observed behaviour (e.g., taking photos, monitoring access points).
- Any vehicle details (make, model, license plate).
