About Us
Mining Security Working Group
Background
The Mining Security Working Group (MSWG) was established in 2015 as a forum for subject matter experts and security practitioners within the extractive industry to collaborate and share insights and learnings of ongoing challenges, technological advances, loss learnings, and further the goals of industry initiatives such as the Voluntary Principles on Security and Human Rights and UN Declaration of Human Rights.
Purpose
Diversified extractive companies are consistently challenged to respond to an evolving and growing array of local, national, and increasingly international threats. Current threats in this dynamic world of instant communication range from resource nationalism to international epidemics, illegal detention, cyber-attacks, and physical emergencies at sites and offices around the world. The financial success and resilience of our industry is dependent on operating a sustainable business safely and securely to benefit all.
Strategy
This forum is held under the principle of the Chatham House Rule with participation focused on increasing the effectiveness of ensuring the safety and security of our people, property, product, propriety information, and reputation.
The overall goal of the MSWG is to create a strong network of industry professionals through unique sharing of experiences, best practices, and mutual support by providing practical strategic and operational-level solutions to mining security issues. Members of the MSWG are responsible for elevating our industry’s image, creation and promotion of security leadership best practices.
MEMBERSHIP
The MSWG is a closed group of experts and practitioners dedicated to enhancing the industry through best practice.
Including the Voluntary Principles on Security and Human Rights and UN Declaration of Human Rights.
New members require sponsorship by an existing member.
All information provided is confidential and for the sole use of membership companies.
Information cannot be shared externally without the approval of the representing company.
Membership is based on individual members not corporate entities.
Members must be working within a security role capacity in the mining industry, studying security or related courses at a recognized post-secondary institution, or be an invited vendor with products or services aimed at the mining industry.
All members and guests must sign a Non-disclosure Agreement.
Voluntary Principles - Security & Human Rights
The Voluntary Principles are the only human rights guidelines designed specifically for extractive sector companies. Participants in the Voluntary Principles Initiative — including governments, companies, and NGOs — agree to proactively implement or assist in the implementation of the Voluntary Principles.
Many governments have found that the Voluntary Principles are well-aligned with their policy objectives of protecting human rights, promoting development, and avoiding or reducing conflict.
Through implementation of the Voluntary Principles, companies are better able to align their corporate policies and procedures with internationally recognized human rights principles in the provision of security for their operations.
NGOs raise awareness of significant issues that need to be addressed related to human rights and security concerns and help companies and governments Participants successfully implement the Principles.
What are the Voluntary Principles on Security & Human Rights
Established in 2000, the Voluntary Principles on Security and Human Rights are a set of principles designed to guide companies in maintaining the safety and security of their operations within an operating framework that encourages respect for human rights.
The full text of the Voluntary Principles is set forth below.
Introduction
Governments of the United States and the United Kingdom, companies in the extractive and energy sectors (“Companies”), and non-governmental organizations (“NGOs”), all with an interest in human rights and corporate social responsibility, have engaged in a dialogue on security and human rights.
The participants recognize the importance of the promotion and protection of human rights throughout the world and the constructive role business and civil society — including non-governmental organizations, labor/trade unions, and local communities — can play in advancing these goals. Through this dialogue, the participants have developed the following set of voluntary principles to guide Companies in maintaining the safety and security of their operations within an operating framework that ensures respect for human rights and fundamental freedoms. Mindful of these goals, the participants agree to the importance of continuing this dialogue and keeping under review these principles to ensure their continuing relevance and efficacy.
Risk Assessment
The ability to assess accurately risks present in a Company’s operating environment is critical to the security of personnel, local communities and assets; the success of the Company’s short and long-term operations; and to the promotion and protection of human rights.
In some circumstances, this is relatively simple; in others, it is important to obtain extensive background information from different sources; monitoring and adapting to changing, complex political, economic, law enforcement, military and social situations; and maintaining productive relations with local communities and government officials.
The quality of complicated risk assessments is largely dependent on the assembling of regularly updated, credible information from a broad range of perspectives — local and national governments, security firms, other companies, home governments, multilateral institutions, and civil society knowledgeable about local conditions. This information may be most effective when shared to the fullest extent possible (bearing in mind confidentiality considerations) between Companies, concerned civil society, and governments.
Bearing in mind these general principles, we recognize that accurate, effective risk assessments should consider the following factors:
- Identification of security risks. Security risks can result from political, economic, civil or social factors. Moreover, certain personnel and assets may be at greater risk than others. Identification of security risks allows a Company to take measures to minimize risk and to assess whether Company actions may heighten risk.
- Potential for violence. Depending on the environment, violence can be widespread or limited to particular regions, and it can develop with little or no warning. Civil society, home and host government representatives, and other sources should be consulted to identify risks presented by the potential for violence. Risk assessments should examine patterns of violence in areas of Company operations for educational, predictive, and preventative purposes.
- Human rights records. Risk assessments should consider the available human rights records of public security forces, paramilitaries, local and national law enforcement, as well as the reputation of private security. Awareness of past abuses and allegations can help Companies to avoid recurrences as well as to promote accountability. Also, identification of the capability of the above entities to respond to situations of violence in a lawful manner (i.e., consistent with applicable international standards) allows Companies to develop appropriate measures in operating environments.
- Rule of law. Risk assessments should consider the local prosecuting authority and judiciary’s capacity to hold accountable those responsible for human rights abuses and for those responsible for violations of international humanitarian law in a manner that respects the rights of the accused.
- Conflict analysis. Identification of and understanding the root causes and nature of local conflicts, as well as the level of adherence to human rights and international humanitarian law standards by key actors, can be instructive for the development of strategies for managing relations between the Company, local communities, Company employees and their unions, and host governments.
- Equipment transfers. Where Companies provide equipment (including lethal and non-lethal equipment) to public or private security, they should consider the risk of such transfers, any relevant export licensing requirements, and the feasibility of measures to mitigate foreseeable negative consequences, including adequate controls to prevent misappropriation or diversion of equipment which may lead to human rights abuses. In making risk assessments, companies should consider any relevant past incidents involving previous equipment transfers.
Interactions Between Companies and Public Security
Although governments have the primary role of maintaining law and order, security and respect for human rights, Companies have an interest in ensuring that actions taken by governments, particularly the actions of public security providers, are consistent with the protection and promotion of human rights.
In cases where there is a need to supplement security provided by host governments, Companies may be required or expected to contribute to, or otherwise reimburse, the costs of protecting Company facilities and personnel borne by public security. While public security is expected to act in a manner consistent with local and national laws as well as with human rights standards and international humanitarian law, within this context abuses may nevertheless occur.
In an effort to reduce the risk of such abuses and to promote respect for human rights generally, we have identified the following voluntary principles to guide relationships between Companies and public security regarding security provided to Companies:
Security Arrangements
- Companies should consult regularly with host governments and local communities about the impact of their security arrangements on those communities.
- Companies should communicate their policies regarding ethical conduct and human rights to public security providers, and express their desire that security be provided in a manner consistent with those policies by personnel with adequate and effective training.
- Companies should encourage host governments to permit making security arrangements transparent and accessible to the public, subject to any overriding safety and security concerns.
Deployment and Conduct
- The primary role of public security should be to maintain the rule of law, including safeguarding human rights and deterring acts that threaten Company personnel and facilities. The type and number of public security forces deployed should be competent, appropriate and proportional to the threat.
- Equipment imports and exports should comply with all applicable law and regulations. Companies that provide equipment to public security should take all appropriate and lawful measures to mitigate any foreseeable negative consequences, including human rights abuses and violations of international humanitarian law.
- Companies should use their influence to promote the following principles with public security: (a) individuals credibly implicated in human rights abuses should not provide security services for Companies; (b) force should be used only when strictly necessary and to an extent proportional to the threat; and (c) the rights of individuals should not be violated while exercising the right to exercise freedom of association and peaceful assembly, the right to engage in collective bargaining, or other related rights of Company employees as recognized by the Universal Declaration of Human Rights and the ILO Declaration on Fundamental Principles and Rights at Work.
- In cases where physical force is used by public security, such incidents should be reported to the appropriate authorities and to the Company. Where force is used, medical aid should be provided to injured persons, including to offenders.
Consultation and Advice
- Companies should hold structured meetings with public security on a regular basis to discuss security, human rights and related work-place safety issues. Companies should also consult regularly with other Companies, host and home governments, and civil society to discuss security and human rights. Where Companies operating in the same region have common concerns, they should consider collectively raising those concerns with the host and home governments.
- In their consultations with host governments, Companies should take all appropriate measures to promote observance of applicable international law enforcement principles, particularly those reflected in the UN Code of Conduct for Law Enforcement Officials and the UN Basic Principles on the Use of Force and Firearms.
- Companies should support efforts by governments, civil society and multilateral institutions to provide human rights training and education for public security as well as their efforts to strengthen state institutions to ensure accountability and respect for human rights.
Responses to Human Rights Abuses
- Companies should record and report any credible allegations of human rights abuses by public security in their areas of operation to appropriate host government authorities. Where appropriate, Companies should urge investigation and that action be taken to prevent any recurrence.
- Companies should actively monitor the status of investigations and press for their proper resolution.
- Companies should, to the extent reasonable, monitor the use of equipment provided by the Company and to investigate properly situations in which such equipment is used in an inappropriate manner.
- Every effort should be made to ensure that information used as the basis for allegations of human rights abuses is credible and based on reliable evidence. The security and safety of sources should be protected. Additional or more accurate information that may alter previous allegations should be made available as appropriate to concerned parties.
Interactions Between Companies and Private Security
Where host governments are unable or unwilling to provide adequate security to protect a Company’s personnel or assets, it may be necessary to engage private security providers as a complement to public security.
In this context, private security may have to coordinate with state forces, (law enforcement, in particular) to carry weapons and to consider the defensive local use of force. Given the risks associated with such activities, we recognize the following voluntary principles to guide private security conduct:
- Private security should observe the policies of the contracting Company regarding ethical conduct and human rights; the law and professional standards of the country in which they operate; emerging best practices developed by industry, civil society, and governments; and promote the observance of international humanitarian law.
- Private security should maintain high levels of technical and professional proficiency, particularly with regard to the local use of force and firearms.
- Private security should act in a lawful manner. They should exercise restraint and caution in a manner consistent with applicable international guidelines regarding the local use of force, including the UN Principles on the Use of Force and Firearms by Law Enforcement Officials and the UN Code of Conduct for Law Enforcement Officials, as well as with emerging best practices developed by Companies, civil society, and governments.
- Private security should have policies regarding appropriate conduct and the local use of force (e.g., rules of engagement). Practice under these policies should be capable of being monitored by Companies or, where appropriate, by independent third parties. Such monitoring should encompass detailed investigations into allegations of abusive or unlawful acts; the availability of disciplinary measures sufficient to prevent and deter; and procedures for reporting allegations to relevant local law enforcement authorities when appropriate.
- All allegations of human rights abuses by private security should be recorded. Credible allegations should be properly investigated. In those cases where allegations against private security providers are forwarded to the relevant law enforcement authorities, Companies should actively monitor the status of investigations and press for their proper resolution.
- Consistent with their function, private security should provide only preventative and defensive services and should not engage in activities exclusively the responsibility of state military or law enforcement authorities. Companies should designate services, technology and equipment capable of offensive and defensive purposes as being for defensive use only.
- Private security should (a) not employ individuals credibly implicated in human rights abuses to provide security services; (b) use force only when strictly necessary and to an extent proportional to the threat; and (c) not violate the rights of individuals while exercising the right to exercise freedom of association and peaceful assembly, to engage in collective bargaining, or other related rights of Company employees as recognized by the Universal Declaration of Human Rights and the ILO Declaration on Fundamental Principles and Rights at Work.
- In cases where physical force is used, private security should properly investigate and report the incident to the Company. Private security should refer the matter to local authorities and/or take disciplinary action where appropriate. Where force is used, medical aid should be provided to injured persons, including to offenders.
- Private security should maintain the confidentiality of information obtained as a result of its position as security provider, except where to do so would jeopardize the principles contained herein.
To minimize the risk that private security exceed their authority as providers of security, and to promote respect for human rights generally, we have developed the following additional voluntary principles and guidelines:
- Where appropriate, Companies should include the principles outlined above as contractual provisions in agreements with private security providers and ensure that private security personnel are adequately trained to respect the rights of employees and the local community. To the extent practicable, agreements between Companies and private security should require investigation of unlawful or abusive behavior and appropriate disciplinary action. Agreements should also permit termination of the relationship by Companies where there is credible evidence of unlawful or abusive behavior by private security personnel.
- Companies should consult and monitor private security providers to ensure they fulfil their obligation to provide security in a manner consistent with the principles outlined above. Where appropriate, Companies should seek to employ private security providers that are representative of the local population.
- Companies should review the background of private security they intend to employ, particularly with regard to the use of excessive force. Such reviews should include an assessment of previous services provided to the host government and whether these services raise concern about the private security firm’s dual role as a private security provider and government contractor.
- Companies should consult with other Companies, home country officials, host country officials, and civil society regarding experiences with private security. Where appropriate and lawful, Companies should facilitate the exchange of information about unlawful activity and abuses committed by private security providers.
Universal Declaration of Human Rights
Additional Information
The Universal Declaration of Human RightsThe Universal Declaration of Human Rights (UDHR) is a milestone document in the history of human rights. Drafted by representatives with different legal and cultural backgrounds from all regions of the world, the Declaration was proclaimed by the United Nations General Assembly in Paris on 10 December 1948 (General Assembly resolution 217 A) as a common standard of achievements for all peoples and all nations. It sets out, for the first time, fundamental human rights to be universally protected and it has been translated into over 500 languages.
Preamble
Whereas recognition of the inherent dignity and of the equal and inalienable rights of all members of the human family is the foundation of freedom, justice and peace in the world,Whereas disregard and contempt for human rights have resulted in barbarous acts which have outraged the conscience of mankind, and the advent of a world in which human beings shall enjoy freedom of speech and belief and freedom from fear and want has been proclaimed as the highest aspiration of the common people,Whereas it is essential, if man is not to be compelled to have recourse, as a last resort, to rebellion against tyranny and oppression, that human rights should be protected by the rule of law,Whereas it is essential to promote the development of friendly relations between nations,Whereas the peoples of the United Nations have in the Charter reaffirmed their faith in fundamental human rights, in the dignity and worth of the human person and in the equal rights of men and women and have determined to promote social progress and better standards of life in larger freedom,Whereas Member States have pledged themselves to achieve, in co-operation with the United Nations, the promotion of universal respect for and observance of human rights and fundamental freedoms,Whereas a common understanding of these rights and freedoms is of the greatest importance for the full realization of this pledge,Now, Therefore THE GENERAL ASSEMBLY proclaims THIS UNIVERSAL DECLARATION OF HUMAN RIGHTS as a common standard of achievement for all peoples and all nations, to the end that every individual and every organ of society, keeping this Declaration constantly in mind, shall strive by teaching and education to promote respect for these rights and freedoms and by progressive measures, national and international, to secure their universal and effective recognition and observance, both among the peoples of Member States themselves and among the peoples of territories under their jurisdiction.
Article 1.
All human beings are born free and equal in dignity and rights. They are endowed with reason and conscience and should act towards one another in a spirit of brotherhood.
Article 2.
Everyone is entitled to all the rights and freedoms set forth in this Declaration, without distinction of any kind, such as race, colour, sex, language, religion, political or other opinion, national or social origin, property, birth or other status. Furthermore, no distinction shall be made on the basis of the political, jurisdictional or international status of the country or territory to which a person belongs, whether it be independent, trust, non-self-governing or under any other limitation of sovereignty.
Article 3.
Everyone has the right to life, liberty and security of person.
Article 4.
No one shall be held in slavery or servitude; slavery and the slave trade shall be prohibited in all their forms.
Article 5.
No one shall be subjected to torture or to cruel, inhuman or degrading treatment or punishment.
Article 6.
Everyone has the right to recognition everywhere as a person before the law.
Article 7.
All are equal before the law and are entitled without any discrimination to equal protection of the law. All are entitled to equal protection against any discrimination in violation of this Declaration and against any incitement to such discrimination.
Article 8.
Everyone has the right to an effective remedy by the competent national tribunals for acts violating the fundamental rights granted him by the constitution or by law.
Article 9.
No one shall be subjected to arbitrary arrest, detention or exile.
Article 10.
Everyone is entitled in full equality to a fair and public hearing by an independent and impartial tribunal, in the determination of his rights and obligations and of any criminal charge against him.
Article 11.
(1) Everyone charged with a penal offence has the right to be presumed innocent until proved guilty according to law in a public trial at which he has had all the guarantees necessary for his defence.
(2) No one shall be held guilty of any penal offence on account of any act or omission which did not constitute a penal offence, under national or international law, at the time when it was committed. Nor shall a heavier penalty be imposed than the one that was applicable at the time the penal offence was committed.
Article 12.
No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honour and reputation. Everyone has the right to the protection of the law against such interference or attacks.
Article 13.
(1) Everyone has the right to freedom of movement and residence within the borders of each state.
(2) Everyone has the right to leave any country, including his own, and to return to his country.
Article 14.
(1) Everyone has the right to seek and to enjoy in other countries asylum from persecution.
(2) This right may not be invoked in the case of prosecutions genuinely arising from non-political crimes or from acts contrary to the purposes and principles of the United Nations.
Article 15.
(1) Everyone has the right to a nationality.
(2) No one shall be arbitrarily deprived of his nationality nor denied the right to change his nationality.
Article 16.
(1) Men and women of full age, without any limitation due to race, nationality or religion, have the right to marry and to found a family. They are entitled to equal rights as to marriage, during marriage and at its dissolution.
(2) Marriage shall be entered into only with the free and full consent of the intending spouses.
(3) The family is the natural and fundamental group unit of society and is entitled to protection by society and the State.
Article 17.
(1) Everyone has the right to own property alone as well as in association with others.
(2) No one shall be arbitrarily deprived of his property.
Article 18.
Everyone has the right to freedom of thought, conscience and religion; this right includes freedom to change his religion or belief, and freedom, either alone or in community with others and in public or private, to manifest his religion or belief in teaching, practice, worship and observance.
Article 19.
Everyone has the right to freedom of opinion and expression; this right includes freedom to hold opinions without interference and to seek, receive and impart information and ideas through any media and regardless of frontiers.
Article 20.
(1) Everyone has the right to freedom of peaceful assembly and association.
(2) No one may be compelled to belong to an association.
Article 21.
(1) Everyone has the right to take part in the government of his country, directly or through freely chosen representatives.
(2) Everyone has the right of equal access to public service in his country.
(3) The will of the people shall be the basis of the authority of government; this will shall be expressed in periodic and genuine elections which shall be by universal and equal suffrage and shall be held by secret vote or by equivalent free voting procedures.
Article 22.
Everyone, as a member of society, has the right to social security and is entitled to realization, through national effort and international co-operation and in accordance with the organization and resources of each State, of the economic, social and cultural rights indispensable for his dignity and the free development of his personality.
Article 23.
(1) Everyone has the right to work, to free choice of employment, to just and favourable conditions of work and to protection against unemployment.
(2) Everyone, without any discrimination, has the right to equal pay for equal work.
(3) Everyone who works has the right to just and favourable remuneration ensuring for himself and his family an existence worthy of human dignity, and supplemented, if necessary, by other means of social protection.
(4) Everyone has the right to form and to join trade unions for the protection of his interests.
Article 24.
Everyone has the right to rest and leisure, including reasonable limitation of working hours and periodic holidays with pay.
Article 25.
(1) Everyone has the right to a standard of living adequate for the health and well-being of himself and of his family, including food, clothing, housing and medical care and necessary social services, and the right to security in the event of unemployment, sickness, disability, widowhood, old age or other lack of livelihood in circumstances beyond his control.
(2) Motherhood and childhood are entitled to special care and assistance. All children, whether born in or out of wedlock, shall enjoy the same social protection.
Article 26.
(1) Everyone has the right to education. Education shall be free, at least in the elementary and fundamental stages. Elementary education shall be compulsory. Technical and professional education shall be made generally available and higher education shall be equally accessible to all on the basis of merit.
(2) Education shall be directed to the full development of the human personality and to the strengthening of respect for human rights and fundamental freedoms. It shall promote understanding, tolerance and friendship among all nations, racial or religious groups, and shall further the activities of the United Nations for the maintenance of peace.
(3) Parents have a prior right to choose the kind of education that shall be given to their children.
Article 27.
(1) Everyone has the right freely to participate in the cultural life of the community, to enjoy the arts and to share in scientific advancement and its benefits.
(2) Everyone has the right to the protection of the moral and material interests resulting from any scientific, literary or artistic production of which he is the author.
Article 28.
Everyone is entitled to a social and international order in which the rights and freedoms set forth in this Declaration can be fully realized.
Article 29.
(1) Everyone has duties to the community in which alone the free and full development of his personality is possible.
(2) In the exercise of his rights and freedoms, everyone shall be subject only to such limitations as are determined by law solely for the purpose of securing due recognition and respect for the rights and freedoms of others and of meeting the just requirements of morality, public order and the general welfare in a democratic society.
(3) These rights and freedoms may in no case be exercised contrary to the purposes and principles of the United Nations.
Article 30.
Nothing in this Declaration may be interpreted as implying for any State, group or person any right to engage in any activity or to perform any act aimed at the destruction of any of the rights and freedoms set forth herein.
Guidance on Developing Security Management Plans
MSWG White Paper V.1
Introduction
This document provides guidance for developing a Security Management Plan (SMP) that supports implementation of the Voluntary Principles on Security and Human Rights (VPSHR), and the application of other international best practices. This information represents the best practices and practical experience of MSWG members gained from applying these measures around the world.
The Mining Security Working Group (MSWG) was established in 2015 as a forum for subject matter experts and security practitioners within the extractive industry to collaborate and share insights and learnings of ongoing challenges, technological advances, best practices, and further the goals of industry initiatives such as the Voluntary Principles on Security and Human Rights and UN Declaration of Human Rights.
There are many documents, available from a variety of sources, that address implementation of the VPSHR. They all discuss the need for polices and procedures that support the principles, but an organization must have a strong security foundation to ensure the success of the implementation process.
The MSWG is proud to support the initiatives of the Government of Canada, the Mining Association of Canada, and extractives industry leaders in promoting respect for human rights. We welcome the opportunity to share our collective security management experience with both practitioners and those assigned responsibility for security oversight.
Scope
Implementation and application of the VPSHR’s requires an organization to conduct Threat and Risk Assessments, develop department standards for proprietary and contract security, and carefully consider their relationship with, and support for, public security. To accomplish this, a well considered security management plan that follows industry best practices is required.
A Security Management Plan (SMP) is a document that outlines the organization’s security philosophy, strategies, goals, programs, and processes. It provides strategic guidance for the security department’s development and direction in a manner that is consistent with the company’s overall business plan. It should also outline risk assessment and mitigation plans.
The SMP guides the company’s actions in mitigating and protecting against risks of a security and human rights nature that could threaten communities, employees, facilities, operations, production, the reputation of the company and its global operations.
An important consideration of SMP development is aligning the mission and strategies of the security program with those of the organization. This ensures that the security function is not seen just as an expense, but is an integral part of the business and contributes to an environment of success.
The SMP is a tool that helps the security manager achieve agreement and buy-in from other business units. It articulates how the security department interrelates and supports all areas of the organization.
A well written plan provides direction, organization, integration and continuity to the security program. It demonstrates knowledge of the risks and thoughtful response planning.
The SMP is a strategic document. Whereas, a Site Security Plans (SSP) is a tactical document and is the logical extension of a SMP. The SSP articulates the specifics of physical security, guard force responsibilities, relations with public security and other components of security service delivery. Additional guidance on SSP development can be found in Appendix A of this document.
Security Management Plan Development
1. Principles of Security Management
Unity of Effort: Security management efforts should be a collaborative effort within the organization and should include input from all partners and stakeholders both internal and external.
Transparency: Information on how risk mitigation decisions are made should be shared with those that have a valid need to know.
Adaptability: Strategies and processes should be designed to allow for constant change.
Practicality: Security Managers cannot predict the future, nor can they eliminate all threats. They must be practical in what they choose to protect and evaluate the cost/benefit of countermeasures.
Customization: Solutions must meet the needs and respect the culture of the organization.
2. Developing a Blueprint
Management input on establishing security goals is imperative and should include service delivery expectations and core duties.
The security management framework should enhance preparedness, response, resilience, and support business continuity. Development of an SMP should include:
• Policy Commitment
• Alignment with the organization’s strategic objectives
• Legal and International Standards Requirements
• Organizational Profile (Mission, Production, Strategies)
• Risk Assessment - Internal and External Context
• Stakeholder Concerns
• Development of Plans and Budgets
• Security Personnel, Infrastructure Requirements and Interdependencies
• Security Options (countermeasure analysis)
• Cost/Benefit Analysis
• Assignment of Responsibility and Authority
3. Security Management
The security department should approach its mission with the understanding that good security and respect for the human rights of employees and communities are fully compatible. This should be articulated in a comprehensive management policy and plan that includes:
• A management policy commitment to conformance with international best practices for security management and voluntary standards such as the VPSHR.
• A commitment to prevent and reduce the likelihood and consequences of human rights violations.
• Responsibility and accountability for international best practices, such as the Voluntary Principles on Security and Human Rights (VPSHR) delegated to the security manager.
• Communication of the plan to all employees, and available to all stakeholders.
• Alignment with other policies (such as Ethics, Code of Conduct, Human Rights)
• Implementation and review framework for objectives, targets, and programs.
• Commitment to compliance with applicable legal and regulatory requirements.
• Response mechanism to allegations received via Grievance or Whistleblower Hotline.
4. Risk Management
Risk analysis is used to develop proactive and proportionate security plans that reduce the likelihood, probability and consequences of disruptive events. Security threat and risk assessments are prerequisites to determine the deployment of armed or unarmed security forces in support of the organization.
The goal is to develop a comprehensive and systematic process to pre-emptively mange the risk associated with business and security operations. Consideration must also be given to the impact of the organization’s activities on the communities in the area of influence. A key challenge is how to proactively manage identified risks, particularly in areas of weak governance, where the human or naturally caused events have undermined the rule of law.
Incident response planning and testing must be aligned with this process and include the development of training exercises, evaluation of protections in place, response protocols, mitigation requirements, recovery capabilities and current operational procedures.
5. Risk Assessment
A risk assessment is an exercise intended to identify security threats, evaluate the nature and extent of the risk posed by those threats, and potential vulnerabilities. Risk assessment assists management in selecting and prioritizing effective control measures. The goals of the risk assessment are to prevent unauthorized activity and the loss of assets, equipment, property, and reputation.
a. Establishing the External Context
Understanding the external context of the organization is essential to ensure the objectives and concerns of external stakeholders are considered when conducting a risk assessment. Assessment should encompass an organization-wide context, consider legal and regulatory requirements, and stakeholder perceptions.
The potential for conflict is inherent in mining and should be recognized and evaluated as part of the risk assessment process. Conflict is often the result of the interactions between multiple actors including companies, all levels of government, communities, non-governmental organizations (NGO’s), insurgents, and criminals. The root causes of conflict are complex and may have historical origins.
Evaluation of the external context should include conflict assessment produced by authoritative and independent organizations, such as the Heidelberg Institute for International Conflict Research. Operations in difficult environments must consider whether they have the right policies and systems in place to fulfill corporate obligations and responsibilities. The goal is to avoid causing, supporting or benefiting unlawful armed conflict, contributing to human rights abuses, and breaches of international humanitarian law.
The external context should include, but is not limited to:
• The actions of people outside the project who seek to take advantage of the opportunities presented by the development and operation of the company.
• Common criminal activity.
• Disruption of the project for economic, political, or social objectives; deliberate actions that have a negative impact on the efficient and safe operation of the company.
• Risks associated with the presence of private and public security forces and operations.
• Social, cultural, political, legal, regulatory, financial, technological, economic, natural and
competitive environment, whether international, national, regional or local.
• Key drivers and trends that could impact on the objectives of the organization.
• Relationships with, perceptions and values of external stakeholders.
• In extreme cases- terrorism, armed insurgency, coups, or war and the risks that a security response might produce.
b. Establishing the Internal Context
The internal context considers the operating environment in which the organization seeks to achieve its objectives. The risk management process should be aligned with the organization's culture, processes, structure and strategy. Internal context is anything within the organization that influences the way in which an organization will manage risk, and should consider:
• The objectives and mission of the organization.
• The potential for illegal, unethical, or inappropriate behaviour of project personnel or those directly affiliated with it.
• Common risks such as employee theft, workplace violence, labour unrest, and sabotage.
• Risks to employees or others associated with security response.
c. Risk Gap Analysis
Before beginning the process of managing risk, an understanding of the various interconnected contextual elements that affect the organization must be developed. Risk gap analysis helps establish the context and should include:
• Identification of applicable legal requirements and international standards.
• Evaluation of existing risk management practices and procedures, including those associated with subcontractors and supply chain.
• Evaluation of previous emergencies and incidents, along with the measures taken to prevent and respond.
• Risk identification, preventative measures, corrective measures, and recommendations for improvement.
6. Policy and Procedures
An organization should not assume that a security contractor will develop the policies, objectives, and procedures needed to protect their business, people, assets, and reputation. Management must take responsibility for determining the level of security required, identifying the assets to be protected, and support the implementation of security countermeasures. This responsibility should be documented and reviewed regularly, along with contractor performance.
Governance of the SMP should consider:
• Senior management accountability.
• Roles and responsibilities for all aspects of the SMP, including requirements, development, review, training, continuous improvement, and approval.
• Responsibility and resourcing for the management of the SMP.
• A security policy that articulates direction, accountability, authority, and oversight for the SMP.
• Implementation and awareness training for all employees to ensure maximum effective use of the SMP.
A Security Policy is a high-level document, signed by the CEO or other senior executives that outlines the company’s vision for securing its people, assets, and reputation. The document demonstrates management’s commitment to security and is a directive on ‘what’ the company wants to be accomplished.
The security policy covers all company offices and operations, and informs all managers of their responsibilities. This is a brief document that articulates broad concepts. It is the responsibility of the security manager to develop guidelines and procedures that explain ‘how’ the policy will be fulfilled.
Guidelines and procedures define and explain the actions required to assure conformance to the policy. Ideally, they eliminate any single point of failure, or subjective interpretation. They define mandatory compliance and will form the basis of induction and recurrent training for security staff and employees.
a. Records
A key part of security management is the maintenance of administrative records that includes:
• Contracts with private security providers
• MOU’s and material support documentation with public security
• Risk Assessment and Analysis
• Internal compliance reviews
• Equipment accountability
• Weapons authorizations
• Licensing
• Training
• Access Controls
• Secure storage of sensitive information
• Code of conduct and Ethics attestations
• Applicable International, National, and local laws
• All formal or informal public commitments made by the organization
b. Responsibility, Authority, and Job Descriptions
Responsibilities, authority, and job descriptions must be clearly articulated in the SMP. The SMP must be reviewed and signed by the responsible executive or senior manager to whom the security manager reports. These documents should include responsibility to document and report all interaction with public security, contractors, public authorities, and community representatives.
The organization should strive to attract and retain security personnel with the skill, knowledge, and ability to implement the desired level of security. As the greatest contributor to poor performance is a lack of training the organization should commit to the professional development of security personnel to improve job performance, service delivery, reduce complaints, and increase retention.
7. Security Supervision and Control
The SMP must outline the department structure and responsibility, and articulate:
• Lines of control, accountability, and supervision for the security department.
• Supervision of the front-line guard force.
• Responsibility for security information sharing and communication.
The SMP should outline the planning and coordination activities between security and other departments (Community Relations, Human Resources, and Government Relations) and business units, which may involve participation in security risk assessments to regular meetings. It is important to ensure that all security activities are coordinated and supervised through a single point of control and command, and operate within consistent guidelines and procedures. Security cannot be effective if it serves two masters.
See Appendix A, Bridging Security Management and Site Security Plans, for connecting the strategic management plan with department operations best practices.
Guidance on Developing Security Management Plans
Key Reference Documents
Reference 1
Voluntary Principles on Security and Human Rights. Audit Protocol to Assess Compliance with Key Performance Indicators (June 2013)
Requires an organization to prepare:
• Statement of commitment or endorsement of the VPSHR.
• Relevant policies, procedures, and/or guidelines (or any changes thereto from the previous reporting year) for implementing the Voluntary Principles.
• Security and human rights risk assessments.
• Procedure and mechanism to report security-related incidents with human rights implications by public/private security forces relating to the company’s activities.
• Include the VPSHR when entering into relations or contracts with public/private security providers.
• Address security related incidents with human rights implications by public/private security forces relating to the company’s activities.
• Apply VPSHR standards in the selection of private security providers, formulation of contractual agreement with private security providers, and all arrangements with public security forces.
Reference 2
International Finance Corporation Performance Standard 4 (Community, Health, Safety, and Security)
Requires companies to:
• Assess the security risk their operations may have or could create for communities.
• Develop ways to manage and mitigate these risks.
• Manage private security responsibly.
• Engage with public security.
• Consider and investigate allegations of unlawful acts by security personnel.
Also:
• Understand the organization’s risk, security, and human rights protection requirements.
• Establish polices and objectives to manage risk.
• Implement operating controls to manage risk, security measures, and respect for human rights.
• Monitor and review the performance and effectiveness of security plans (administration and operations).
• Promote continuous improvement based on object measure.
Reference 3
IFC Good Practice Handbook, Use of Security Forces: Assessing and Managing Risks and Impacts, Guidance for the Private Sector in Emerging Markets
• Managing Private Security
Decisions regarding the type, number, responsibilities, and arming of private security forces should flow from an assessment of the security risks and appropriate responses.
• Equipping
Do guards have what they need to do their jobs properly and safely? This usually means a uniform, identification, and a communication device (typically a radio). In some cases, it includes non-lethal weapons, such as pepper spray. The decision to arm guards with lethal force, such as a gun is a serious one that should derive from the assessment of risk and be accompanied by a dedicated training program.
• Vetting
Who is providing security? Does anything in the guards’ background give cause for concern? Companies need to make reasonable inquiries to ensure that no guard has a history of past abuse or dishonesty. This may involve background checks or crosschecking with other companies, domestic or foreign government officials, UN missions, etc., as appropriate to the country context.
• Ensuring the appropriate use of force
Do guards know what is expected of them? Are they prepared to react with appropriate and proportional force in any situation? Companies should use their policies and procedures, reinforced by training, to provide clear instructions to directly employed guards. This can be as simple as including a clause in the employment contract setting out expectations and following up with training.
• Training
Training should focus on appropriate behaviour and use of force. In low-risk contexts this can involve just a brief review of policies and procedures, recorded in a log, to ensure that guards understand how to respond to common interactions and scenarios.
• Monitoring
Are guards performing professionally and appropriately? Companies should check to confirm that policies and procedures remain relevant, and that guards are aware of and following them. Companies contracting security services still retain oversight responsibility of third-party security providers to ensure appropriate vetting, use of force, training, equipping, and monitoring of guards.
• Manage the Relationship with Public Security
Particularly in low-risk contexts, companies may have limited interactions with public security forces—this is especially true regarding national forces, such as the armed forces. Companies are likely to need support from at least the local police in the case of an incident, and it’s important to understand who will be responding, and how. The focus is on assessment and engagement, building on key questions, such as: When are public security forces likely to be involved? (E.g., only when called on, or potentially in other cases as well?) What type of individual or unit is likely to respond? How are they likely to respond? (E.g., what kind of capacity, mandate, reputation, etc., do they have, and how might this apply to likely scenarios involving the company?).
• Engagement
Are there opportunities to establish a relationship with police or other relevant public security forces? Companies are encouraged to reach out to authorities—preferably in advance of any issue—to understand potential deployments and, to the extent possible, to promote the appropriate and proportional use of force. In low-risk contexts, this may involve simply making introductions to the local police commander and initiating a discussion about when and how authorities are likely to respond to incidents at the company or involving company personnel.
• Documentation
Companies should document their engagement efforts, whether or not they are successful (e.g., in a basic meeting log with dates, attendees, and key topics).
• Threat and Risk Assessment
Research and analysis of the country context: Consideration of potential risk in the broader operating environment may include inherent country risk, the rule of law, criminality, physical environment, socioeconomic context, governance, conflict situation, and industry-specific information that could affect the security situation. In addition to country-specific risk, it is also advisable to review the strength and reputation of existing public security forces. Research and analysis of the national and/or local security situation: Analysis of the security situation often considers the availability and professional reputation of private security, track record and human rights reputation of public security forces (such as police or military), and any other significant elements in a company’s particular circumstances.
• Prevention and Mitigation Measures
Developing and refining prevention and mitigation measures often requires consideration of how to address the wider range of potential impacts coming out of the scenarios, including a prioritization process. The risk response chart and heat map may assist a company in determining which risks and impacts to address as the highest priority. Including Community Relations staff in the design of mitigation measures can increase their overall effectiveness. Chapter V of this document (Preparing a Security Management Plan) provides a broad
outline for security management plans.
Reference 4
Other Reference Documents
• ANSI/ ASIS RA1.2015 Risk Assessment Standard:
https://webstore.ansi.org/Standards/ASIS/ANSIASISRIMSRA2015
• ANSI/ ASIS Management System for Quality of Private Security Company Operations:
http://www.acq.osd.mil/log/ps/.psc.html/7_Management_System_for_Quality.pdf
• ASIS General Risk Assessment Guideline:
• https://www.asisonline.org/publications/sg-asis-general-security-riskassessment-guideline/
• ASIS Private Security Officer Selection and Training:
• Auditing Implementation of the VPSHR, Global Compact Network Canada:
• Contemporary Security Management (John Fay, Elsevier):
https://www.elsevier.com/books/contemporary-security-management/fay/978-0-12-381549-1
• ICRC and DCAF’s Security and Human Rights Toolkit:
http://www.securityhumanrightshub.org/content/toolkit
• International Association of Oil and Gas Producer’s Report on Firearms and the Use of Force:
http://www.ogp.org.uk/pubs/320.pdf
• International Code of Conduct for Private Security Service Providers:
• MIGA’s Implementation Toolkit for Major Project Sites:
https://www.miga.org/documents/vpshr_toolkit_v3.pdf
• OECD Due Diligence Guidance for Responsible Supply Chains of Minerals from Conflict-Affected and High-Risk Areas:
http://www.oecd.org/corporate/mne/mining.htm
• Risk Analysis and Security Countermeasure Selection (Thomas Norman, CRC Press):
• Risk Analysis and the Security Survey (James Broder, Elsevier):
https://www.elsevier.com/books/risk-analysis-and-the-security-survey/broder/978-0-12-382233-8
• UN Basic Principles on the Use of Force and Firearms by Law Enforcement Officials:
www.ohchr.org/EN/ProfessionalInterest/Pages/UseOfForceAndFirearms.aspx
• UN Code of Conduct for Law Enforcement Officials:
www.ohchr.org/EN/ProfessionalInterest/Pages/LawEnforcementOfficials.aspx
• Voluntary Principles on Security and Human Rights:
http://www.voluntaryprinciples.org/resources/
• Voluntary Principles Implementation Guidance Tool:
http://www.voluntaryprinciples.org/wp-content/uploads/2013/03/VPs_IGT_Final_13-09-11.pdf (English)
http://www.voluntaryprinciples.org/wp-content/uploads/2013/03/IGTSPANISH1.pdf (Spanish)
• World Gold Council Conflict-free Gold Standard
https://www.gold.org/who-weare/our-members/responsible-gold/conflict-free-gold-standard
Guidance on Developing Security Management Plans
Appendix A Bridging Security Management and Site Security Plans
Bridging Security Management and Site Security Plans
1. Private Security Force Management
The role of private security is to provide preventive and defensive services, protecting company employees, facilities, equipment, and operations. Private security personnel have no law-enforcement authority and must not encroach on the duties and responsibilities reserved for public security forces.
a. Contract Security
A contract provides the legal basis for the relationship between the organization and the security contractor. The organization is responsible for all activities outsourced to another entity, and requires constant oversight and supervision. Responsibility to respect human rights and comply with the law cannot be sub-contracted to a third party. The organization is ultimately responsible for the actions of a contractor. The contract should specify the responsibilities, terms, and conditions under which the contractor is to provide security services.
The contract should clearly define:
• A commitment to abide by the same obligations as held by the company.
• Confidentiality and conflict of interest requirements.
• A process for assessing risk and reporting undesirable and disruptive events.
• Description of the services to be performed by the contractor.
• The requirement for human rights training prior to entering into service.
• The mechanisms in place to ensure that physical force is only used when
strictly necessary and to an extent proportional to the threat.
b. Selection of Private Security Contractor
In selecting a security provider, the organization must perform proper due diligence that includes screening for institutional reputation, training standards, procedures for screening employees, and any history of allegations of human rights abuses or other criminal behaviour.
Only retain the services of competent security contractors committed to operating in a manner consistent with human rights standards, such as the VPSHR. The organization is responsible and liable for the contractor’s work and personnel. You cannot sub-contract away the responsibility to respect human rights. The organization should establish and document the criteria for screening and selecting contract security. It is the responsibility of the organization to ensure the contract conforms to applicable laws and all other contractual obligations.
Potential contract security providers must be investigated to ensure:
• A demonstrated history of carrying out security activities in compliance with relevant laws.
• Their ability to protect the client’s people, property, and reputation.
• Adequate resources and qualified personnel are provided to meet operational objectives.
• Transparency, accountability, and adequate supervision of their personnel.
• All financial, statutory, and remuneration benefits for their personnel are fulfilled.
• Requisite registrations, licenses, and permits are current.
• Accurate personnel and equipment records are maintained.
c. Active Oversight of Contractor Performance
To ensure proper performance, the organization must undertake regular audits, assist with training, inquire into any credible allegations of abuse or wrongdoing, and monitor performance on an ongoing basis.
d. Selection, Background Screening, and Vetting of Security Personnel
Security personnel occupy positions of confidence. The company should establish documented procedures for pre-employment background checks and vetting. Minimum standards must be established and procedures implemented to screen out applicants who do not meet the qualifications based on their knowledge, skills, abilities, and experience. This selection process must form part of all contracting to ensure no person credibly implicated in human rights abuse is hired.
Additionally, valid background checks must be completed on potential security providers to screen for allegations of past abuses, inappropriate use of force, or other criminal activity and wrongdoing. The screening and vetting process should be based on the nature of the job for which the candidate is being considered, the person’s level of authority, and area of specialization. Screening should take place before a candidate is offered a position and starts work. Candidates should sign the proper authorizations and consents before performing background screening.
Security personnel with access to sensitive information and operations should be subjected to more stringent background checks. Privacy and confidentiality of all personal information must be protected.
e. Security Guard Background Screening
Verification of identity and personal history should include:
• Home address check
• Employment records
• Electronic media
• Criminal and civil records history
• Human rights violations
• Motor vehicle records
• Credit report
• Sexual offender database
• Government and industry sanction
• Industry licensing records
f. Verifying Experience and Qualifications
Experience and qualification verification should consider, but is not limited to, the following:
• Education
• Employment history
• Licensing/ Certification/ Registration
• Personal references
• Supervisor and co-worker interviews
• Military/Police service
Exclusions, unavailable, unreliable, or unsuitable information should be documented.
g. Screening and Vetting
Establish clearly defined criteria to evaluate:
• Substance abuse.
• Physical and mental fitness.
• Suitability to carry weapons.
• Resilience to stressful and adverse conditions.
• Criminal association and susceptibility to corruption.
h. Competence, Training and Suitability
The greatest contributor to poor performance is a lack of training. The security department should identify the knowledge and skills required by proprietary and contract staff to perform the tasks assigned. The department should establish its own minimum induction training standard as national or regional standards may not meet the requisite competencies. Induction training must always be completed before entering into service. Contractors must demonstrate that their employees have received and satisfactorily completed the training. Monitoring and recurrent training should be conducted on an ongoing basis to identify opportunities for improvement and demonstrate due diligence.
The SMP should commit the organization to maintain the highest standards of guard force technical and professional proficiency through a comprehensive training program. SSP’s should outline the training responsibilities of both the security provider and the company and the annual schedule.
Training should include respect for human rights, grievance mechanisms, ethical conduct, Use of Force, and competence with issued offensive and defensive weapons. Practical, scenario-based training that reinforces decision making in conditions that reflect the operating environment is recommended. Training should include procedures for prevention and mitigation, response, incident documentation, communication, and accountability. The company should review contractor training programs and, where necessary, augment the training through the use of qualified third parties or direct instruction.
At a minimum, security personnel should receive induction and recurrent training in:
• Basic guarding skills
• Guard-post orders and procedures
• Code of Conduct, Ethics, and Human Rights
• Use of Force
• Health, Safety, and Environment
• Use of defensive and offensive weapons (as applicable)
All weapons training should be conducted to a written standard appropriate for the weapons issued. Training should include scenario-based training, mechanical and operation training that includes malfunctions, and live fire qualification. Training should be conducted not less than annually, and more frequently if required by law.
2. Use of Force
The use of force by private security is only sanctioned for preventive and defensive purposes in proportion to the nature and extent of the threat. When necessary to arm the guard force, the organization will ensure high levels of technical and professional proficiency and a clear understanding of the rules for the use of force. This requires recurrent training on the Use of Force guidelines, proportionally, and respect for human rights.
The authorization to carry weapons should only be given to qualified personnel in accordance with the terms and conditions of a contract. Weapons should be issued only after the background and qualifications of personnel have been established, and training on the specific weapon issued has been satisfactorily completed. This should only be authorized when there is a reasonable expectation of threat to life based on risk assessment. Weapons training, deployment, and necessity to carry must comply with host country law. Evaluation of the necessity to deploy weapons consider the possible consequences of accidental or indiscriminate use of weapons.
Use of force must always be reasonably necessary, proportional, and lawful. Rules for the use of force must be reviewed to ensure they meet the appropriate national or regional legal standard. Options for non-lethal, less-lethal, and lethal force must be considered in the local context and legal requirements. Use of force rules should be outlined in all contracts with private security providers.
Contract provisions should include:
• Parameters for the use of physical force.
• The circumstances under which persons are authorized to carry weapons, and the weapons and munition permitted.
• A commitment to ensure weapons are only used in appropriate circumstances and in a manner likely to decrease the risk of unnecessary harm.
• Prohibition of the use of unauthorized weapons and munition.
• Regulations for the control, storage, and accountability of issued weapons.
• Graduated response guidelines on the use of force.
• Emphasize the use of de-escalation techniques.
• A reporting mechanism for all use of force incident.
a. Use of Force Training
Rules on the use of force must be incorporated into both induction and recurrent training programs. Records of training and demonstrated competence are to be maintained. Use of force training should emphasize:
• The use of lethal force only in circumstances of self-defence or defence of others against the imminent threat of death or serious injury, never to be used in defence of property;
• Force should be reasonably necessary, and used as a last resort;
• Force should be proportionate to the threat, and only deployed based on the totality of the circumstance to counter a threat;
• Use of force is only used to attain lawful objectives.
Training on a use of force continuum should outline, but is not limited to:
• Security presence;
• Verbal commands;
• Open-hand controls;
• Non-lethal weapons;
• The threat of lethal force;
• Use of lethal force.
Use of force training must reinforce the premise that private security is not a substitute for public security and reinforce the limitations of their authority. Training programs must emphasize that lethal force is justified only under conditions of extreme necessity, and as a last resort when all lesser means have failed or cannot reasonably be employed. Lethal force is only to be used in self-defence in the defence of others, or when it reasonably appears necessary to prevent the commission of a serious offence involving grave threat to life or serious bodily harm.
The defence of others may include the use of lethal force when it is reasonably necessary to prevent the theft or sabotage of inherently dangerous property, the loss or destruction of which would present an imminent threat of death or serious bodily harm. The legal authority may also authorize the use of lethal force if it reasonably appears to be necessary to prevent the sabotage or destruction of critical infrastructure, the damage to which would create an imminent threat of death or serious bodily harm or injury.
b. Management of Weapons and Munitions
The security department is responsible for establishing, maintaining, and documenting procedures that ensure:
• All weapons and munition are acquired lawfully;
• Constant accountability for all weapons and munition issued and returned;
• Weapons and munition issued are proportionate to the risks identified and tasks to be performed, and meet all legal standards;
• Appropriate provisions are made for storage, issue, and maintenance;
• Contractors deploy only weapons and munition approved by the organization;
All persons authorized to carry a weapon have a valid license and current training.
c. Apprehension and Detention of Criminals
As part of the Use of Force training, security personnel must be trained on how to deal with persons apprehended or detained in the course of executing their duties. They must understand the limits of their authority and that this will typically only include person interdicted during an attack on personnel and property under their lawful protection. Training should emphasize the requirement to treat apprehended personnel humanely and respect their human and constitutional rights.
Training will include measures for protecting the apprehended person from violence, and immediate reporting and transfer to competent authorities. Incident reports must be prepared that includes the person’s identity, alleged offence, to whom they were transferred, first aid or assistance provided, and their condition at the time of transfer.
Persons detained may be searched by security staff to ensure their safety against weapons and to safeguard evidence. Search procedures must ensure the dignity and humane treatment of the detainee, and will distinguish between minimally invasive and comprehensive searches. All persons detained should receive immediate first aid as required.
3. Uniforms
All security team members should adopt the use of uniforms that indicate their department affiliation. Private security uniforms and equipment, such as patrol vehicles, should be of a pattern, colour, and markings that distinguish them from public security. Security staff and vehicles should have unique badge numbers that facilitate identification and enables transparent reporting.
Uniforms project a positive image about the organization and encourage professional and responsible conduct. There may be s circumstances where a risk assessment indicates it is advisable to use non-uniformed security. When a discreet approach is required security personnel should not openly carry firearms and maintain on their persons non-transferable identification.
The presence of uniformed security is the first option on every use of force continuum. Uniforms and marked vehicles indicate to employees, the public, and public security that team members have authorization and responsibility to protect company personnel and assets.
4. Communication
Effective communication is the most important component in preventing, managing, and reporting security events. Communication plans ensure adequate control, coordination, and functionality for security operations.
The SMP should outline communication procedures and processes that consider:
• Internal communications within departments, contractors, clients, and stakeholders;
• Receiving, documenting, and responding to communications from external sources;
• Structured communication with public security and emergency responders;
• Dedicated and secure communication during disruptive and emergency events.
The organization should establish and communicate its internal and external complaints and grievance procedures. Security personnel must be trained to receive and report complaints and grievances and ensure confidentiality. Unreported and unresolved complaints from the community can quickly become disruptive events.
5. Occupational Health and Safety
A SMP should commit to providing security staff with a safe and healthy working environment, recognizing the inherent dangers presented by the environment and duties. It should emphasize the reasonable precautions to be undertaken to protect all persons working on behalf of the organization, particularly those in high-risk positions, such as security.
6. Incident Response Management
An appropriate administrative structure should be implemented to deal with incident management and response effectively. The SMP should articulate the department management structure, authority for decisions, responsibility for implementation, and reporting. The organization should have an Incident Management Team (IMT) to lead event response under clear direction of management or their delegates. The SMP should outline the role of security within the IMT and include:
• Planning
• Incident response management
• Human resource management
• Health, safety, and medical response
• Information management
• Internal and external communications
• Critical support functions
7. Incident Response
The security department is responsible for developing incident response and management protocols as part of the company risk assessment process. Incident response and management must consider:
• Safeguarding life, property, and reputation of the organization.
• Respect for human rights and human dignity.
• Identification and reporting of potentially disruptive events, mitigation and recovery plans.
• Notification and mobilization procedures for management, stakeholders, and authorities.
The organization should develop procedures for reporting and investigating incidents that includes:
• Time and location.
• The identity of persons involved, including contact information.
• Injuries and damage sustained.
• Circumstances leading up to the event.
• Response measures deployed.
• Cause of all internal and external injuries and damage.
• Root cause analysis.
• Corrective and preventative actions.
The SMP and SSP should outline responsibilities and timelines for conducting inquiries on allegations and incidents, including:
• A commitment to an expeditious inquiry into any allegations of abuse or wrongdoing.
• Private security contractor conducting investigations into incidents or allegations, and the reserved right of the organization to conduct an independent inquiry.
• Inquiry findings will include a recommendation of appropriate disciplinary action and policy or procedure changes.
8. Performance Evaluation and Continual Improvement
Performance evaluation involves the measurement, monitoring, and evaluation of the department and contractor service delivery, quality assurance, legal compliance, and respect for human rights. Metrics include adherence to policies, and objectives, and performance targets.
Performance indicators should be developed to measure both the management system and operational compliance. Indicators should provide useful information that identifies both successes and areas requiring improvement. They should also identify how significant risks are being managed.
Evaluation should consider:
• Validation of management plans and physical security strategies.
• Competence of security personnel.
• Response capabilities.
• Contract compliance.
• Training and preparedness.
The SMP and SSP should indicate that corrective action will be identified and communicated in a timely manner and should address root cause failure. Responsibility for corrective action and a completion date should be assigned. Findings that exceed expectations should be noted as best practices and shared across the organization. Continual improvement should consider changes in risks, activities, and operations that effect service delivery.
Procedures, systems, and training must be adapted to address:
• Policy changes.
• Changes to hazards, risks and threats.
• Personnel and contract changes.
• Process and technology changes.
• Lessons learned from exercises and training.
• Lessons learned from disruptive events.
• Changes to the external environment (such as political, social, legal).
9. Managing Relations with Public Security
Public security forces have the sole responsibility for responding to and investigating criminal activity, particularly incidents in the public interest. They also have the primary responsibility for public order, including protests, demonstrations and civil disobedience. For incidents involving criminal violations, potentially violent confrontations, or demonstrations, they may be requested to respond to protect company personnel and property. It is important that public security be briefed on the organization’s policies and commitments before they are deployed to an incident.
The company should maintain constructive relations and good communication with public security forces. If public security forces are assigned to the project, it is important that an MOU be established to ensure transparency. The MOU should describe provisions for equipment transfers, material support, and the role of the public security force in protecting company assets. Joint contingency planning, and coordination mechanisms should be developed.