Contributed content: this article was written by a third-party contributor and does not necessarily reflect the views of Reporter Byte. Editorial and Advertising Policy
At a warehouse in the Midlands, the manager recently raised a concern about a back fire door that had stopped latching. For the engineer dispatched to assess it, however, the door mattered less than the weeks that had gone by without anyone picking up on the fault. A drooping hinge had left a narrow opening, more than once the door had been jammed open to let air in, and the alarm sensor on that entrance had sat untested from the day it was fitted, three years earlier.
On that occasion, no harm was done. No one got in, nothing went missing and there was nothing to write up. Still, gaps like this one are what let an opportunist succeed with very little effort, and they are much more widespread than owners tend to think.
Across the UK this year, just short of a third of businesses will be hit by crime of one sort or another, the Home Office’s Commercial Victimisation Survey reports. That total takes in a wide spread of offences, ranging from theft carried out by customers to violence against staff. Within it, the offences that good security exists to deter, burglary and vandalism, still represent a sizeable slice: in a typical year, 8% of firms record either a burglary or a failed attempt, and 8% more record vandalism. On a separate measure, ONS figures covering the twelve months to March 2025 put the number of non-domestic burglaries at 78,707 for England and Wales alone. A figure of that size is no trifle, and it is not shared out equally. Among the premises affected, some simply make softer targets, and what sets them apart tends to lie not in one plain failure but in a few shortcomings, some physical and some procedural, that pile up slowly.
Whether surveying a single shop unit or a warehouse complex of several buildings, specialists carrying out commercial site assessments find five familiar warning signs surfacing again and again. Viewed singly, none of them seems serious. Viewed together, they show clearly just how exposed a site is.
1. Where CCTV Leaves Blind Spots
At most businesses, cameras are already in place. At far fewer, those cameras actually watch the spots a would-be intruder would try first.
Surveyors know the pattern well: a commercial CCTV system put in years ago and expanded in stages as the building altered, while newer extensions, storage spaces or stretches of car park were never properly brought under its watch. During site visits, installers often come across analogue kit still in use whose image quality is too low to recognise a face or number plate from any worthwhile distance, recorders that retain footage for mere days before wiping it, and cameras aimed at the entrance to the car park, leaving a side loading bay with no coverage at all.
The solution need not be to “install more cameras.” In some cases, shifting two current units will close off a blind spot; in others, the ageing DVR should give way to an IP-based NVR system with sensible retention, remote access and alerts set off by motion. What counts is whether the coverage lines up with the building’s true weak spots, not merely with wherever the cameras went up a decade ago.
2. Inadequate and Inconsistent Lighting Outdoors
Of all the issues, this is among the simplest to put right and the most frequently missed. Shrubs left to grow until they cover a dusk-to-dawn sensor. A motion-activated floodlight dead for months and never reported, since the site is empty after dark and nobody would see it. Lights fitted when the building was new and never reassessed once the planting had matured or extensions had been added.
Beyond making visual monitoring harder, poor lighting actively weakens CCTV: in low light, even a good camera struggles unless it has enough illumination, or infrared support suited to the distance involved. After nightfall, a five-minute circuit of the boundary tells engineers more than most would predict: which parts are properly lit, which are lit from a poor angle, and which have slipped into darkness with nobody aware.
3. Alarms Nobody Has Tested or Serviced
Among experienced installers, finding an intruder alarm with no service visit for more than a year is so ordinary that it barely draws comment. Once a system has been fitted and commissioned, it tends to be neglected until something sets off a false alarm.
There are two grounds for concern. To begin with, sensors wear. PIR detectors may drift from their calibration, standby batteries grow too old to be relied on, and dual-technology detectors combining microwave with infrared detection must be recalibrated now and then to work properly. Second, and often more seriously, there is compliance to consider. Under national policy as it stands, systems maintained to BS EN 50131 and watched over by a receiving centre that holds approval from NSI or SSAIB qualify for police attendance. Should maintenance lapse and false alarms start to mount, police may drop that priority entirely, leaving the business reliant on nothing more than keyholders or a private response firm.
Seen properly, regular servicing is no formality. It is how the system carries on doing the work it was put in to do.
4. Stale and Uncontrolled Access Arrangements
For many owners, this is the most unexpected of the five, since it rarely resembles a security flaw until someone sets it all down. Master keys kept in service despite several rounds of staff leaving. Alarm codes shared with colleagues long ago and never altered since. Fobs given to people who have since left and never deactivated.
On site visits, consultants regularly meet managers who genuinely have no idea how many working keys or codes remain in circulation. No blame attaches to the manager. After years of staff changes without an access control system to log who arrived, who left and when, it is simply what happens.
Whether based on cards, fobs or biometrics, current access control technology does two jobs that a bunch of shared keys never could: it confines entry to set times and areas, and it leaves an audit trail. If an incident does happen, that log frequently marks the line between a clear account of events and guesswork.
5. Detection That Leads to No Response
In practice, an alarm that keeps ringing while nobody reacts is worth no more than having no alarm. Even now, engineers find sites where the intruder alarm runs on its own, linked to no monitoring station, trusting purely to the noise it makes to put off an intruder or alert a passer-by.
That gap disappears when the system is monitored, connected to a receiving centre and supported by an up-to-date keyholder list. Once a signal comes in, the ARC can check the alert is genuine, call keyholders in the proper order and, if the system qualifies, request police attendance. Without that connection, the speed of any response comes down to luck: whether someone happens to catch the alarm, whether they know who to contact, and whether that person can be got hold of.
Keyholder lists are also worth checking as a task in themselves. Engineers routinely turn up disconnected numbers, staff who no longer work there, or a contact sequence that fails to match who can really be on hand at short notice.
Joining the Dots
Viewed one by one, none of the five is a disaster. On its own, a slightly weak floodlight or an unreviewed list of keyholders will not finish off a business. In reality, though, they rarely come singly. On poorly lit sites, for example, the cameras are often old ones that were never replaced with something better to offset the darkness. A company that is casual about deactivating old fobs tends to be equally casual when it comes to alarm servicing. The problems build on each other.
Where a proper site review pays for itself is not in spotting one headline fault but in showing how the five areas connect and how each one shapes the rest. Take a warehouse with first-class cameras whose alarm is not monitored: it still has a critical weakness. Equally, a shop with a well-kept alarm but blind spots in its camera cover is still vulnerable to opportunist thieves the alarm cannot detect on its own.
For owners who recognise a problem or two from this list at their own premises, the logical course is simple: ask a qualified person to walk the site properly, rather than holding off until something happens that forces the question. In the opening story, the warehouse manager was lucky. The fault surfaced before anyone could take advantage. Not every business will have chance on its side, and with commercial burglary running at its current rate, chance hardly counts as a strategy.

