How to Protect a Vacant Commercial Property

A vacant commercial property can deteriorate quickly when damage, intrusion, water leaks or fire hazards are not identified. Locking the doors and cancelling routine activity is not a complete security plan.

Northamptonshire Fire and Rescue Service explains that vacant properties present different fire risks because the absence of activity, checks and an active presence can allow problems to develop. Property owners and managers should use a documented, risk-based plan that covers security, fire safety, access and escalation.

Start with a formal handover into vacancy

The transition from occupied to vacant use should be controlled. Record the condition of the building, the people who retain access and the systems that remain operational.

The date the premises became vacant and the expected duration.
Current ownership, management and insurance contacts.
All authorised keyholders, contractors and visitors.
The condition of doors, windows, gates, roofs, fences and external lighting.
Alarm, detection, CCTV and communication systems that remain in use.
Utility status and any isolation arrangements.
Fire-safety responsibilities and the current fire risk assessment.
Known defects, hazardous materials, plant, stock or valuable items remaining on site.

Photographs and a dated condition record provide a baseline for later inspections and help distinguish new damage from existing defects.

Control every route into the premises

Unauthorised entry is more likely where a property appears unmanaged. Review the full perimeter rather than only the main entrance.

Secure external doors, loading bays, fire exits and accessible windows without compromising legal fire-safety requirements.
Repair damaged fencing and gates and remove items that assist climbing or forced entry.
Protect roof access, service yards, basements and concealed rear areas.
Change or control keys, codes, passes and access permissions when occupiers leave.
Use signage that provides necessary warnings and contact information without advertising sensitive details.
Keep access routes clear for authorised inspections and emergency services.

Physical improvements should be proportionate and agreed with the owner, insurer and any competent fire-safety adviser. Security measures must not create a new safety hazard.

Review fire and utility risks

Vacancy does not remove fire-safety duties automatically. GOV.UK identifies employers, owners, landlords, occupiers and people with control of non-domestic premises as potential responsible persons. The responsible person must carry out and review a fire risk assessment, maintain appropriate measures and plan for emergencies.

Confirm which fire-detection, alarm and suppression systems must remain operational.
Remove combustible waste and unnecessary materials.
Control hot works and contractor activities through an authorisation process.
Check for damaged wiring, water ingress, gas risks and unsafe plant.
Agree whether utilities are retained, isolated or monitored.
Keep fire-service access and relevant information available.

A security operative can report visible concerns but should not be presented as a substitute for a competent fire risk assessor, electrician, engineer or other specialist.

Set an inspection schedule based on risk

The inspection frequency should reflect the property, location, insurer requirements, known incidents, weather exposure and consequences of a problem remaining undetected. A standard weekly visit may be inadequate for one site and excessive for another.

The inspection specification should define whether the visit is external only or includes authorised internal areas. It should also identify unsafe areas that must not be entered.

What should a vacant-property inspection check?

Evidence of forced entry, trespass, occupation or attempted access.
Condition of doors, windows, shutters, gates and perimeter barriers.
New graffiti, vandalism, fly-tipping or damage.
Visible signs of fire, smoke, scorching or deliberate ignition.
Water leaks, flooding, storm damage or unusual smells.
Alarm faults, lighting failures or signs that utilities have been interfered with.
Post, deliveries or material left in a way that signals prolonged vacancy.
Vehicles, people or activity inconsistent with authorised use.
Changes from the previous inspection, supported by photographs where appropriate.

The operative should know what requires immediate escalation, what may be reported routinely and when emergency services or a specialist contractor should be contacted.

Use patrols as part of a wider plan

Mobile patrols can provide a visible presence and documented checks at varied or scheduled times. They are most effective when integrated with clear keyholding, alarm, access and escalation arrangements.

Patrols cannot guarantee that an incident will not occur between visits. The customer should understand the limits of an intermittent service and consider whether additional physical measures, alarms or a guarding presence are justified.

Manage keys and contractor access

Vacant properties often attract multiple contractors, agents, surveyors and prospective occupiers. Uncontrolled access can undermine the security plan.

Maintain an authorised access list and require advance notification where practicable.
Record key issue, return and any copied keys.
Use unique codes or credentials where the system permits them.
Cancel access promptly when authority ends.
Require contractors to report changes, defects and any failure to secure the premises.
Confirm who completes the final lock-up after every visit.

Make reporting useful

An inspection report should show that the agreed checks were completed and enable the property manager to act. It should include the date and time, areas inspected, observations, photographs where relevant, immediate actions and outstanding issues.

Repeated defects should be tracked rather than reproduced in each report without ownership. A simple action log can identify the issue, person responsible, target date and closure evidence.

Review the plan when circumstances change

The risk profile changes when a property is marketed, contractors begin work, utilities are isolated, weather causes damage or occupation is planned. Review the inspection and security plan after incidents and at defined intervals.

Tornado FM Ltd provides vacant-property inspections, mobile patrols, keyholding, alarm response, lock and unlock services, security assessments and manned guarding. The service scope should be agreed after considering the property condition, access arrangements and required escalation process.

Discuss the location, condition and inspection requirements of your vacant property with Tornado FM Ltd.

Related Tornado FM Ltd pages

A keyholding and alarm response service gives an authorised security provider responsibility for controlled keys or access information and a defined role when an alarm or attendance request is received. The service should protect the customer’s premises without transferring unclear risks to staff or leaving critical decisions unresolved.

BS 7984-1:2016 provides recommendations for the management, staffing and operation of keyholding and response services. The SIA also identifies keyholding as a licensable activity in relevant circumstances. Buyers should therefore examine licensing, key control, attendance procedures and reporting as a connected service.

Secure key and access-information control

The provider may hold physical keys, access cards, codes or other information that could enable entry. The customer should understand how these items are collected, identified, stored, accessed and returned.

Use a controlled reference that does not unnecessarily identify the premises.
Restrict access to authorised personnel.
Maintain an issue and return record.
Separate sensitive access information from obvious site-identifying details where practicable.
Set a process for lost, damaged, changed or compromised keys and credentials.
Review access information after tenant, staff, alarm or lock changes.

The contract should identify who owns replacement costs and what happens if the customer provides inaccurate or obsolete access information.

Accurate site and escalation information

Alarm response depends on the quality of the information available to the attending operative. A site information record should normally cover:

Full address, safe approach and authorised entry points.
Alarm zones, panel location and any available activation information.
Known hazards, restricted areas and lone-working concerns.
Nominated customer contacts in priority order.
Authority to reset, isolate, secure, wait for a contractor or leave the premises.
Police, fire, alarm receiving centre and specialist-contractor arrangements where applicable.
Animals, machinery, roof access, confined spaces or other material site risks.

Information should be reviewed periodically and after any operational change. An out-of-date contact list can turn a manageable activation into a prolonged incident.

A clearly defined activation process

The provider, customer and alarm receiving centre should understand how an attendance request is authorised and transmitted. The process should identify what information is provided, how receipt is confirmed and what happens if the first responder cannot attend.

Avoid relying on informal telephone arrangements that are not reflected in the contract or site instructions. The customer should know whether the service covers intruder alarms, fire alarms, environmental alarms, access problems or other attendance requests, and what exclusions apply.

Safe attendance at the premises

Alarm response frequently involves lone working, reduced visibility and uncertain conditions. HSE guidance requires employers to manage lone-working risks, train, supervise and monitor lone workers, keep in touch and respond to incidents.

Dynamic assessment of the approach and visible conditions.
Communication and welfare arrangements for the responding operative.
Restrictions on entering where there are signs of intrusion, fire, violence or another serious hazard.
Escalation to emergency services or the customer where the operative should not proceed alone.
Instructions for preserving potential evidence and avoiding unnecessary disturbance.

A security operative is not a police officer, firefighter, engineer or locksmith unless separately qualified and appointed. The service should define the responder’s role and limits.

External and internal checks

The attendance procedure should state what the operative is expected to inspect. This may include the perimeter, doors, windows, alarm panel, visible internal areas or the reported alarm zone where safe and authorised.

The objective is to establish what can reasonably be determined, take authorised action and provide a reliable report. It is not to search unsafe premises or guarantee that no incident has occurred.

Making the premises secure

The contract should define what the provider may do when damage or intrusion is found. Possible authorised actions may include closing an unsecured opening, arranging an approved emergency contractor, maintaining a presence while responsibility is transferred or contacting a nominated manager.

Spending limits, approval requirements and customer availability should be agreed in advance. Without them, an operative may be unable to protect the premises or may incur costs the customer did not authorise.

Reporting after every attendance

The customer should receive enough information to understand why attendance occurred, what was found and what remains outstanding.

Time the request was received and the operative was dispatched.
Arrival and departure times.
Condition of the perimeter and access points.
Alarm information and areas checked.
People contacted and instructions received.
Actions taken, including reset, isolation or contractor attendance.
Photographs where appropriate and lawful.
Outstanding faults, damage or recommended follow-up.

Service reviews and false-alarm patterns

Repeated activations should not become a routine attendance cost without investigation. Reports can identify recurring alarm zones, access failures, environmental causes or contact problems. The customer, alarm company and security provider should review patterns and allocate corrective action.

Questions to ask a keyholding provider

1. How are keys and access details identified, stored and audited?

2. Which SIA licences are required for the personnel delivering the service?

3. What information is required before the service can go live?

4. What hazards or circumstances prevent entry?

5. What authority does the operative have to spend money or instruct contractors?

6. How are lone-worker safety and communications managed?

7. What report will be issued after each attendance?

8. How are site details reviewed and updated?

A service built around the premises

Keyholding is not simply storing a key. It is a managed chain of authority, information, attendance, safety, action and reporting. The service should be designed around the premises and integrated with the customer’s alarm, access and emergency arrangements.

Tornado FM Ltd provides keyholding, alarm response, mobile patrols, lock and unlock services, vacant-property inspections, manned guarding, security assessments and concierge or reception security.

Request an initial discussion about your alarm, access and out-of-hours escalation requirements.