SS-045 Ver 1.0 (May 23)
Confidential & Proprietary | 2024 CBRE Inc.
1. Developing an Account Security Manual
Accounts with Security that is In-Scope must develop and maintain an Account Security Manual. The manual is to contain and consolidate key information relevant to the management and development of Security services which can and may include guarding, Offsite or remote monitoring as well as roaming patrols.
The purpose of the Security Manual is to:
- Consolidate into a pre-formatted, clear, concise and consistent all the relevant information necessary to manage account security
- Provide the basis for training and awareness of Account Management and Service Delivery and to cascade essential information to operations teams
- Provide the basis for compliance by providing access to relevant parts of the client MSA (contract) and any guidance relating its objectives and requirements
- Contain the account and site Scope of Work (see section on Scope Management)
- Provide management and staff responsibilities ensuring all account and service delivery personnel are aware of their responsibilities
- Provide the basis of continuous improvement
- Contain the Account Security Management Plan
- Provide contact details for key personnel and suppliers
- Contain and consolidate the security Service Levels
- Any other relevant material and information essential to security management
Sites and clusters with a large, complicated or high risk security operation must develop a Site / Cluster Security Manual in addition to the Security Manual to manage security effectively. The criteria for developing a Site / Cluster Security Manual are:
- All Accounts need an Account Security Manual where any security responsibility is in actual scope (whether or not specified in the client’s MSA) as defined by the Security Scope questionnaire recently completed by all accounts
Additionally:
- All Sites & clusters need Site/Cluster Security Manuals when:
- The site is high risk or high compliance (data centres, R&D, manufacturing)
- The site employs any security guarding on a full time or temporary basis (whether CBRE is Principal or MA), including remotely monitored sites
- The site has a permanent client headcount above 500 staff
- A cluster contains multiple high risk branches such and bank branches
- The client requires one- At Account discretion
It is the Site Security Lead/Champion’s responsibility to ensure there is a Site / Cluster
4. Useful Links
2. Developing the Site / Cluster Security Manual
3. Minimum Standards that apply
Accounts with Security in Scope. Must complete and maintain Account and Site/Cluster Security Manuals as described above.
This applies whether security services are provided as Principal or Managing Agent.
Accounts without Security in Scope. Where security is not specifically in scope, but security tasks are carried out as identified by the Scope Identification process (see above), then accounts must complete and maintain an Account Security Manual.