Security Ops Vulnerability Health Check 2019

Title Page

Store Name/Number
Store Manager/Store Director/GSSM
Conducted on
Prepared by
Fed Back to

Store

Preventing unchallenged access into the store? Via any authorised route, back door, fire exit or Dotcom? Access through an unmanned, unlocked staff entrance? Visitors asked for I.D to confirm Visit? Access to colleague areas unchallenged?
Is the back gate open / accessible? Back gate to remain closed unless there are vehicles moving in the vicinity. To always be locked to prevent manual access from the outside. If it is a Maintenance Issue - Store to have detail on When WON logged & Escalated
Is the weekly Stock Loss Meeting taking place? Ensure the up to date dashboard is displayed, run rate date and process tracker should be applicable to the displayed dashboard week, deep dive displayed from last MST. 4 Weeks Worth of Next steps available for review.
Is it possible to gain unauthorised access to high value lock ups? Access is controlled and authorised, access lists are up to date. Locked when not manned, keys stored away from the high value areas and all locking hardware in good working order and maintained to prevent unauthorised access, Gaming Drawers should be locked both sides.
High value stock found unattended on a loading bay or in an unrestricted warehouse or not secure in a reasonable time scale? High value secure at all times. Black totes, entertainment, tobacco, spirits, and electrical in restricted area, no OFDs in isolated areas. ARNs awaiting uplift locked away.
No High Value stock left unattended or unprotected on the shop floor? No high value cages left unattended, decked spirits, health and beauty, electrical and entertainment. No products stored in cases unprotected on capping shelves and put backs protected at front end.
Colleague Search Completion 10% of stores headcount per week spread across 7 days, Including Nights if applicable. Previous 4 weeks should be available to review in Either RP book or Biometrics Reporting.
Is colleague engagement evident around the store? Ask 3 Colleagues to describe What shrink risks the store or their department faces and what can be done to prevent the issues described. Where Possible ask colleagues from Front End/H&B/BWS/Stock Control Explore areas such as: Product Protection / Restrict Fill Service / Red Routes / Vigilance Waste Control SS and SAYS Security Front end & Warehouse Lockdown
Is the management team engaged in the shrinkage business plan? Ask the Relevant managers probing questions around the current shrinkage business plan. Managers Should be able to describe (Project Genie/Checkout/Zero) What have they done differently since the project began? Managers should be aware of how store and department are tracking.
Are clearance Mods WGLL? Clearance mods should be well merchandised and labelled. Products should reflect those on the reports found on the stock loss board.
No Colleague jackets or bags should be found in high risk areas? No bags or personal coats/ jackets should be seen stored in warehouses, around shop floor, front end or another area where colleagues come in to contact with cash or retail stock.
No black sacks are in use? Only clear sacks are used by tesco colleagues or for in-store cleaning activities.
Were any Tesco items found in drawers? Retail items being used around the store as consumables / stationary should have clear evidence of having been accounted for e.g. attached receipt or waste print. No retail stock found in drawers or cupboards etc
No signs of grazing found in colleague areas? Any packaging from retail products found in back areas which may have been consumed should have a receipt or proof of purchase attached.
Is there any evidence of unauthorised cleaning products in use? No retail products should be used for cleaning in any area of the store. Check contract cleaners cupboard, cleaning trollies, merchandising trolleys, counters, bakery, front end, warehouse and all clean as you go drawers.
Has the pharmacy been locked down outside of trading hours? Pharmacy and consultation room should not be accessible without using a key/ digi lock. Pharmacy alarm set. CD leys controlled.

Waste

Is the waste process controlled? Prevent access to any food or refuse cage, plant bread and animal feed cages. Any active waste cages outside of the recycling unit e.g. frozen to be locking in a four sided cage with a blue shelf divided secured on top. Waste checked line by line and signed and printed by management. Prints available for review for all departments. Full cages should be protected by shrink wrap or cable ties to prevent authorised products being added.
Were any unused pre printed RTC labels found? RTC / Colleague Shop labels should only be printed as required. Any excess labels destroyed.

Counters

Are the counters fridges locked? Where provisions to lock fridges have been made these should remain locked outside trading hours. Evidence of Key Control or Biometrics used.
Is High Value counter meat secure in the back chiller? Counters meat stored in a locked four sided cage or biometric controlled chiller. Where a cage is used items should not be able to be removed in an unauthorised manner through the mesh or doors that have not been tightly locked.

Grocery

Are shop floor chewing gum cages locked? All fixture cabinets and ladder racks should remain locked other than when being replenished, no chewing gum stored on capping shelves.
Are chewing gum cages locked? To be stored in a slime line chewing gum cage, or 4 sided cages only. cages should be secured Secured on all sides when unattended.

Produce

Are the SAYS / Dotcom scales on line? Check prices of 5 Products against shelf edge / inform price.

Non Food

Are NRC cages controlled? Cages are wrapped correctly, showing no evidence of being compromised, cages to be correctly sealed on all sides. Manifest has been checked off showing evidence of dual control and filed for review. Stored in a restricted area and sent back at the earliest convenience.
Are the F&F fitting rooms controlled? Fitting rooms locked when not manned, clothing is counted in and out by a tesco colleague. No evidence of theft found in fitting room.
Are make up cabinets locked? Shutters to be locked outside of the agreed store opening hours. Any faulty cabinets to be reported to the cosmetics line on 01515 320300 and Reference number recorded.
Are make up drawers locked? All drawers are locked or stock removed if broken. Any faulty drawers to be reported to the cosmetics line on 01515 320300 and Reference Number recorded.

Checkouts

Is the Self Service / SAYS area manned correctly? A fully trained colleague should be manning the area with a minimum of 1 per corral. Security Colleagues not to be used to cover self service / SAYS. Colleagues working in this area should be vigilant and not move away to complete other duties.
Is the Self Service / SAYS gold key locked away and secure? Gold key to be secured in the cash office or biometrics key cabinet. Signed out if held by colleague.
Is the store team engaged in the SAYS scorecard? Front end managers must be able to describe the scorecard performance, % failed service checks, top items found under-scanned. A copy of the scorecard is available on the department and the colleagues are aware of it and should be able to describe commonly found under scanned items.
Are all tills locked? All main bank and peripheral area smart till drawers should have the dead lock applied when the till is not in use. All SS and SAYS tills locked at all times.
Are all de-taggers locked? De-taggers Must be locked on any main bank or peripheral area till. SS and SAYS de-taggers must be locked when the area is closed. De-taggers In back areas must be locked when not in use including Dotcom outside of picking hours. None to be found unsecured or unlocked with keys in drawers ect.
Are checkout gates sealed? Any unmanned checkout must be sealed by means of security seal when not in use.

Service Desk

Have any high value articles been found? Scratch cards or books of stamps are not to be found in unsecured drawers. No significant amounts of cash to be found in pods awaiting collection. No console games to be found in unlocked drawers or cupboards at the front end.
Access to lottery or pay point terminals? Terminals to be logged off when desk is unmanned. Passcodes if written down are in a secure area. e.g Locked drawer or cash office

PFS

Is the PFS locked down and secure? Stock should not be left outside, unsecured when the PFS is closed and unmanned. Stock room / kiosk doors should be closed and locked unless signed as a fire exit. Perimeter fire exits to have a recorded security seal and door guard activated. Keys kept in a secure cabinet and tobacco stored in a locked secure area and not visible through any window.
Is the smoke cloak / DNA system working in the PFS? System should not be isolated or display any faults on the control panel

Dotcom

Is Dotcom secure? Secure items not accessible, keys controlled and not left unattended. Van keys secured at all times and not left out for maintenance or cleaning.
Are van searches completed daily? Dotcom operating own search book, completed daily and varying times of the day.
Have Dotcom vans been left secure? Vans locked when unattended, No retail items found in unlocked delivery departments.
Is the Dotcom grocery click and collect collection point secure? Doors and shutters locked, no stock left in view when unmanned.

Security

Are key control routines in place? it Should not be possible to gain unauthorised access to key cupboard. Keys must be signed out/in using RP Book or biometric solution. Keys not found unattended around the store.
Are great guarding principles being followed? Security officer present unless completing security routines or dealing with an incident. Should be wearing full correct uniform and should not be seen leaning or sitting on a chair. To be using cctv when necessary and should be able to describe security risks faced by the store.
Cctv not left logged on and unattended? If the lectern is left unattended, CCTV should be protected from Security/GDPR threats by means of locked shutter and/or the CCTV should be logged off. Reception/Back office CCTV systems should be logged off and password protected with no access to data.
Is it possible to access the DVR cabinet? Side and front panels of DVR cabinet should be locked. Keys not to be found in immediate area.
Is the CCTV policy being followed? Only authorised users have access to the cctv, managers aware of CCTV disclosure book and can describe when it should be used.
Are all door guards activated? All perimeter door guards set to on when not in use. All lockup’s set to ON when not in use. Only exception when access is controlled by biometrics.
Is the seal check routine in place? All perimeter exits sealed with a security seal, completion twice a day and recorded in the seal register. Mag locks, door guards and release alarms reviewed during seal checks and any signs of tampering or maintenance issues logged.
Is the biometric Control system in place? During a visit there should be no evidence of biometric controlled areas being propped or strapped open. Biometric keys should have appropriate access level and keys attached to biometric tag through an unbreakable loop. Biometric keys correctly signed out.