Vulnerability Healthcheck 2018/19 RA

Guidance
Prevent unchallenged access into stores via any unauthorised route e.g. back door, fire exit, dot com.
Prevent access through an unlocked, unmanned staff entrance.
Prevent unauthorised entry through having a manned staff entrance – ensure all visitors are asked to produce I.D and
confirm reason for their visit.
If entering store through customer entrance, do not allow access to colleague areas unless challenged.

Guidance
Back gate should always remain closed unless there are vehicles moving in the vicinity.
Gate should always be locked to prevent it from being manually operated from outside.
If not applicable and/or there is a maintenance issue, a reference number is available and stores can provide details of
when this was logged and escalated.

Guidance
Ensure the up-to-date LP Dashboard has been displayed on the stock loss board in all stores.
Run rate data and process tracker should be applicable to the displayed dashboard week.
“Deep Dive” action plan should be displayed from most recent MST.
4 week ‘next steps’ should be available to review.

Guidance
Access to high value lock-ups is controlled and authorised access lists are kept up-to-date.
Lock-ups should be locked when not manned. Keys should be kept away from this area.
Locking hardware should be kept in good order and sufficiently maintained to prevent unauthorised access.
Gaming Drawers should be locked on both sides and games stored at 90 degrees to the front of cabinet to prevent
abuse.
For N/A, if broken, a reference number is available and store can provide details of when logged and escalated.

Guidance
High value back stock should be secured at all times in back areas e.g. spirits, electrical, tobacco and H&B.
High value black totes; entertainment, tobacco, spirits and electrical deliveries should be stored in a restricted area.
High value pre tagged OFD’s which cannot practically be stored in restricted areas should not be stored in isolated
areas such as cow sheds.
Entertainment ARN awaiting uplift should be stored in a restricted area.

Guidance
No high value cages left unattended on shop floor or “decked” e.g. spirits, high value health and beauty, electrical and
entertainment.
No high value products stored in cases unprotected on the capping shelves.
High value left goods / put backs are protected at front end.

Guidance
A minimum 10% of headcount per week spread across 7 days, including nights if applicable.
Previous 4 weeks should be available to review in either a RP book or via Biometrics reporting.

Guidance
Ask 3 colleagues to describe what shrink risks the store or their department faces and what can be done to prevent the
issues described. Where possible, ask colleagues from front end, H&B / BWS, stock control.
Ask probing questions, explore areas such as:
Product Protection / Restricted Fill.
Service / Red routes / Vigilance.
Waste Control.
Self Service / SAYS security.
Front end and warehouse lockdown.

Guidance
Ask the relevant managers probing questions around the current shrinkage business plan.
Managers should be able to describe what they have done differently since the project began.
Managers should be aware of how their store and department are tracking.

Guidance
Clearance mods should be well merchandised and labelled.
Products should reflect those on the reports found on the stock loss board.

Guidance
No bags or personal coats/jackets should be seen stored in warehouses, around shop floor, front end or other area
where colleagues come into contact with cash or retail stock.

Guidance
Only clear sacks are used by Tesco colleagues or for in-store cleaning activities.
Store has plan to mitigate risk of any third party use of black sacks.

Guidance
Retail items being used around the store as consumables / stationary should have clear evidence of having been
accounted for attached e.g. receipt or waste receipt
No retail stock found in drawers, cupboards etc..

Guidance
Any packaging from retail products found in back areas, which may have been consumed, should have a receipt or proof
of purchase attached.

Guidance
No retail products should be used for cleaning in any area of the store. Contract cleaner’s cupboard, cleaning trolleys,
merchandising trolleys, counters, bakery front end, warehouse, clean as you go drawers.

Guidance
Pharmacy and consultation room should not be accessible without using a key / digi-lock.
Pharmacy alarm should always be set.
CD Keys have been controlled.

Guidance
Prevent access to any food waste or refuse cages including animal by product, plant bread and animal feed cages.
Any active waste cages outside of the recycling unit e.g. frozen, as a minimum, should be a locked 4 sided cage with
blue shelf divider secured on top.
Waste reports checked off line by line and signed by management.
2 weeks waste prints available for review for all departments.
Full cages of waste and refuse awaiting collection should be protected by means of shrink wrap or cable tied to prevent
unauthorised products being added.

Guidance
RTC / Colleague shop labels should only be printed as required.
Any excess labels should be destroyed.

Guidance
Where provision to lock counters fridges has been made, these should remain locked outside of counters’ trading
hours.
Evidence of keys being signed in / out or controlled by Biometrics.

Guidance
Counters’ meat lines are stored in a locked 4 side cage or Biometric controlled chiller.
Where a cage is used, it should not be possible to remove items form cage in an unauthorised manner e.g. through the
cage mesh or through cage doors which have not been tightly locked.

Guidance
All main fixture cabinets should remain locked other than during replenishment.
All ladder rack units are locked other than during replenishment.
No chewing gum should be stored on capping shelves.

Guidance
Chewing gum should be stored in slim line chewing gum cages or 4 sided cages only.
Cages should be secured on all sides, when unattended.

Guidance
Check prices of 5 products against shelf edge / inform price.

Guidance
Cages should have a shroud or are wrapped correctly, showing no evidence of being compromised.
Cages to be correctly sealed on all sides.
Manifest has been checked off, showing evidence of dual control and filed for review.
Cages are stored in a restricted area until sealed.
Cages are returned to distribution network at earliest opportunity.

Guidance
Fitting rooms must be locked when unmanned.
Clothing is counted in and out by a Tesco colleague.
No evidence of theft found inside fitting rooms.

Guidance
Make-up cabinet shutters should be locked outside the agreed opening hours.
Any faulty cabinets should be reported to the cosmetics line 0151 532 0300 and recorded.

Guidance
A trained Tesco colleague should be manning self-service / SAYS, a minimum of 1 colleague per corral.
Security colleagues should not be used to cover self-service / SAYS.
Colleagues working on self-service should be vigilant and not move away from the area to complete other duties.

Guidance
Gold key must be secured in the cash office or Biometrics key cabinet.
Gold key should be signed out to colleague if held.

Guidance
Front end managers must be able to describe their scorecard performance; % failed service checks, top items found
under scanned.
A copy of the SAYS scorecard is on the department and colleagues should be made aware of it.
Colleagues working on SAYS should be able to describe items commonly found under scanned from a recent scorecard.

Guidance
All main bank and peripheral area smart till draws should have the deadlock applied when till is not in use.
All self-service / SAYS tills should be locked at all times.

Guidance
De-taggers must be locked on any unmanned main bank or peripheral area till.
Self-service / SAYS de-taggers must be locked when the area is closed.
De-taggers in back areas must be locked when not in use including dot com, outside of picking hours.
No unsecured de-taggers should be found unlocked or with keys in drawers etc.

Guidance
Any unmanned checkouts must be sealed by means of security seal when the checkout is not in use.
If the checkout is being used to hold cages, it is not possible to pass thorough this area. - Fire exit routes should not be
blocked at any time.
N/A outside of trading hours.
There is no requirement to record the seal numbers in the security seal register.

Guidance
Scratch cards or books of stamps are not to be found in unsecured draws.
No significant amounts of cash to be found e.g. pods containing cash or foreign currency awaiting collection.
No console games should be stored in unlocked drawers or cupboards around the front end.

Guidance
Terminals should be logged off when desks are unmanned.
Passcodes, if written down, should be kept in a secure area e.g. locked drawer or cash office.

Guidance
Stock should not be left outside, unsecured when the PFS is closed and unmanned.
Stock room / colleague area / kiosk doors should be closed and locked unless signed as fire exits.
Perimeter fire exit should have a recorded security seal and be door guard activated.
Keys should be kept in a secured key cabinet with key held by colleague.
Tobacco should be stored in a locked secure area and not be visible through any window.
Correct staffing level at time of visit.

Guidance
System should not be isolated or display any faults on the control panel.

Guidance
Secure items should not be accessible, at any time.
Department keys are controlled and should not be found unattended in drawers.
Van keys are secured at all times and not left out for van maintenance cleaning etc.

Guidance
Dot com operating own search book.
Searches completed daily across varying times of day.

Guidance
Vans should be locked when unattended.
No retail products should be found in unlocked delivery compartments.

Is the dot com grocery click and collect collection point secured?
Guidance
Doors and shutters must be locked when unmanned.
No retail stock left should be left in view of window when unmanned.

Guidance
It should not be possible to gain unauthorised access to store key cupboard.
Keys must be signed in and out correctly using an RP or Biometric solution.
Keys should not found unattended around the store.

Guidance
Security officer should be present, patrolling the front of the store unless completing security routines or dealing with a
security incident.
Security officer should be wearing the full, correct uniform.
Security officer should not be seen leaning or sat on a chair, only using CCTV when necessary.
Security officer should be able to describe security risks faced by the store.

Guidance
If the lectern(s) is left unattended, CCTV should be protected from Security / GDPR threat by means of a locked shutter
and / or the CCTV should be logged off.
Reception / Back office CCTV systems should be logged off and password protected with no access to data.

Guidance
Side and Front panels of DVR cabinet should be locked.
Keys should not be found in immediate area.
For N/A If broken a reference number is available and store can provide detail of when logged and escalated.

Guidance
Only authorised users should have access to CCTV.
Managers are aware of CCTV disclosure log book and can describe when it should be used.

Guidance
All perimeter door guards should be set to ‘on’ when not in use.
All high value lock ups should be set to ‘on’ when not in use, The only exception is when access is controlled by
Biometrics.
For N/A If broken a reference number is available and store can provide detail of when logged and escalated.

Guidance
All perimeter exits should be sealed with a security seal.
Seal checks are completed twice daily and recorded in the security seal register.
Mag locks, door guard and release alarms reviewed during seal check and any signs of tampering or maintenance
issues should be logged.

Guidance
During a visit, there should be no evidence of Biometric controlled areas being propped or strapped open.
Biometric keys should have appropriate access levels, keys are attached to Biometric tag thorough an unbreakable
loop.
Biometric keys are correctly signed in and out.