The intention of the best practice repository on STPA is to provide to parking developers and owners a clear overview of requirements related to obtaining specific security levels at their existing or new secure parking area.
The best practice repository has been built up around a template parking area, which is used to illustrate the various requirements that the secure parking area will need to fulfill in order to be classified according to the agreed ESPORG / LABEL quality standard.
Below you will find an interactive map of the parking area that will illustrate the various requirements in the five security levels, when clicking on the icons. In addition, the more generic requirements that need to be fulfilled is described below the parking area interactive map. When clicking on the requirements it will also be possible to obtain pictures from a range of best practice installations around in the EU.
INTRODUCTION
Security level 1
SC 1.3
Site has to be surveilled through regular security checks (either by operator or by police visits patrols or by external guards). Bushes are to be kept low to enable surveillance. A phone number to emergency services should be present.
Security level 2
Digital recording (at least 25fps) in place. System records either continuously or in motion detection mode.
SC 2.8
Access (physical/via network) to the CCTV recording and controlling hardware and software elements is tightly controlled. (Security) staff must not be able to edit or delete recordings.
SC 2.9
CCTV recordings stored for min 30 days unless restricted by law. Storage of images must be adequate (physically secure and where applicable, network security as well).
SC 2.10
CCTV fully functioning with quality images that allow for clear visibility. Preventative maintenance program in place for CCTV system. Audit evidence: maintenance contract, maintenance interval, invoices, etc
Security level 3
A clear zone, at least on the inner side of the truck parking area, must be kept between the fence/barrier and structures/vehicles/vegetation.
SC 3.4
Secondary physical barrier which is sufficient to protect the fence from unintentional damage. Alternatively the integrity of the fence/barrier has to be checked regularly.
SC 3.5.2
Only users of the truck parking area and truck parking area staff are to be given access to the parking.
SC 3.6
Each crime incident shall be reported to the truck parking area staff and the police. If possible the vehicle has to be put on hold awaiting instructions from police. The secure parking registration, physical evidence and incident documentation is to be kept for a period relevant to the investigation. If, after reporting the crime, the police do not attend, then the incident has to be fully recorded and signed by the truck parking area staff and driver.
Security level 4
SC 4.4
If guards are to be provided by a security company they must be regulated/certified by the authorities. Vetting of all SPA related staff
SC 4.5
Vetting and as a minimum requirement references should be taken according to local legislation.
SC 4.6
Where a gatehouse is in place to facilitate the duties of staff at the site (e.g. parking registration, communication) it has to be constructed in a way that it secures the staff from an external attack. Door has to be closed.
SC 4.7
Where site staff is in place it has to be equipped with a personal distress system which generates an alarm at the (external) control room or to a responsible person on duty which shall coordinate the follow-up.
SC 4.8
Personal communication system (available and operational at all times) between staff and (external) control room, where on-site staff is used.
SC 4.9
Remote staff has received appropriate training, covering: entry/exit control & registration procedures, alarm response and communication procedures and confidentiality.
SC 4.10
Guards must have viewing access to CCTV images. Viewing access required if staff are controlling entry and exit remotely.
SC 4.11
Registration procedures at a minimum cover logging of license platenumber of truck/tractor and name/ picture of the driver. Driver and vehicle are clearly linked by this to be able to verify that the driver does not leave with a different vehicle.
SC 4.12
When exiting the secure parking each vehicle and driver has to be checked and registered against the data captured at the entrance of the parking.
SC 4.13
A monitoring procedure for entry/exit movements has to be in place.
SC 4.14
Records for all entries and exits shall be kept for a minimum of 3 months. The retention period must be in accordance with local legislation in the specific country
SC 4.15
Alarm response procedures are in place, understood by all staff and regularly tested. These shall cover alarm activations, follow-up activities and procedures. All alarm activations shall be documented.
SC 4.16
Pre-booking system has to be available.
SC 4.17
Procedures must be in place to ensure security contingency in case of power failure.
SC 4.18
Competencies and responsibilities are clearly defined and recorded for internal and external security staff. Additional rules for temporary absent of security staff are in place. All inspection patrols are documented in writing.
Security level 5
At all times, all vehicle entrances/exits are verified by on-site trained guards (i.e dedicated security staff that can be internally or externally employed) to ensure that only authorized entries/exits are taking place.
SC 5.5
At all times, all pedestrian entrances/exits are verified by on-site trained guards (i.e dedicated security staff that can be internally or externally employed) to ensure that only authorized entries/exits are taking place.
SC 5.6
CCTV system to cover the entire surface of the parking area (CCTV monitoring view).
SC 5.7
CCTV system to cover all driving and pedestrian lanes (CCTV detection view).
SC 5.8
Site has to be manned around the clock. Guards have to be present during opening times, at least site staff during closure times.
SC 5.9
A gatehouse which facilitates the duties of the security staff (e.g. CCTV monitoring, parking registration, communication) has to be available and constructed in a way that it secures the staff from an external attack (in terms of unauthorized access to the gatehouse). Door has to be closed. Guard(s) provided with a personal distress system connected to (external) security control room
SC 5.10
All security staff have to be equipped with a personal distress system which generates an alarm at the local gatehouse and an (external) monitoring station or responsible person on duty who shall coordinate the follow-up.
SC 5.11
Personal communication system (available and operational at all times) between security staff and (external) control room.
SC 5.12
Guards and site staff have received appropriate training covering: entry/exit control & registration procedures, security patrols, alarm response and communication procedures and confidentiality.
SC 5.13
The gatehouse must provide the security staff the ability to monitor the
SC 5.14
All entry/exit movements are to be logged. Similar registration procedures to 4.11 and 4.12 shall apply for any authorized person entering the truck parking area.
SC 5.15
Alarm response procedures have to be in place and cover at least the following: who has to activate the alarm, when has the alarm to be activated, evaluation and follow up procedures by (external) control room, escalation procedures and contacts (e.g. police). Procedures need to be documented and tested regularly.
