BS 8549:2016 pdf download. Security consultancy – Code of practice.
5.4.3 Competence
Security consultants should be able to demonstrate that they have undergone
training on the main aspects of security consultancy which could include, where
relevant:
a) threat and risk assessment;
b) security audits, surveys and reviews;
c) security strategy, management, policy and procedures;
d) crisis management and business continuity planning;
e) physical security;
f) electronic security systems;
g) manned guarding;
h) IT and information security;
i) health and safety;
j) construction design and management regulations (CDM);
k) fire safety;
l) investigative practice;
m) human rights;
n) civil and criminal law;
o) data protection; and
p) disability issues.
NOTE Attention is drawn to the recommendations in 5.4.5.
6.2 Delivery of service
6.2.1 Contracted services
The contracted services should be in accordance with the agreed proposal.
NOTE The scope of work identifies the exact areas of work, see 6.1.2.
6.2.2 Assessment
A documented assessment for the delivery of contracted services should be
based on an evidence-based approach and might include:
a) existing controls;
b) interviews, e.g. key stakeholders;
c) examination of existing issues, e.g. current security systems and condition;
d) documents, e.g. specifications, policies and procedures;
e) observations of locations, e.g. physical layout;
f) activities and conditions, e.g. people and the environment; and
g) existing results of measurements and a range of tests or other means within
the scope of the assessment, e.g. risk assessments, security records.
NOTE The issues identified by the documented assessment could be addressed by
implementing or amending appropriate governance practices and/or control
measures.
6.3 Reporting
The consultancy should proactively communicate with the customer to ensure
that key messages through the implementation phase of a project are passed
on. These should not be limited to just positive information but should also
include any issues that might adversely impact on the successful delivery of the
consultancy project particularly if budgets or the completion date might be
affected.
On completion of the contracted scope of work, the consultancy should provide
a report of their findings.
NOTE 1 This can take the form of a written report or verbal briefing dependent on
the terms of the contract.
EXAMPLE
The report could cover, but not be limited to, the following.
a) Customer.
b) Location.
c) Date of work.
d) Scope of work.
e) Executive summary.
f) Methodology.
g) Observations.
h) Recommendations (could include guidance on cost and timescales).
i) Conclusions.BS 8549 pdf download.