Who Is Legally Responsible For Security On Your Premises? A Duty Of Care Guide For Darwin Businesses

Who is responsible for security on commercial premises? Responsibility can sit with business operators, landlords, tenants and contracted security providers, depending on who controls the premises, the work being performed and the agreed security arrangements.

For Darwin businesses, the key is to document those responsibilities. Assuming someone else is handling a security risk can leave workers exposed and create uncertainty when an incident occurs.

Businesses generally have work health and safety (WHS) obligations to consider foreseeable risks and take reasonably practicable steps to protect workers and others affected by their operations. That does not mean every commercial premises needs a security guard or patrol service.

Security requirements should reflect how the workplace operates. An office occupied during standard hours may have different needs from a late-trading retailer, medical facility or premises where employees regularly work alone.

Relevant considerations can include:

• Operating and trading hours
• Lone or isolated work
• Previous security incidents
• Public access
• Staff movements after hours
• Existing response arrangements.

According to industry best practice, businesses should consider these issues within their broader risk management process rather than assume one security measure automatically satisfies their duty of care.

Experienced security companies in Darwin can help businesses determine which security services are appropriate for their operating environment.

Commercial security is not only about protecting buildings, stock and equipment. A security risk can also become a workplace safety risk when it exposes employees or other people to potential harm.

Consider a staff member closing a Darwin retail premises late at night. The concern is not simply whether somebody might steal property. The employee could encounter aggressive behaviour, feel unsafe while locking up or need assistance without a clear response procedure. That is where duty of care security considerations overlap with WHS security obligations.

Businesses should ask: Who could be affected if our security arrangements fail, and what happens next? The answer may identify a need for escalation procedures, welfare checks, mobile patrols, static guards or another control appropriate to the circumstances.

Security staffing also needs to support the agreed service. RMI Security's guide, What Happens When Security Services Are Understaffed?, looks more closely at what can happen when available security resources do not match operational requirements.

In multi-tenancy commercial premises, responsibility may be shared between a landlord or property manager, individual tenants and a security provider. A landlord or property manager may manage building-wide arrangements and common areas. A tenant may control its own tenancy, staff procedures and trading hours. A security provider performs the duties included within its agreed scope rather than automatically becoming responsible for every security issue on the property.

Example: A tenant trades until 10 pm while most neighbouring businesses close at 5 pm. The complex has a mobile patrol, but its scope does not include escorting individual employees to their vehicles.

The tenant may assume the building's security service covers closing staff. The property manager may expect the tenant to manage its own late-trade procedures. Meanwhile, the security provider is delivering exactly what it was contracted to provide.

The better question is therefore not simply, "Do we have security?" It is "Who is responsible for each task, area and operating period?" Those responsibilities should be documented and reviewed when operating hours, tenancies or security arrangements change.

Car parks, loading areas, shared entrances and other common spaces can create uncertainty because several businesses use them without necessarily controlling them. A tenant may assume the property manager handles everything outside its leased premises. Staff may assume an occasional patrol means the area is monitored whenever they leave. Neither assumption confirms what the actual security arrangement covers.

If employees regularly finish after neighbouring businesses close, management should know what happens between the employee leaving the tenancy and reaching their vehicle. Is there a defined procedure? Does an existing security service have a role? Who does the employee contact if they need assistance? The issue is not that every common area requires a guard. It is that businesses should understand risks affecting their workers and establish who manages them.

A structured risk management process can help property stakeholders clarify overlapping responsibilities without duplicating controls or relying on informal assumptions.

Lone worker safety in the NT requires particular consideration because employees working without immediate support may have fewer options if a security incident develops. Businesses should consider the role, location, operating hours and availability of assistance when assessing foreseeable risks. Appropriate controls will vary between workplaces.

Useful questions include:

• Who knows the employee is working alone?
• How can they request assistance?
• Is there a welfare or check-in procedure?
• What happens if they miss a check-in?
• Who responds to an alarm or reported incident?
• Who is responsible during closing and departure?

For example, a lone employee finishing at 9:30 pm might follow a documented check-in process before closing, with a defined escalation procedure if they report a concern or fail to confirm they have safely finished.

The important part is clarity. Employees and managers should know what happens, who takes action and when an issue gets escalated.

Incident documentation records what happened, how people responded and whether existing security arrangements require review. Depending on the workplace, records could include incident reports, patrol logs, alarm responses, staff reports, welfare checks and follow-up actions.

Good documentation helps management identify patterns. Several similar incidents may indicate that an existing procedure or security arrangement needs reconsideration. Records also establish what the organisation actually did. Saying "security handled it" offers little useful information if nobody can identify who responded, what action they took or whether anyone followed up.

According to industry best practice, incident records should feed back into the security review process. Documentation is most useful when it informs future decisions rather than simply recording past events.

Undocumented security arrangements depend on assumptions, and those assumptions often become visible only after an incident. A tenant assumes the landlord covers the car park. The landlord expects the tenant to manage employees working late. Staff assume the security provider monitors the entire property. The provider follows a contract that may contain none of those responsibilities. Clear arrangements should establish who is responsible, what the relevant service or procedure covers, when it applies and how incidents are escalated.

The practical test is simple: If a security issue occurs here, right now, can everyone involved explain who is expected to do what? If the answer is unclear, the arrangement deserves review.

RMI Security works with Darwin commercial premises to develop guarding and security arrangements around identified operational risks. If responsibilities at your premises are unclear or your current arrangements no longer reflect how your business operates, get in touch with the RMI Security team to discuss your site requirements.