})

Security Risk Assessment Services London | Priority First

Last updated: 3 August 2026

Security risk assessment services in London help businesses identify vulnerabilities across premises, people and processes before criminals or regulators expose them. With police-recorded robbery of business property rising 50% to 15,520 cases in the year to March 2026, and Martyn's Law introducing statutory security duties, a professional assessment is now a commercial necessity, not an optional extra.

Key Takeaways

  • Police-recorded robbery of business property rose 50% to 15,520 cases in the year ending March 2026, according to Kingsman Group (GOV.UK data).
  • Martyn's Law (the Terrorism (Protection of Premises) Act 2026) can impose penalties of up to £18 million or 5% of worldwide revenue for enhanced duty premises, per Ashfords LLP.
  • The 2023 Commercial Victimisation Survey found 8% of all business premises experienced a burglary in the prior 12 months, rising to 41% for wholesale and retail premises experiencing any crime, according to the ONS Commercial Victimisation Survey (via Kingsman Group).
  • The median daily rate for a Security Risk Analyst in London stood at £700 as of May 2026, according to IT Jobs Watch.
  • A comprehensive risk assessment should cover physical premises, personnel procedures, keyholding arrangements and regulatory obligations under Martyn's Law and the Security Industry Authority framework.

Why does London need security risk assessment services now?

London's commercial density, footfall and profile as a global business hub make it a disproportionate target for crime against businesses. Business property robberies increased by 52% in the 12 months to June 2026, reaching a record 12,000 cases compared with 7,884 the previous year, according to Office for National Statistics data reported by Dorchester Chamber for Business. At the same time, new legislation is placing formal duties on premises operators for the first time.

A security risk assessment is the structured process that identifies these exposures before they become losses. It examines physical access, staff procedures, out-of-hours cover, and the building's specific threat profile — whether that's a Mayfair mansion block, a City office, or a construction site in Zone 1.

Priority First, headquartered in Mayfair and operating across prime central London and nationwide, builds these assessments from direct operational experience: running SIA-licensed guarding, keyholding and alarm response across dozens of live sites, not from a desk-based checklist alone.

The scale of the problem facing London businesses

National figures consistently point the same direction. Police recorded 245,284 burglaries across England & Wales in the year ending March 2026, an 8% year-on-year fall, per Kingsman Group (ONS/GOV.UK data) — yet robbery of business property moved sharply in the opposite direction.

Separately, Newgate's Business Crime Statistics 2026 found that 40% of businesses reported being a victim of robbery in 2023, falling to 36% in 2026, while 45% of businesses experienced at least one crime incident in the last year. The Crime Survey for England and Wales estimated 107,000 robbery incidents in the year ending December 2026, with no statistically significant change on the year before — suggesting the threat is now sustained rather than a spike.

What does a professional security risk assessment actually cover?

A proper security risk assessment for a London business examines four interlocking areas: physical premises, personnel and procedures, technology and monitoring, and regulatory compliance. It should conclude with a prioritised, costed action plan — not just a list of vulnerabilities.

Physical assessment covers perimeter integrity, access control points, lighting, CCTV coverage and blind spots, and out-of-hours vulnerabilities such as delivery bays or fire escapes. Procedural assessment reviews how staff handle keyholding, alarm response, visitor management and cash or high-value stock handling.

For premises falling within scope of Martyn's Law, the assessment must also map capacity thresholds, evacuation and lockdown procedures, and staff training obligations. Priority First's approach integrates this with day-to-day facilities management, so recommendations reflect what is operationally realistic for a live building, not a theoretical ideal.

Core components of a thorough assessment

  • Perimeter and access review — fencing, gates, entry points, and vehicle movement for sites such as construction or logistics premises.
  • CCTV and monitoring audit — camera placement, coverage gaps, retention policy and response protocols.
  • Keyholding and alarm response evaluation — who holds keys, how out-of-hours activations are attended, and response time expectations.
  • Manned guarding requirements — whether static SIA-licensed officers, mobile patrols, or a hybrid model suits the site's risk profile.
  • Martyn's Law compliance mapping — capacity, procedures and training obligations for enhanced or standard duty premises.
  • Incident and patrol logging systems — whether occurrences are recorded provably, with photo and timestamp evidence, or reliant on paper.

How much do security risk assessments cost in London?

Costs for security risk assessment services in London vary considerably depending on premises size, complexity and whether the assessment is a one-off audit or part of an ongoing security contract. As an illustrative guide, standalone consultancy-led assessments for a single commercial site typically range from a few hundred pounds for a small office to several thousand pounds for a multi-site portfolio or a premises with Martyn's Law exposure.

One useful benchmark: the median daily rate for a Security Risk Analyst in London was £700, based on job vacancies posted in the six months to 1 May 2026, according to IT Jobs Watch. This gives businesses a reference point when comparing consultancy quotes against day-rate contractor engagements.

Assessment type Typical scope Illustrative price guide
Single-site office assessment One building, standard duty premises Low hundreds to low thousands (£)
Multi-site portfolio review Several commercial or residential sites Several thousand pounds, scaled to site count
Martyn's Law compliance assessment Capacity mapping, procedures, training plan Mid-range, depending on premises capacity band
Ongoing risk-managed contract Assessment bundled with manned guarding/FM Priced within the overall service contract

Figures above are illustrative price guides only, not sourced statistics, and will vary by provider and site complexity.

Worked scenario: a mid-size Mayfair office

A 60-person office in a Mayfair building might commission a single-site assessment covering access control, out-of-hours alarm response, and a Martyn's Law capacity check if it hosts events or public-facing activity. A standalone assessment of this scope typically sits toward the lower end of the illustrative range above, with costs rising if the assessment feeds directly into a manned guarding or keyholding contract.

Worked scenario: a residential portfolio across West London

A managing agent overseeing several mansion blocks across West London would typically commission a portfolio-level review, assessing keyholding arrangements, out-of-hours access and resident safety procedures consistently across every building. Priority First's own portfolio work — running patrols, incidents, alarm response and shift handovers on one platform across 24 sites with 11 or more field officers — illustrates the operational depth such a review needs to support.

Ways to reduce costs

  • Bundle the assessment with an existing service contract rather than commissioning it as a separate consultancy engagement.
  • Prioritise higher-risk sites first — a phased, risk-ranked programme spreads cost across a financial year.
  • Use provable, photo-and-GPS-backed patrol data already collected by your security provider, reducing duplicate data-gathering during the assessment.
  • Combine security and facilities management under one accountable partner so vulnerabilities identified in the assessment can be actioned without a second procurement process.

Alternatives to consider

Some businesses opt for a lighter-touch internal review using SIA guidance and in-house facilities staff rather than commissioning an external assessment. This can suit very small, low-risk premises, but it typically lacks the independent, evidenced judgement a specialist consultancy or security provider brings — particularly where Martyn's Law obligations apply.

In-house review or professional risk assessment: which is right for your business?

The choice between an internal review and a professionally commissioned assessment depends on premises complexity, regulatory exposure and available expertise. A small single-site office with low footfall may manage an internal checklist-based review, provided someone with genuine security knowledge leads it.

Larger premises, multi-site portfolios, or any site falling within Martyn's Law's enhanced duty threshold benefit from an external, evidenced assessment. Professional assessors bring independent judgement, current knowledge of regulatory change, and — critically — the operational experience to know which recommendations are actually deliverable on a live site.

Priority First's model combines both: because the same organisation runs manned guarding, keyholding, alarm response and facilities management, its risk assessments are grounded in what can practically be resourced and monitored day to day, rather than a generic template.

What does Martyn's Law mean for London premises?

Martyn's Law — formally the Terrorism (Protection of Premises) Act 2026 — introduces statutory security duties for qualifying premises and events, and London's density of large venues, offices and mixed-use developments means many local businesses fall within scope. Enhanced duty premises face the most serious obligations, including staff training, procedures and physical measures to reduce harm.

Non-compliance carries severe financial consequences. The maximum penalty for contraventions relating to enhanced duty premises or qualifying events can reach up to £18 million or 5% of worldwide revenue, whichever is greater, according to Ashfords LLP.

For guidance on scope and thresholds, ProtectUK's Martyn's Law resource and the official GOV.UK collection are the primary sources businesses should consult. The Security Industry Authority is confirmed as the regulator responsible for Martyn's Law enforcement, alongside its existing role licensing security operatives — as detailed by ProtectUK.

A security risk assessment is the natural first step toward compliance: it establishes which duty tier a premises falls into, what procedures already exist, and what gaps must be closed before enforcement action becomes a risk.

Who provides security risk assessment services in London — and what qualifications matter?

Security risk assessment providers in London range from independent consultants and large audit firms to integrated security and facilities management companies. The right choice depends on whether a business needs a standalone report or an assessment that leads directly into implementation.

Any individual carrying out frontline security duties identified in an assessment — such as manned guarding, keyholding or alarm response — must hold the relevant Security Industry Authority licence. This is a legal requirement for licensable activities in the UK private security industry.

Internationally, ASIS International's Security Risk Assessment Standard provides a widely referenced benchmark for methodology. As Jennifer Holcomb, SRA Technical Committee Co-Chair at ASIS International, has put it: "By outlining a systematic approach to security risk assessment, this standard empowers organizations to proactively identify threats and address vulnerabilities, ultimately strengthening their security posture." ASIS Vice-President Sue Carioti has similarly described the standard as providing "a comprehensive roadmap for navigating the complexities of modern security challenges."

For London businesses, the practical priority is choosing a provider who combines this rigour with genuine operational delivery — a provider who can act on findings, not merely report them.

Your security risk assessment checklist

  • Confirm which duty tier your premises falls under regarding Martyn's Law using ProtectUK guidance.
  • Map every physical access point, including delivery bays, fire escapes and shared entrances.
  • Review CCTV coverage for blind spots and confirm footage retention meets your operational needs.
  • Verify keyholding arrangements and confirm who attends out-of-hours alarm activations, and how quickly.
  • Check that every security officer involved in delivering recommendations holds a valid SIA licence.
  • Establish whether patrols and incidents are logged provably — with photo, GPS and timestamp evidence — or rely on paper occurrence books.
  • Prioritise findings into a phased action plan, starting with the highest-risk vulnerabilities identified.
  • Schedule a review date to reassess the premises as occupancy, use or threat profile changes.

FAQ

What is a security risk assessment and why does my London business need one?

A security risk assessment is a structured review of a premises' physical security, procedures and technology to identify vulnerabilities before they lead to loss or harm. London businesses need one because business property robbery rose 50% to 15,520 cases in the year to March 2026, according to Kingsman Group, and because Martyn's Law now imposes statutory duties on many premises.

How much does a security risk assessment cost in London?

Costs vary by site size and complexity, typically ranging from low hundreds of pounds for a small single office to several thousand pounds for a multi-site portfolio or Martyn's Law compliance assessment. As a reference point, the median daily rate for a Security Risk Analyst in London was £700 as of May 2026, according to IT Jobs Watch.

What does Martyn's Law require from businesses in London?

Martyn's Law, formally the Terrorism (Protection of Premises) Act 2026, requires qualifying premises to have procedures, training and physical measures to reduce harm from terrorism. Enhanced duty premises face the most serious obligations, with penalties reaching up to £18 million or 5% of worldwide revenue for non-compliance, according to Ashfords LLP.

Do I need an SIA licence for security risk assessment consultants?

Consultancy and report-writing itself is not a licensable activity, but any individual carrying out frontline security duties such as manned guarding or keyholding must hold a valid licence from the Security Industry Authority. Businesses should always confirm licensing status for any officer delivering security services on site.

How often should a business conduct a security risk assessment?

There is no single fixed interval, but most premises benefit from a full reassessment whenever occupancy, use, layout or threat profile changes materially, and at minimum on an annual basis. Premises within Martyn's Law scope should review their assessment alongside any change to capacity or event activity.

What industries in London are most at risk of crime and security threats?

Wholesale and retail premises face particularly high exposure, with 41% experiencing some form of crime according to the 2023 Commercial Victimisation Survey. Offices, construction sites and residential blocks in prime central London also face elevated risk given footfall, asset value and out-of-hours vulnerabilities.

What is included in a corporate security risk assessment report?

A thorough report includes a physical premises audit, review of access control and CCTV coverage, keyholding and alarm response evaluation, staffing requirements, Martyn's Law compliance mapping where relevant, and a prioritised, costed action plan. The best reports connect findings directly to deliverable next steps rather than listing vulnerabilities in isolation.

Securing your business with Priority First

Every vulnerability this article describes — unmonitored access points, unprovable patrols, slow out-of-hours response, unclear Martyn's Law obligations — is exactly what Priority First's risk assessments are built to uncover and then fix. Because Priority First runs manned guarding, keyholding, alarm response and facilities management under one accountable structure, its assessments translate directly into action rather than sitting as an unactioned report.

Priority First's own portfolio experience demonstrates this at scale: one security and FM operator's estate grew from 18 to 24 sites on a single platform, with more than 4,900 photo-backed patrols completed and 11 or more field officers logging patrols, incidents, deliveries, alarm activations and shift handovers in real time. That same evidenced, accountable approach underpins every risk assessment Priority First delivers — from a Mayfair office to a West London mansion block or a large distribution facility.

If your London premises needs a security risk assessment that leads to real operational change, contact Priority First, headquartered in Mayfair, to discuss your site and request a tailored quote.

Written by
Mo Hassan — Founder & Managing Director, Priority First

Mo Hassan leads Priority First, a UK building-management and security-services company operating across prime central London and nationwide. He writes on physical security, construction-site protection, CCTV, and building operations.

Over a decade in premium building management and security operations

FOR MORE INFORMATION

Protect your business with Priority First. Get in touch with us to discover how you can safeguard your business.

DOWNLOAD OUR BROCHURE