Page 22 - CITS Theft Guide

CITS Guide for Theft Prevention
- 22 -
6. Insider Threat, Fraud, and Personnel Security
Not every threat to a construction site comes from outside the perimeter. This section addresses insider
threat, hire fraud, and personnel security, each of which requires measures distinct from the physical
layers described in Section 5.
6.1. Insider Threat
Insider threat can range from an employee sharing site access information with an outside accomplice, to
a subcontractor colluding in the removal of plant they have legitimate access to operate. NPSA's insider
risk guidance (see Annex B) recommends a combination of pre-employment screening, a clear and
consistently enforced code of conduct, channels for colleagues to report concerns, and management
vigilance for behavioural indicators, delivered as part of the wider security culture described in Section 7.
6.2. Tackling Hire Fraud
As plant security improves, criminals have increasingly turned to fraudulent hire — persuading a hire
company to hand over a machine, complete with keys, fobs, and immobiliser codes, using false identity or
false credit information. CITS recommends the nine-step best practice set out at Annex D, covering identity
verification, trade references, hired-in plant insurance checks, credit checks, and prompt follow-up when
equipment is not returned on time.
6.3. Personnel Security and Vetting
Personnel performing security duties, and personnel with privileged access to sensitive areas or
information, should be screened in line with BS 7858:2019, Screening of individuals working in a secure
environment. Vetting should be proportionate to the sensitivity of the role and should be refreshed
periodically, not treated as a one-off check at the point of hire.
6.4. Sites Without Facilities or Activity — a Reason to Doubt
Delivery drivers and site personnel should be alert to sites that show no sign of welfare facilities or ongoing
activity, since this can indicate that plant is being delivered to, and subsequently stolen by, a fraudulent
hirer. Where a driver has concerns about the apparent lack of activity or facilities at a delivery address,
the office should be contacted for clarification before delivery proceeds, and delivery should be aborted
if in doubt.