Out-of-Hours Access and Lock-Up: A Bigger Risk Than It Looks

Daytime site security tends to get the attention — visitor sign-in, access control, CCTV. What happens at the end of the day, when the last person leaves and the building sits unsupervised until morning, gets far less scrutiny. That gap is where a surprising number of preventable incidents start.

Why lock-up procedures matter more than they seem to

A building left insecure overnight is a target for theft and vandalism, but the risks go wider than that: unlocked fire doors compromising security, windows left open, equipment left running that shouldn't be, or areas that were supposed to be checked simply weren't — because "locking up" was left to whoever happened to be last out, without a defined process.

What a proper out-of-hours procedure covers

• A defined checklist — specific doors, windows and access points, not a general "check everything's locked"
• Named responsibility — who is actually accountable for lock-up on a given day, not whoever happens to still be around
• A verification step — some way of confirming the checklist was actually completed, not just assumed
• Equipment and systems checks — alarms set, equipment powered down where appropriate, any systems that need to be left running correctly configured
• Out-of-hours access arrangements — who can get back in if needed, how, and how that access is logged
• An escalation route — what happens if something's found wrong, or the alarm activates overnight

Multi-user and multi-tenant sites need more structure

On a single-occupier site with one team, lock-up can work reasonably well as an informal routine. On a site with multiple users, out-of-hours lettings, or shared access — a school with community lettings, a building with multiple tenants — informal routines break down fast. Different people assume someone else has checked, and gaps open up exactly where nobody's looking.

Getting it right

1. Write the procedure down — specific, area by area, not a general instruction.
2. Assign named responsibility for each day or each user group, especially where lettings or multiple teams are involved.
3. Build in a verification step, even something as simple as a signed checklist or a final walk-round log.
4. Review it when site use changes — a new lettings arrangement or a change in opening hours should trigger a procedure review, not an assumption the old one still fits.

If your out-of-hours procedures haven't been reviewed recently, or you're not confident they'd hold up if something went wrong overnight, get in touch for a free 30-minute consultation — this is a common and easily fixed gap.

This article is general guidance, not legal or insurance advice. Review your specific arrangements against your insurer's requirements and any relevant statutory obligations for your site.