Every company, however small, needs physical and psychological barriers that discourage an attack. But no barrier works if staff don't know which information to protect, whom to let in or how to react. These ten behaviors, adapted from our training material and extended to the digital dimension, are the foundation.
Daily prevention
- Don't share routines. Arrival and departure times, trips and executive meetings are sensitive information, in person and on social media.
- Protect contact details. Executives' personal phone numbers and addresses should only be known by authorized people, with express instructions not to share them.
- Handle cash discreetly. Avoid accumulating large amounts and don't discuss when or how deposits are made.
- Keep access points closed. Internal doors closed and a clear rule: nobody enters without authorization.
- Verify visitors and suppliers. Confirm the appointment with the company that supposedly sent the person, ask for ID and escort them during the visit. The same applies to “technical support” calling or writing to ask for remote access.
- Protect documents and screens. Clean desk, files under lock and key, a shredder for sensitive paper and screen lock when you get up.
- Take care of information at reception and in assistant roles. Public-facing positions are the most exposed to “innocent” questions; they need protocols and backing to say no.
- Close up properly at the end of the day. Keys, alarms, equipment shut down or locked and sessions logged out, especially before holidays.
If a robbery occurs
- Put life first. Don't resist, stay calm, follow instructions and avoid movements that could be misinterpreted. No material asset is worth more than a person.
- Preserve and report. Activate silent alarms only if it is safe to do so, don't touch anything after the event, call the authorities and record the features of people and vehicles.
Shared responsibility
The original material insists on something that applies equally to cybersecurity: all staff are responsible for the procedures. Leaving a door open and sharing a password are the same kind of failure. That's why we recommend teaching physical and digital procedures together and evaluating them with the same indicators.
Conclusions
A secure office doesn't depend only on the guard at the entrance. It depends on dozens of small daily decisions that, when they become habits, form a security culture.
Frequently asked questions
What is the most important security measure in an office?
Controlling who gets in and what information they can access. That includes verifying visitors, keeping access points closed and protecting documents and sessions.
What should you do during a robbery at the office?
Stay calm, don't resist, follow instructions and put life first. Afterwards, don't touch anything, call the authorities and report what you observed.
Sources
- Internal document “Curso de Seguridad y Comportamiento Preventivo” (in Spanish)
Bring this topic to your organization
The Seguridad 360 Course turns these ideas into habits. Next edition: October 31, 2026 (taught in Spanish).