01
DO THIS NOW
Immediate actions
- 1
Do not confront, pursue or attempt to detain the person.
- 2
Move away to a safe or secure location and warn others when safe.
- 3
Notify security and the Control Room using the site method.
- 4
Call Triple Zero (000) for violence, a weapon, forced entry or immediate threat.
- 5
Follow site lockdown, shelter or evacuation instructions.
- 6
From safety, report the person’s description, location and direction of travel.
02
RECOGNISE
Signs and triggers
- Unauthorised person or vehicle in a restricted area
- Forced entry, perimeter breach or access-control alarm
- Threatening behaviour, surveillance or suspicious activity
- Weapon, violence or attempt to interfere with critical equipment
!
DO NOT
Actions that increase the risk
- Do not confront, challenge, follow or block the person.
- Do not expose yourself to take photographs or obtain details.
- Do not broadcast sensitive security information openly.
- Do not leave a secure place until the direction is clear.
- Do not disturb evidence, access logs or CCTV.
03
SUPPORTING RESPONSE
Role-based actions
Worker / witness
- Prioritise distance and cover, then report only what you observed.
- For an armed attack, apply Escape, Hide, Tell.
Security / Control Room
- Initiate the approved security response and protect people from the affected area.
- Preserve CCTV/access data and provide police with live factual updates without directing staff toward the threat.
Site emergency controller
- Select lockdown, shelter or evacuation based on known threat location and police direction.
- Account for people without compromising hiding locations or safety.
04
EMERGENCY-SERVICES HANDOVER
Information to provide
- Exact last-known location and direction of travel
- Description, number of people and any vehicle
- Observed weapon, threats, violence or equipment interference
- Entry method, access credential or perimeter point
- Injuries and people in affected areas
- CCTV/access-control availability and site hazards
05
WHEN THE IMMEDIATE DANGER HAS PASSED
Recovery and reporting
- Follow police direction on evacuation, search and re-entry.
- Provide first aid only when the threat area is safe.
- Preserve video, access records, messages and witness accounts.
- Restrict unnecessary disclosure of security details.
- Offer welfare support and review physical/access controls.
Approved reference sources
This draft must be checked against the site emergency plan, OEM procedures, SDS, local law and emergency-service direction.
Safe Work Australia — Emergency plans and procedures↗Australian National Security — What to do in an attack↗