Appendix 1 - Signpost Document
The purpose of this Appendix is to provide the member with electronic links to detailed information relating to the particular area of discussion. Not all areas have links, that does not mean that they did not exist only that they were not appropriate as a point of reference.
This Appendix is a ‘living document’ meaning that when the ARA members identify suitable links, they can inform the ARA Security and Access Group which will consider its inclusion without affecting the whole guidance document.
Governance Development
1) Understanding governance:https://www.cgi.org.uk/professional-development/discover-governance/looking-to-start-a-career-in-governance/what-is-governance
2) Understanding governance: https://governancetoday.com/GT/GT/Material/Governance__what_is_it_and_why_is_it_important_.aspx
3) NPSA - Passport to Good Security: https://www.npsa.gov.uk/managing-my-asset/leadership-in-security/board-security-passport
4) British Library – Collection Security Governance: https://www.cerl.org/_media/services/seminars/vaticanpresentation2.pdf
5) NPSA - Protective Security Management System: https://www.npsa.gov.uk/protective-security-management-systems-psems
Emergency Planning
6) Scottish Council of Archives – Emergency Planning Guidance: https://www.scottisharchives.org.uk/resources/preservation/emergency-planning/
7) Scottish Council of Archives – Emergency Plan Template: https://www.scottisharchives.org.uk/wp-content/uploads/2020/05/TEMPLATE-2-Planning-Matters-Emergency-Plan.pdf
8) Cabinet Office – Emergency Preparedness: https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/61028/Emergency_Preparedness_chapter5_amends_21112011.pdf
9) Government Communications - EP Framework: https://gcs.civilservice.gov.uk/publications/emergency-planning-framework/
10) Government Communications – Local Planning: https://www.gov.uk/local-planning-emergency-major-incident
11) Government Communications - Preparing for Emergencies: https://www.gov.uk/government/publications/preparing-for-emergencies/preparing-for-emergencies
12) Safety Culture – Crisis Management Planning: https://safetyculture.com/checklists/crisis-management-plan/
13) Protect UK- Managing Risk & Business Continuity: https://www.protectuk.police.uk/advice-and-guidance/risk/managing-risk-and-business-continuity
14) Collections Trust – Emergency Planning for Collections: https://collectionstrust.org.uk/spectrum-resources/risk-management/
Threat, Risk, & Vulnerability Assessments
15) Collections Trust – Security Risk Assessment: https://collectionstrust.org.uk/accreditation/organisational-health/assessing-and-managing-risk/security-risk-assessment/
16) Collections Trust – Security Audit: https://collectionstrust.org.uk/resource/the-security-audit/
17) Scottish Archives – Risk Assessment & Management: https://www.scottisharchives.org.uk/wp-content/uploads/2020/05/TEMPLATE-1-Planning-Matters-Risk-Assessment-and-Management-.pdf
18) NPSA – Protecting Your Assets: https://www.npsa.gov.uk/protecting-your-assets
19) Protect UK – Security Risk Management: https://www.protectuk.police.uk/threat-risk/security-risk-management
20) Health & Safety Executive – Managing Risk: https://www.hse.gov.uk/simple-health-safety/risk/index.htm
21) Safety Culture - Risk Assessment: https://safetyculture.com/topics/risk-assessment/
22) Collections Trust – Museum Security Toolkit: https://collectionstrust.org.uk/resource/the-museum-security-toolkit/
23) CPNI – Personnel Security Risk Assessment: https://www.npsa.gov.uk/system/files/documents/46/06/Personnel-security-risk-assessment-a-guide-4th-edition.pdf
Security in Depth – Security Designs
24) NPSA – Protective Security: https://www.npsa.gov.uk/protective-security
25) NPSA - Build it Secure: https://www.npsa.gov.uk/build-it-secure-0
26) RIBA - Plan of Work: https://www.architecture.com/knowledge-and-resources/resources-landing-page/riba-plan-of-work
27) NPSA - Security Considerations in the Planning Process: https://www.npsa.gov.uk/security-considerations-planning-process
28) NPSA - Operational Requirements: https://www.npsa.gov.uk/operational-requirements
29) Collections Trust – Advice for Architects & Planners: https://collectionstrust.org.uk/wp-content/uploads/2016/11/AdviceForArchitectsAndPlanners_02.pdf
Physical Security Considerations
30) NPSA – Beyond the Perimeter: https://www.npsa.gov.uk/beyond-perimeter-0
31) NPSA - Perimeter: https://www.npsa.gov.uk/perimeter-0
32) NPSA - Fences & Gates: https://www.npsa.gov.uk/fences-and-gates-0
33) Collections Trust – Security in Museums & Galleries – Buildings & Perimeter: https://collectionstrust.org.uk/wp-content/uploads/2016/11/PracticalGuide_Buildings_and_Perimeters_01.pdf
34) NPSA – Building Services & Internal Spaces: https://www.npsa.gov.uk/building-services-internal-spaces
35) BRE - Loss Prevention Standard (LPS1175): https://www.redbooklive.com/download/pdf/LPS1175.pdf
36) Secure by Design – Building Regulations for Security: https://www.securedbydesign.com/guidance/building-regulations
37) Secure by Design (Commercial Buildings – Generic guidance): https://www.securedbydesign.com/images/COMMERCIAL_GUIDE_23.pdf
38) NPSA - Doors: https://www.npsa.gov.uk/doors-0
39) BRE - Accredited Doorset Suppliers: https://www.redbooklive.com/search/productsearch.jsp?id=688&results_pp=10&searchgroupid=50&searchgrouptypeid=5&searchgroupsectionid=497&productType=0&productName=&securityRating=&companyName=&certNo=&standardInfo=&addressPostcode=&countryId=0
40) Collections Trust - Solid Core Door (2013): https://collectionstrust.org.uk/wp-content/uploads/2016/11/SecuritySpecification_SolidCoreDoors_02.pdf
41) Collections Trust – Internal Window Grilles: https://collectionstrust.org.uk/wp-content/uploads/2016/11/SecuritySpecification_InternalWindowGrilles_02.pdf
42) NPSA – Protecting from Forced Entry: https://www.npsa.gov.uk/protection-forced-entry
43) NPSA - Windows: https://www.npsa.gov.uk/windows
44) Commercial site – Toughened & laminated Glass Explained: https://stevenage-glass.co.uk/toughened-and-laminated-glass-explained/
45) AMNH – Light Impact in Museums: https://www.amnh.org/research/science-conservation/preventive-conservation/agents-of-deterioration/light-ultraviolet-and-infrared
46) NPSA - Catalogue for Security Equipment: https://www.npsa.gov.uk/cse-categories
47) NPSA – Blast Mitigation for Curtain Wall Systems: https://www.npsa.gov.uk/system/files/documents/c9/3c/WIP%20GN%20Mitigation%20measures%20for%20stick%20curtain%20walling%20systems-%20Version%201%20May%202021.pdf
48) BRE – LPS 1270 – Security Glazing: https://www.redbooklive.com/download/pdf/LPS1270.pdf
49) BRE – Security Glazing Supplier List: https://www.redbooklive.com/search/productsearch.jsp?id=688&results_pp=10&searchgroupid=50&searchgrouptypeid=5&searchgroupsectionid=363&productType=0&productName=&securityRating=&companyName=&certNo=&standardInfo=&addressPostcode=&countryId=0
50) Master Locksmith Association (MLA): https://www.locksmiths.co.uk/
51) NPSA – Catalogue of Security Equipment: https://www.npsa.gov.uk/cse-categories
52) Architectural Armour - Security Glazing Data Sheet: https://www.architecturalarmour.com//content/Tech%20Spec/PDFs/LPS%201270.pdf
53) NPSA – Internal Glazing: https://www.npsa.gov.uk/internal-glazing
54) CPNI (NPSA) - Improving Blast Resistance of Glazing: https://www.npsa.gov.uk/system/files/documents/89/49/Improve-the-blast-resistance-of-glazing.pdf
55) Collections Trust – Security Specifications for Display Cases: https://collectionstrust.org.uk/wp-content/uploads/2016/11/SecuritySpecification_AttackResistentDisplayCases_02.pdf
56) ASIS & AAM – Suggested Practice Display Cases: http://www.securitycommittee.org/securitycommittee/Guidelines_and_Standards_files/Final%20Exhibit%20Suggest%20Practices%20ASIS%20Format.pdf
57) Home Office – Firearms Security Handbook: https://www.nationalcrimeagency.gov.uk/who-we-are/publications/489-home-office-firearms-security-handbook-2020/file
58) Arts Council England – Government indemnity Scheme Guidance: https://www.artscouncil.org.uk/sites/default/files/download-file/GIS_National_guidelines_2016.pdf
59) Christie’s – Everything you need to know about hanging art: https://www.christies.com/features/How-to-hang-artworks-8182-1.aspx
Collections/Archives Stores
60) American Alliance of Museums – Collections Space Security: https://www.aam-us.org/wp-content/uploads/2018/01/suggested-practices-for-museum-collections-space-security.pdf
61) British Library - Archive Store Furniture: https://www.bl.uk/britishlibrary/~/media/bl/global/conservation/pdf-guides/library-and-archive-storage-furniture-guide.pdf
62) Collection Trust – Creating & Improving Stores: https://collectionstrust.org.uk/resource/creating-and-improving-stores/
63) Collection Trust – Store & Preserve: https://collectionstrust.org.uk/tapping-our-collections-potential/framework/store-and-preserve/
Technical Security Measures
64) Home Office (NPSA) Perimeter Intruder Detection Systems Guidance: https://www.npsa.gov.uk/resources/perimeter-intrusion-detection-systems-guidance-document
65) NSI (National Security Inspectorate) – Home Page: https://www.nsi.org.uk/
66) SSAIB – Home Page: https://www.ssaib.org/
67) Collections Trust – Fire and Intruder Alarm Systems: https://collectionstrust.org.uk/wp-content/uploads/2016/11/PracticalGuide_FireAndIntruderAlarmSystems_02.pdf
68) BT RedCare – Alarm Signalling is Changing: https://www.redcare.bt.com/assets/documents/installation-support/bt-redcare-installer-handbook.pdf
69) CSL Group – Alarm Signalling Standards Explained: https://www.csl-group.com/uk/getfile/442/
70) Home Office – Fire Safety Building Safety Act 2022: https://www.gov.uk/government/publications/check-your-fire-safety-responsibilities-under-section-156-of-the-building-safety-act-2022/fire-safety-responsibilities-under-section-156-of-the-building-safety-act-2022
71) UK Government - Regulatory Reform (Fire Safety) Order 2005: https://www.legislation.gov.uk/uksi/2005/1541/contents/made
72) HSE - Introduction to Fire Safety: https://www.hse.gov.uk/fireandexplosion/fire-safety.htm
73) Business Watch - Fire Alarm Categories: https://www.businesswatchgroup.co.uk/fire-alarm-categories-and-grades/
74) World’s Monuments Fund – Fire Protection for Heritage Places: https://www.wmf.org/fire#:~:text=Detection%20systems%20should%20be%20installed,fire%20suppression%20system%2C%20or%20both.
75) National Archives (USA) – Fire Protection in Cultural Institutions: https://www.archives.gov/preservation/emergency-prep/fire-prevention.html
76) UK Fire - Cultural Heritage Fire Safety: https://ukfiremag.co.uk/cultural-heritage-fire-safety/
77) NEDCC – Fire Detection & Sprinkler Systems for Cultural Heritage: https://www.nedcc.org/free-resources/preservation-leaflets/3.-emergency-management/3.2-introduction-to-fire-detection-and-automatic-sprinklers-for-cultural-heritage
78) Fire Protection Association: When to Use Sprinkler Systems: https://www.thefpa.co.uk/advice-and-guidance/advice-and-guidance-articles/when-are-fire-sprinklers-required-in-commercial-and-residential-buildings-#:~:text=UK%20legislation%20surrounding%20fire%20sprinkler,have%20a%20sprinkler%20system%20installed.
79) British Automatic Fire Sprinkler System Association – Home Page: https://www.bafsa.org.uk/
80) NPSA – CCTV (72 links to guidance): https://www.npsa.gov.uk/cctv
81) Home Office – CCTV Operational Requirement Manual: https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/378443/28_09_CCTV_OR_Manual2835.pdf
82) Surveillance Camera Commissioner – Standards for the Surveillance Camera Industry: https://www.gov.uk/guidance/recommended-standards-for-the-cctv-industry
83) NSI - Standards for CCTV Design, Installation and Maintenance: https://www.nsi.org.uk/wp-content/uploads/2012/10/NCP-104.3-Code-of-Practice-Design-Installation-and-Maintenance-CCTV-Nov-2017.pdf
84) Information Commissioners Office: Video Surveillance Guidance: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/cctv-and-video-surveillance/guidance-on-video-surveillance-including-cctv/
85) Protect UK – CCTV Guidance (PALs): https://www.protectuk.police.uk/cctv
86) Collections Trust - CCTV Systems: https://collectionstrust.org.uk/wp-content/uploads/2016/11/PracticalGuide_CCTVsystems_02.pdf
87) National Records Scotland – CCTV in NRS: https://www.nrscotland.gov.uk/record-keeping/legislation/primary-information-legislation/cctv-in-nrs
88) Scottish Government: - A guide for Public Space CCTV: https://www.gov.scot/publications/national-strategy-public-space-cctv-scotland/
89) British Museum – CCTV Policy: https://www.britishmuseum.org/sites/default/files/2019-12/CCTV_policy_231219.pdf
90) NPSA - Control Access: https://www.npsa.gov.uk/content/control-access
91) BSIA - Access Control Guidance: https://www.bsia.co.uk/zappfiles/bsia-front/pdfs/132-specifiers-guide-access-control-systems[1].pdf
92) NSI – Codes of Practice Access Control Systems: https://www.nsi.org.uk/wp-content/uploads/2012/11/NCP-109.2-Code-of-Practice-Access-Control-Systems-Oct-16.pdf
93) NEPAD (Commercial) - Guide to Physical Access Control Systems 2023: https://www.nedapsecurity.com/the-ultimate-guide-to-physical-access-control-systems/
Operational Security Considerations
94) Museums Galleries Scotland – Government Indemnity Scheme (explained): https://www.museumsgalleriesscotland.org.uk/advice-article/government-indemnity-scheme/
95) Collections Trust – Access to Collections: https://collectionstrust.org.uk/wp-content/uploads/2016/11/Access-to-Collections-2022.pdf
96) Consortium of European Research Libraries – Information for the Security Network: https://www.cerl.org/collaboration/security/otherinformation
97) Protect UK- Insider Threat: https://www.protectuk.police.uk/advice-and-guidance/security/reducing-insider-risk
98) ARCL/RBMS – Guidelines for the Security of Special Collection Materials: https://www.ala.org/acrl/standards/security_theft
99) NPSA – Employee Risk (Insider Threat): https://www.npsa.gov.uk/system/files/documents/npsa-holistic-management-of-employee-risk-homer-executive-summary_0.pdf
100) National Archives – Managing Digital Records (non-EDRMS): https://www.nationalarchives.gov.uk/information-management/manage-information/policy-process/managing-digital-records-without-edrms/
101) Trident Manor Limited (Commercial site) – Cultural Protection Services: https://www.tridentmanor.com/consultancy-services/cultural-heritage/cultural-protection-services/
102) Local Government Association – Protecting & Improving local Arts & Cultural Services: https://www.local.gov.uk/parliament/briefings-and-responses/protecting-and-improving-local-arts-and-cultural-services
103) Collections Trust – Spectrum: https://collectionstrust.org.uk/spectrum/
104) Collections Trust – Spectrum Approved Software: https://collectionstrust.org.uk/software/
105) Royal Armouries – GIS (Annex E) Transportation Guidance: https://royalarmouries.org/wp-content/uploads/2018/04/Transport-Guidelines-Jan-2016.pdf
106) National Archives – Preservation Policy: https://cdn.nationalarchives.gov.uk/documents/preservation-policy-june-2018.pdf
107) National Archives – Things Allowed into Search rooms: https://www.nationalarchives.gov.uk/about/visit-us/researching-here/can-take-reading-rooms
108) NPSA – Business Continuity: https://www.npsa.gov.uk/content/business-continuity
Security Education & Training
109) ARA (UK & Ireland) – Training Events: https://www.archives.org.uk/training
110) Trident Manor Training Academy – Cultural Protection Training (Commercial site): https://tridentmanor-ta.com/cultural-heritage/
111) International Council of Archives – Training Programme: https://www.ica.org/en/training-programme
112) Scottish Council of Archives – CPD Modules for Archivists: https://www.scottisharchives.org.uk/education/archivists/10-20-30/
113) NPSA – Employee Vigilance Campaign: https://www.npsa.gov.uk/security-campaigns/employee-vigilance-campaign
114) NPSA - Workplace Behaviour Campaign: https://www.npsa.gov.uk/security-campaigns/workplace-behaviours-campaign
115) Collections Trust (British Museum) - An Introduction to Loans: https://collectionstrust.org.uk/resource/loans-part-one-an-introduction-to-loans-british-museum-collections-skills-film/
116) Collections Trust – Online Training Programmes: https://collectionstrust.org.uk/events/nationwide-event-listings/online-training-sessions-for-organisations/
117) NPSA – Security Consideration Assessment: https://www.npsa.gov.uk/security-considerations-assessment-sca
118) NPSA - Insider Risk Mitigation: https://www.npsa.gov.uk/insider-risk-mitigation-digital-learning
119) National Archives Training Programmes: https://www.nationalarchives.gov.uk/information-management/training/
120) Protect UK - ACT (Actions Counter Terrorism): https://www.protectuk.police.uk/group/84?type=catalog
121) NPSA - SCaN Training – Situational Awareness: https://www.npsa.gov.uk/see-check-and-notify-scan
122) NPSA - Security Messages for New Joiners: https://www.npsa.gov.uk/security-messages-new-joiners
123) Counter Terrorism Policing – Run, Hide, Tell Video: https://www.youtube.com/watch?v=gx0d6W-QeUQ
Terrorist Threat Considerations
124) Counter Terrorism Policing – Home Page: https://www.counterterrorism.police.uk/
125) Protect UK – Home Page: https://www.protectuk.police.uk/
126) NPSA – Countering Terrorist Threats Guide: https://www.npsa.gov.uk/recognising-terrorist-threats-guide-0
127) MI5 - Counter-Terrorism: https://www.mi5.gov.uk/counter-terrorism
128) Protect Uk – Stay Safe: https://www.protectuk.police.uk/advice-and-guidance/response/stay-safe-film
129) Protect UK - Marauding Terrorist Attacks: https://www.protectuk.police.uk/advice-and-guidance/response/marauding-terrorist-attacks-mta
130) Protect UK – A Guide to Personal Security: https://www.protectuk.police.uk/advice-and-guidance/awareness/blue-book-guide-personal-security
131) Protect UK – Countering Vehicle as a Threat: https://www.protectuk.police.uk/advice-and-guidance/awareness/countering-vehicle-weapon-best-practice-guidance-goods-vehicle
Cyber/IT Threats
Note: Having reviewed various sites it has been decided that for ARA members it is inappropriate to list anything other than the excellent government site below that basically provides a ‘one-stop-shop’ for all advice and guidance regarding cyber/IT threats and ways to protect organisations.
ARA members’ IT infrastructure is being attacked daily and rather than add any confusion to what is an ever changing and evolving threat landscape, a single source that is centrally funded is provided.
132) NCSC – National Cyber Security Centre – Home Page: https://www.ncsc.gov.uk/