NEWS
The Role of Site Security in CDM 2015 Compliance
The Construction (Design and Management) Regulations 2015 are the primary regulatory framework governing health and safety on UK construction projects. Most H&S managers and principal contractors are well versed in CDM in the context of worker safety, method statements, risk assessments, and emergency procedures. Fewer give the same attention to what CDM says about site security, and the HSE’s position on this has become increasingly clear.
What CDM 2015 says about site security
The duty to secure the construction site falls primarily on the principal contractor, under Regulation 22 of CDM 2015. The regulation requires the principal contractor to take reasonable steps to prevent access to the construction site by unauthorised persons.
This is not a discretionary provision. It is a legal duty, and the HSE can and does take enforcement action where it is not met. The key elements are:
Defined boundary, the site must have a defined, maintained boundary that makes the limits of the site clear to anyone approaching it.
Exclusion of unauthorised persons, active measures must be in place to prevent people who have no legitimate reason to be on site from gaining access. Signage alone is not sufficient, physical barriers and, where appropriate, monitored detection are required.
Arrangements for managing access, who can come on site, how they are authorised, how their presence is recorded, and how unauthorised access is detected and responded to.
Where site security sits in the construction phase plan
Under CDM 2015, the principal contractor is required to prepare and maintain a construction phase plan, a document that sets out how health and safety will be managed throughout the project. Security arrangements are a required element of this plan.
Specifically, the construction phase plan should address:
- How the site boundary will be established and maintained
- The measures in place to exclude unauthorised persons
- How access will be managed and recorded
- The arrangements for out-of-hours security
- How security will be reviewed and updated as the project progresses
A construction phase plan that addresses these points in general terms, “site will be secured by perimeter hoarding and CCTV”, meets the letter of the requirement but not its intent. A plan that specifies the hoarding standard, the CCTV provider, the monitoring arrangement, the keyholder process, and the review schedule demonstrates genuine compliance.
The public protection dimension of CDM security
CDM’s security requirements extend beyond protecting assets. A key driver of the regulation is the protection of the public, particularly children, from the hazards of a live construction site.
The HSE’s guidance is explicit: all construction sites require measures to manage access across defined boundaries and steps to exclude unauthorised people. This duty exists regardless of whether the site is in a high-crime area, whether the project is high-value, or whether there has been any previous security incident. It is a baseline requirement for every notifiable construction project.
The practical implication is that a site where the hoarding has gaps, where a gate has been left unsecured, or where there is no out-of-hours monitoring is potentially non-compliant with CDM, independently of any theft or security incident.
How CCTV and monitoring support CDM compliance
A monitored CCTV system contributes to CDM compliance in several ways:
Detection of unauthorised access, a system with AI-powered motion detection and 24/7 ARC monitoring detects and responds to unauthorised access in real time, not just records it after the fact.
Documented evidence of compliance, the existence of a monitored CCTV contract, with a coverage plan and a documented response SLA, provides contemporaneous evidence that reasonable steps were taken to exclude unauthorised persons, exactly what the HSE would look for in an investigation.
Perimeter integrity monitoring: a camera covering the full perimeter can identify breaches in hoarding or fencing before they become an access point, allowing remediation before an incident occurs.
Incident records, detailed incident logs from the monitoring provider, with timestamped footage, create a record that demonstrates the system was operational and effective throughout the project.
What the HSE looks for in an investigation
If an unauthorised access incident results in injury, or if the HSE inspects a site and identifies security failures, the investigation will focus on whether the principal contractor took reasonable steps to prevent unauthorised access. The key questions are:
- Was the site boundary adequate and maintained?
- Were there active measures to exclude unauthorised persons?
- Were those measures appropriate for the specific risks of this site?
- Were the measures documented?
A site with a properly specified, monitored security system and a documented construction phase plan that addresses security in specific terms is in a strong position to demonstrate reasonable steps. A site with a padlock on the gate and a recording-only camera is not.
How StarFM Group supports CDM compliance
Our rapid deployment CCTV, mobile lighting, and fire safety systems are specified to support the security requirements of CDM 2015, and every installation is documented to the standard that a construction phase plan requires. We work with principal contractors across the UK to ensure that the security specification meets both the regulatory requirement and the practical reality of the site.
about CDM-compliant security for your next project.