Studio security reviews and testing

A review can be enough

You may be concerned about shared entrances, changing crew lists, equipment movements or what happens outside working hours. A review can examine those questions through a site visit, discussion with the people responsible and a review of the relevant procedures.

You can commission this work without agreeing to covert activity or attempted entry. The findings should explain the weaknesses observed, their practical significance and what should be addressed first.

When practical testing is useful

Sometimes a specific question remains: does the agreed visitor process work during a busy period, does an access concern reach the right person, or are handover instructions understood? An observed exercise or a limited practical test can help answer it.

Physical penetration testing is one form of authorised testing of physical access and security procedures. It may involve an agreed attempt to enter a defined area, but it is never assumed to be part of a review. We discuss whether that level of testing is necessary and suitable before proposing it.

The scope is agreed in writing

Before any test, the people with authority over the affected premises must approve a written scope. Where spaces, equipment or operations belong to tenants, productions or other parties, the necessary permissions must also be established.

The scope identifies the question being tested, permitted areas and methods, dates and times, excluded spaces and activities, and the information that may be recorded. It names a client contact who can stop the exercise and sets the circumstances in which testing must end.

We agree who needs to be informed, how the team can confirm authorisation and how an actual incident will be distinguished from the exercise. A change to the scope requires agreement before the work continues.

Protecting people and keeping work running

Testing is planned around filming, occupied areas and the people using the site. Destructive entry, damage to equipment, interference with life-safety systems and the creation of a real emergency are excluded from this service.

The plan addresses welfare, confidentiality and the risk of an exercise being mistaken for a genuine incident. Testing stops if safety, authority or control is in doubt, or if a real incident requires attention.

The purpose is to understand how the arrangements perform. Findings are handled constructively, with attention to instructions, resources and supervision as well as individual actions. Staff should have an appropriate debrief.

Findings you can act on

The report sets out the agreed scope, what was observed, the limits of the exercise and the recommended improvements in priority order. Sensitive details are shared only with the agreed recipients.

We discuss who will take responsibility for each action and whether a follow-up check would be useful. A test provides evidence about the conditions examined; it cannot guarantee that a site is secure in every circumstance.

Questions from studio owners

Will you turn up and try to break in? No. A review does not authorise attempted entry. Any practical test needs its own agreed scope and written permission before it takes place.

Can we keep the exercise open and collaborative? Yes. A walkthrough or observed exercise may answer the question. Covert testing is considered only where there is a clear reason and express agreement.

Can we use this with our current security provider? Yes. We agree how the provider will be involved and how findings will be discussed. The review does not require you to change supplier.

Does this include cyber penetration testing? This service concerns physical premises, access procedures and staff responses. Testing computer systems or networks is outside its scope.