Vulnerability assessment

Risk and vulnerability assessments help bus operators identify potential weaknesses and prioritise investment in upgrading their facilities. These assessments should be regularly repeated to reflect structural changes or construction activities, as well to be aligned with the emergence of new threats and development of modus operandi. It is important not to limit risk and vulnerability assessment to critical assets, but also to consider public spaces needed for the operation of bus services.

Security plan

All relevant business assets need a security plan, this includes restricted facilities, such as control rooms or depots, as well as publicly accessible locations. Special security plans need to be prepared for specific events, when passenger numbers and flow are expected to differ from the daily routine.

Security organisation

Depending on the size of the organisation and the complexity of the bus operation, the security organisation needs to comprise several levels, looking at strategic and operational aspects. Dedicated persons need to be assigned the responsibility of coordinating and implementing security measures as defined in the security plan

Crisis management plan

Given the complexity of transport systems and the flexibility of bus operations, crisis management comprises the handling of a crisis itself, but also managing the impact of a crisis at one location on the rest of the operation. Having to deal with a crisis does not mean an automatic shut-down of the entire operation as too many people depend on the availability Crisis management plans need to address handling the actual crisis, adapting and re-routing services where possible and informing passengers about available services

Public awareness campaigns

Given the complexity of bus systems, largely public access and the high number of passengers frequenting vehicles and infrastructure, passenger can play an important role in protecting bus operations. Situational awareness can help an early detection of threats and knowing how to react in the case of an attack can aid the crisis management. Being alert for suspicious situations and being familiar with existing emergency and support tools can help preventing the escalation of any potential danger. It is important to find the right balance in public awareness campaigns, encouraging support, but not scaring

Security awareness and culture

It is key to acknowledge that security is not only the task of security managers and staff, but that every employee in every position has a role to play

Insider threat awareness

Like every organisation, also bus operators may be threatened by an insider. This could be countered by a careful selection of staff to be employed, by defining clear procedures for work and instilling the discipline to follow those procedures and encouraging staff to be vigilant for suspicious behaviour

Security training

Security in bus operation is the responsibility of all staff members. Training programmes need to clarify the role and responsibility of staff at every position and provide employees with the expertise need for their job. Their focus of their training would also include preventing sabotage, theft, or vandalism. An additional focus for control room staff is the handling of emergency calls or incoming threats and potential activation of security protocols

Security exercises

Regular security exercises help monitor the level of preparedness within an organisation and understand shortcomings and vulnerabilities

Design

Resilient assets are a corner stone for the protection bus systems. Standards and guidelines for layout and material have evolved a lot during recent years and are followed for new structures or the upgrading of existing facilities and equipment. In general, however, public transport systems are not new and involve legacy infrastructure directly embedded into the public space

Barriers and access control

Access control to restricted facilities and equipment aims to ensure that only authorised personnel and material can enter a site. All doors between public and restricted areas should be locked or controlled

CCTV with video and audio recording