Subsection 6.2: Building security

In order to meet the criterion mentioned in Article 28, paragraph 1, letter a) of the AE CAU, you must ensure that the buildings to be used for the performance of operations related to the AEOS authorization offer protection against illegal intrusion and are constructed with materials that resist illegal entry.

6.2.1. a), b) and c)

This also applies when the premises have visible external boundaries, such as fences and gates. Customs authorities expect all interior and exterior windows, doors, and gates to be secured, for example, with locking devices, or to adopt alternative access control or surveillance measures, such as internal and external burglar alarm systems or closed-circuit television (CCTV) systems.

For questions a) to c), information relating to the monitoring of compliance with these measures, the frequency with which checks are carried out on buildings and fences and the way in which security incidents are communicated and dealt with must be included in the document referred to in answers 6.1.2 a) or b). In this section, reference must be made to the corresponding section, section or page (revision or date) of that document.

6.2.2. a) and b)

You should list all access points, preferably referring to the site plan, include fire exits with corresponding access stairs, indicate designated loading and unloading entrances, service entrances, public access counters, and driver rest areas, and indicate the location of the security guard booth/guard post.

When describing how access control is carried out, you should refer, where appropriate, to the type of CCTV system (e.g., static or pan/zoom cameras) and indicate how it is controlled and whether the image obtained is used proactively or reactively.

In addition to external access controls, you must describe internal access controls, including, where appropriate, internal access to shared facilities.

Confirm whether your facilities are open 24/7 (e.g., shift work) or during normal business hours.

6.2.3

Where applicable, include information on any generators or emergency devices installed to ensure continuous lighting in the event of a local power outage, and how they are maintained.

6.2.4

Indicate how keys are identified and what procedures are in place to prevent misuse or loss.

Measures must be in place to ensure that only authorized personnel have access to keys to buildings, sites, rooms, secure areas, files, safes, vehicles, and machinery. Your procedures should also specify:

• the place specifically provided for keeping the keys,
• the person responsible for controlling the security of the keys,
• the record of access to the keys, indicating who accessed them and for what reason, as well as the time of their return,
• the way in which the loss or non-return of keys is dealt with.

Provide information on any lockout procedures and, where appropriate, the identity of the master key holders responsible for locking the premises at night and reopening them the following morning.

Provide information about key devices or "radio keys" (used, for example, to remotely operate a parking barrier) that are in use and to whom they have been issued.

6.2.5, a), b), c) and d)

Your procedures must provide for:

• the way to control/register visitors who access your facilities in private vehicles,
• how to control employee vehicles on your premises,
• the provision of car parking areas specifically designated for visitors and employees that are not close to security areas, for example, loading docks, in order to avoid any possibility of theft, obstruction or interference,
• monitoring compliance with parking requirements.

1. Explain whether visitor cars are separate from employee cars. Include information on whether other vehicles, such as taxis or staff buses, have temporary access to your facilities.
2. You must ensure that procedures are in place to ensure the authorization is periodically reviewed and updated to account for vehicle changes by staff. Provide information on whether employees are issued parking permits and on the mechanism for entering and exiting the parking lot, for example, whether it has a barrier that is activated by reading a card.
3. Describe any processes or procedures used to ensure proper control of all vehicles, for example, whether personnel are deployed at barriers during peak hours to prevent vehicles from traveling without respecting safe distances.
4. Describe any written regulations you have regarding vehicle parking, as well as how they are communicated to staff. Confirm whether such regulations have been included in the risk assessment.