Threats and misconceptions
The guide addresses shops, malls, restaurants and food courts. Overseas shopping and dining attacks illustrate risks to lives, premises, supply chains, customer confidence and reputation. Preparedness is not solely a guard’s job; ordinary housekeeping, reporting and relationships matter. Historical cases explain planning needs rather than predict an attack on a particular shop.
Roles and action plans
Building managers coordinate protection, CERT, alarms and tenant recovery. Owners fund training and security, set policy and lead continuity and HR support. Store managers and employees keep watch, know shift duties, protect customers and report conditions. The guide supplies separate action plans for all three groups.
Prepare people and premises
Use shift briefings, awareness materials, emergency-skills training and exercises. Appoint an SGSecure representative and establish an ERP/CERT at the appropriate level. Review perimeter protection, entrance controls, CCTV, patrols, secure access and hiding areas alongside housekeeping. Test plans through tabletop and practical drills.
Cybersecurity and continuity
Identify sensitive data, control access, maintain updates and backups and rehearse an incident-response plan. BCP should prioritise critical operations and alternate employees, suppliers, premises, equipment and IT recovery. A data backup alone does not solve lost premises or disrupted supplies.
Community and crisis communications
Maintain tenant, contractor, supplier and relevant union links, staff/next-of-kin lists, a crisis team and spokesperson. Decide where verified company information will appear and how people will be contacted if normal channels fail.
Immediate response
Follow Run, Hide, Tell and the premises’ safe lockdown/evacuation arrangements. Activate alarms and teams, account for staff and give responders useful location, floor-plan and CCTV information. Do not endanger more people when helping casualties; use current training and instructions. Cyber response involves identifying the breach, containment, appropriate reporting, evidence preservation, technical remediation, clean restoration and monitoring.
Recovery and resources
Offer trained PFA and professional support where needed, verify official information, address discrimination and coordinate reopening. Review the BCP with partners. Resources include awareness materials, apps, exercises and courses; verify availability, subsidies and old contact details with current official providers.