Retail Security Assessment

McCray’s Retail Security Assessment is advisory work for retailers whose losses persist despite the controls already in place. One officer of Tier III classification or above works the store in plain clothes, observes how it actually operates across the trading day and, where access is granted, checks what is seen against the store’s own records. The result is a ranked list of specific control failures, each with the evidence behind it, an owner for the fix and a way to confirm the fix worked.

Retail Shrink in Context

A shrink figure records how much has gone, not how it left. Merchandise can leave through the front of a store or the back, fail to be counted when it arrives, or pass a register at the wrong price, and each calls for a different response. Sources and more figures are on the Retail Theft Statistics page.

Four Questions Behind Every Assessment

A store can lose stock in more than one way at once. Time on site establishes which of these apply, and in what proportion, so that money spent on a remedy addresses the actual cause.

How the Assessment Works

A full assessment runs seven consecutive days on site with one officer, roughly sixty hours of observation spread across opening, mid-day, evening, closing and deliveries. Loss concentrates in particular hours, so the store is seen as it actually runs rather than one shift repeated. A shorter period is possible where the scope is narrowed, though a week is the point at which patterns separate from one-off incidents.

The officer records everything observed as it happens, with the date, the time and the place in the store. Where a store record contradicts an observation, both are reported and the conflict is stated. Anything urgent is escalated the day it is observed rather than held for the report.

Standards Behind Every Finding

• Observation before conclusion. The officer establishes what happens rather than proving a theory, and takes no direction from what anyone already believes the cause to be.
• A written record. Every entry carries a date, a time, a place and what was seen. Nothing is reported as a finding unless it was observed at least three times. A single observation is recorded and reported as such.
• Whole-day coverage. Opening, mid-day, evening, closing and deliveries, rather than one shift repeated.
• Record separate from analysis. The record and the conclusions sit apart in the report, so the client can read the facts and form an independent view.
• Process before people. The assessment looks first at whether the process allows loss, because a process that allows it will keep producing loss after any individual has gone. Where the work points to a particular person, McCray reports it to the client and goes no further.
• Thirty-day review. At thirty days, McCray reviews what was put in place and whether the result moved.

Areas of the Store Reviewed

• Receiving and DockWhether goods are counted when they arrive.
• BackstockAccountability for stock held behind the floor.
• Sales FloorWhat can be seen, and what cannot.
• RegistersHow goods are rung, voided and refunded.
• ExitsEvery way merchandise can leave the building.
• Damage and MarkdownWho can write goods off, and who watches.
• Waste and Rear DoorMovement to the back of the building.
• Keys and CashWho holds keys, and how cash is handled.
• RecordsWhat the existing records can show.
• PeopleAuthority and supervision on the floor.

The scope is assembled from individual checks. Core checks apply at every engagement. Added checks apply only where the store operates the system concerned, such as a baler or a camera system, and are confirmed with the client before work begins. Finding that a control is absent is a useful answer in itself and is reported that way.

What the Client Receives

1. Daily Observation Log. Issued each morning during the engagement, with the prior day’s dated entries, open items and same-day escalation of anything urgent.
2. Interim Briefing. At the end of day four, with direction of travel, early indications and any adjustment to the plan for the remaining days.
3. Findings Report. Within five business days of the final day, with findings ranked by contribution, the record behind each and a countermeasure plan sequenced by effect, with an owner against every action.
4. Thirty-Day Review. Thirty days after the report, covering what was put in place and whether the result moved against the baseline taken during the engagement.

Scope, Licensing and Confidentiality

This is advisory work rather than guard coverage. No uniformed presence is provided and no deterrent effect is intended. McCray walks the store before the scope is agreed, then issues a written scope of work setting out what will be reviewed, at which stores, over what period and at what price. Nothing is priced before the scope is agreed.

Work that seeks to determine the cause of a loss, or an individual’s responsibility for it, is regulated as investigative activity in many jurisdictions and is licensed separately from security guard services. McCray confirms the licensing basis in writing before any work begins.

Observation is limited to public and work areas of the store, never where anyone would reasonably expect privacy. McCray records no audio and installs no equipment of its own. Findings concerning individuals record observed conduct only and are not conclusions of guilt. Reports are issued only to the named recipient.

Common Questions

How Long Does a Retail Security Assessment Take?

A full assessment runs seven consecutive days on site with one officer, about sixty hours of observation. A shorter period is possible where the scope is narrowed.

Does the Officer Wear a Uniform?

No. The officer works in plain clothes and is introduced to store staff in whatever way the client decides beforehand. Nothing in the work depends on posing as a customer or making a test purchase.

Who Carries Out the Assessment?

An officer of Tier III classification or above under the McCray Security Officer Classification Program, because the work is investigative rather than protective.

What Does the Client Need to Provide?

The store to be assessed, confirmation of which added checks apply, agreement on how the officer is introduced to staff, and a single named point of contact. Access to the store’s own records allows floor observation to be checked against them.

How Is the Assessment Priced?

Pricing follows a written scope of work that sets out what will be reviewed, at which stores and over what period. Nothing is priced before the scope is agreed.

How Is This Different From a Security Risk Assessment?

A security risk assessment reviews threats, layout, people and procedures to design a security program. A Retail Security Assessment spends time inside an operating store to establish where inventory loss originates, and in what proportion.