Suspicious Behaviour Red Flags

Suspicious Behaviour Red Flags

Security is not solely the responsibility of the security team. Every employee is a potential observer and reporter of suspicious activity. Knowing what to look for — and feeling empowered to report it — is one of the most effective security controls available.

Physical Environment Red Flags

• Someone loitering near access-controlled doors without badging in
• A person photographing security equipment, access panels, or server rooms
• Individuals accessing areas they have no apparent reason to be in
• Someone attempting to look over shoulders at screens or documents
• Vehicles parked for extended periods near secure entry points

Behavioural Red Flags

• Nervousness, evasiveness, or reluctance to make eye contact when challenged
• Claiming to be from IT, maintenance, or management without prior notice
• Excessive interest in security procedures, shift patterns, or access controls
• Attempting to access systems or areas outside normal working hours
• Pressure to act quickly or bypass normal procedures

Digital Red Flags

• Unexpected password reset emails or login alerts
• Colleagues receiving unusual requests from your email address
• Unfamiliar devices appearing on the office network
• Unexplained files or applications on workstations

What to Do

Do not confront suspicious individuals alone. Report concerns to your security team, facilities manager, or line manager. Document what you observed — time, location, description — as accurately as possible.