Running head: LOWE’S SECURITY PLAN 1

Comprehensive Security Plan for Lowe’s Home Improvement Stores

[Name]

[Course]

September 19, 2018

LOWE’S SECURITY PLAN 2

Comprehensive Security Plan for Lowe’s Home Improvement Stores

Lowe’s, an American home improvement chain, operates more than 1,800 stores in North

America (Lowe’s, 2014). This security plan will consider a variety of security concerns relevant

to a prototypical free-standing Lowe’s store, including preventive measures that can be taken to

help minimize security issues.

Physical Plant Intrusion

As a retailer, there is minimal likelihood of intrusion into the physical structure of a

Lowe’s store; in fact, according to Fischer et al., “internal theft accounts for at least twice the

loss from external theft (that is, from burglars, armed robbers and shoplifters combined)” (2013,

p. 289). Store managers might nevertheless want to consider the possibility of hiring contract

security guards to patrol the store; studies of bank robberies have determined that the presence of

guards can significantly deter robbery attempts (Hannan, 1982).

While the store is open, burglary or breaking and entering are most likely to occur in the

parking lot (i.e., breaking and entering into customers’ or employees’ cars). Precautions against

this type of activity include making sure that the parking lot is well-lit during dusk and nighttime

hours, employing security patrols to monitor the parking area, and utilizing CCTV and other

surveillance technologies (Fischer et al., 2013).

Forcible entry and robbery are most likely to occur overnight when the store is closed and

employees have gone home for the day. There are a number of tactics that can help minimize the

possibility of intrusion. These include making sure that all doors are properly locked and

secured, and using an intrusion alarm triggered by motion detectors and photoelectric beams

(Fischer et al., 2013). One additional measure involves posting signage indicating that the
LOWE’S SECURITY PLAN 3

property is protected by security measures; studies have shown that such an effort can effectively

reduce property crimes (Nettle et al., 2012).

Property Damage & Vandalism

The primary areas of a Lowe’s store that are most prone to property damage or vandalism

include the store exterior and the sales floor, where merchandise may be vulnerable to

shoplifting. Many of the same tactics that are recommended for the parking area are applicable in

reducing exterior property damage; to recap, these include placement of adequate exterior

lighting, scheduling security patrols, installation of CCTV systems, and posting signage warning

would-be vandals of the presence of these systems.

Shoplifting is a slightly different problem to combat. Fischer et al. note that good

customer service and vigilant, well-trained employees are the first line of defense against

shoplifting (2013), but a number of different systems are available to augment this method.

Electronic article surveillance (EAS) systems should be installed; these systems typically consist

of an electronic tag that is applied to merchandise (deactivated at the time of purchase) and a

doorway sensor that sounds an alarm if an active tag passes by. Shoplifting can also be deterred

by employing CCTV technology, placing particularly vulnerable or valuable items within visual

range of checkout stands, and securing particularly expensive items (Fischer et al., 2013). All of

these methods can help reduce shoplifting, as studies have shown that observation, fear of

prosecution, and EAS systems are all effective deterrents (Carmel-Gilfilen, 2013).

Personal Safety and Security

Concerns related to personal security within a Lowe’s store are relatively minimal, but

this does not preclude the possibility of assaults, altercations, pickpocketing, or other sorts of

criminal behavior from occurring in or around the store. A number of the interventions
LOWE’S SECURITY PLAN 4

mentioned previously would help to minimize these occurrences; these include the installation

and active use of CCTV, adequate lighting, and training employees to be vigilant observers

(Fischer et al., 2013). Studies seem to indicate that customers are most comfortable with

shopping environments when informal surveillance methods are employed; in other words,

“stores where consumers and employees have a high sense of security have made more

investments in comfortable, clean and well-lit premises” (Kajalo & Lindblom, 2010, p. 465).

Information & Records Security

Home Depot, a direct competitor to Lowe’s, recently found itself paying out over $19

million in a settlement agreement to customers whose credit card information had been exposed

in a computer security breach that took place over a period of months in 2014 (Kieler, 2016).

This should be a wake-up call for Lowe’s; in the modern information age, keeping electronic

customer data safe should be just as much of a priority as keeping physical files and cash

secured.

Security professionals should safeguard computer systems (including inventory systems,

POS/cash register systems and servers, and other store-related systems) in a number of ways.

Software backups of critical operations data (both on-site, stored in a fire-resistant safe, and off-

site, via “cloud” systems) are a must, and backup hardware is necessary in the event of physical

damage to computer systems. Computer systems should employ industrial-level encryption,

especially those systems that contain or handle sensitive customer data; systems should also

require identity verification before access is granted (Fischer et al., 2013). A number of access

control systems are available, though the most common method is to assign individual login IDs

and passwords to employees and managers. Problematically, however, is the fact that many

people choose passwords that are too short, too common, or too easily guessed; these types of
LOWE’S SECURITY PLAN 5

passwords can be hacked more easily than others, so management should ensure that passwords

are sufficiently complex, that they are changed regularly, and that any password database

employed is itself encrypted and secured appropriately (Cazier & Medlin, 2006).

While Lowe’s employs a number of computer systems that must be appropriately

secured, the physical nature of the store means that there are invariably sensitive files,

documents, and records that must also be secured, not to mention cash that is collected from

customers prior to deposit. Appropriate burglar-resistant filing cabinets and TL-rated fire-

resistant record and cash safes placed in “employees only” areas are largely sufficient to protect

a retail establishment’s records and cash, though it may be wise to augment these with controlled

access to the room(s) they are located in (Fischer et al., 2013). Either an electronic number lock

or a traditional key can provide an additional level of security, as can the aforementioned CCTV

and security patrols.

Emergency Planning & Response

Traditionally speaking, security’s role in the development of an emergency response plan

is to develop emergency evacuation plans for the building, and to develop responses to

emergency or crisis situations (Fischer et al., 2013). This plan should help a Lowe’s store that

encounters a crisis or emergency to resume normal operations as quickly as is feasible.

Fischer et al. identify three major categories of “contingencies” that should be addressed

in an emergency response plan; broadly, these are infrastructure-related (e.g., fire, flood,

earthquake), people-related (e.g., accidents, epidemics of disease), and reputation-related (e.g.,

product recall) (2013). As contingency/emergency planning is an ongoing process, the Lowe’s

store should designate a workgroup comprised of employees, managers, corporate stakeholders,

and representatives of emergency response services such as police or the fire department to
LOWE’S SECURITY PLAN 6

develop clear and workable plans. These should include procedures for reporting emergencies,

notifying employees or customers of the issue (if appropriate), developing evacuation plans, and

considering back-to-work contingencies and procedures once the emergency has passed (Fischer

et al., 2013).

OSHA Standards and Violations

As a hardware store, Lowe’s is filled with a number of potential dangers—household and

garden chemicals, sharp blades, heavy stones and masonry, and specialized machinery, to name

just a few. OSHA’s Hazard Communication Standard requires that includes hazard warning

signs and labels as well as material safety data sheets (MSDS) be placed conspicuously; Lowe’s

should bolster this by specifying that there is at least one “safety warden” on the floor at all times

during opening hours. This person should be tasked with making sure that hazards are properly

identified and that individuals are aware of any precautions that must be taken to avoid injury or

death.

Lowe’s also must pay particular attention to its sales floor; given the open nature of the

store layout and the presence of a variety of chemicals, hardware, boxes and crates, and other

pieces of equipment, it could become very easy for the floor to become littered with garbage,

cables, or puddles of liquid. These could all pose significant safety or health hazards to both

employees and customers. As such, the aforementioned safety warden should take time during

every shift to walk the sales floor (as well as “employees only” areas including the stock room)

to identify obstructions or other hazards that need to be remedied, and assign appropriate

individuals to correct these issues as quickly as possible.

LOWE’S SECURITY PLAN 7

Hiring Practices

Lowe’s (as well as other companies) can be held liable for the practice of “negligent

hiring,” which is effectively the hiring of “individuals with characteristics which might pose a

danger to customers or other employees” (Fischer et al., 2013, p. 117). Because of this precedent

set by Phillips v TLC Plumbing Inc., employers must take as many precautions as possible to

ensure that the individuals they hire are competent and do not pose a threat to others.

Background checks should be conducted to determine if applicants have a criminal history,

though the results should be considered on a case-by-case basis, given the Equal Employment

Opportunity Commission’s concern that such checks can result in discrimination against certain

minority groups. Reference checks should also be conducted, being sure that the checks fall

within the guidelines specified in the law (Fischer et al., 2013). Common sense should also

prevail; Fischer et al. note that candidates that lack job stability, that show gaps in employment,

that are overqualified, or that show signs of interpersonal instability should be considered with

caution (2013).

Training Practices

In terms of security, particularly when it comes to loss prevention and overall safety of

employees and customers, all employees should receive basic security training with refresher

courses offered periodically. Employees should be trained to identify suspicious behavior as well

as unsafe or hazardous environments, should be aware of evacuation procedures and routes, and

should be educated on the store’s emergency contingency plans, among other topics. This sort of

training will help employees to recognize the important role that they play in maintaining a safe

and secure store that customers will enjoy visiting.

LOWE’S SECURITY PLAN 8

Managers carry additional responsibilities in retail, and this should also include additional

safety and security training that expands beyond the basic information offered to all employees.

For example, managers should be trained on proper document and money handling methods,

protocols for maintaining computer security and password integrity, proper methods for securing

areas with controlled access, and so forth. Managers should also be empowered to designate

specific employees or assistant managers with particular security and safety-oriented tasks, such

as designating the aforementioned floor safety wardens.

As for more specialized security agents, Lowe’s will need to ensure that individuals

employed to handle specific security-related tasks (e.g., guards, computer security, loss

prevention, etc.) are properly trained; preferential hires will hold at least a Bachelor’s in

criminology, criminal justice, or a related field. Alternately, retired military or police officers

might also be preferred as hires, assuming that their background checks come back clean.

Unique Legal Issues

Lowe’s is subject to the same legal regulations and policies applicable to any other

retailer, but Lowe’s must take some extra precautions to monitor the sales of certain items that it

carries. Spray paint, for example, is regulated by both city and state law (Sherman, n.d.); in some

areas, spray paint may not be sold to a minor. Each Lowe’s store will need to be certain that it

conforms to these laws; as a best practice, access to spray paint should be restricted via locked

cabinet or display case to limit the possibility of shoplifting. Other chemicals, such as fertilizer

or pesticides, have been implicated in certain bombings; as a private retailer, Lowe’s has the

right to refuse sales to any individual, and while this may not be necessary in most cases, the

store should require photo ID before these items can be purchased as a deterrent of malicious

activity.
LOWE’S SECURITY PLAN 9

References

Carmel-Gilfilen, C. (2013). Bridging security and good design: Understanding perceptions of

expert and novice shoplifters. Security Journal, 26(1), 80-105.

Cazier, J. A., & Medlin, B. D. (2006). Password security: An empirical investigation into e-

commerce passwords and their crack times. Information Systems Security, 15(6), 45-55.

Fischer, R. J., Halibozek, E. P., & Walters, D. C. (2013). Introduction to security (9th ed.).

Waltham, MA: Butterworth-Heinemann.

Hannan, T. H. (1982). Bank robberies and bank security precautions. The Journal of Legal

Studies, 11(1), 83-92.

Ingraham, C. (2015, October 23). Most Americans are wrong about whether concealed carry

makes us safer [Web log post]. The Washington Post. Retrieved from

https://www.washingtonpost.com/news/wonk/wp/2015/10/23/most-americans-are-wrong-

about-whether-concealed-carry-makes-us-safer/

Kajalo, S., & Lindblom, A. (2010). Surveillance investments in store environment and sense of

security. Facilities, 28(9/10), 465-474.

Kieler, A. (2016, March 8). Home Depot agrees to pay $20M to settle 2014 data breach lawsuit

[Web log post]. Consumerist. Retrieved from https://consumerist.com/2016/03/08/home-

depot-agrees-to-pay-20m-to-settle-2014-data-breach-lawsuit/

Lowe’s. (2014). About Lowe’s. Retrieved from http://media.lowes.com/about-lowes/

Nettle, D., Nott, K., & Bateson, M. (2012). ‘Cycle thieves, we are watching you’: Impact of a

simple signage intervention against bicycle theft. PLoS One, 7(12), e51738. doi:

10.1371/journal.pone.0051738
LOWE’S SECURITY PLAN 10

Sherman, F. (n.d.). Spray paint sales laws. Small Business. Houston Chronicle. Retrieved from

http://smallbusiness.chron.com/spray-paint-sales-laws-72890.html