BS 7499 Explained: The Static Guarding Standard for UK Security Companies

Ask five people in the industry what BS 7499 covers and you'll get five slightly different answers, usually because they're thinking of an older edition or mixing it up with the standard next to it on the shelf. Here's what it actually is, and where it sits next to BS 7858, BS 7984 and ACS.

What BS 7499 is

BS 7499 is the British Standard code of practice for the provision of static guarding security services. It's published by BSI (the British Standards Institution) and sets out recommendations for how a company providing static site guarding should be managed, staffed and operated, things like supervision arrangements, staff competence, and the standing operating procedures a guarding contractor should have in place. It is a management standard for the guarding company, not a document a client reads to understand their own site risks, and it does not cover cash and valuables in transit, CCTV monitoring, door supervision, keyholding and response, or event stewarding, those sit under their own standards or licensable activity categories.

The standard has been revised more than once. The edition published in 2020 retitled it "Provision of static guarding security services" and narrowed its scope to static guarding specifically, having previously covered mobile patrol under the same document. As of this piece, BSI's own product page shows that edition withdrawn, with a revised edition scheduled, reportedly informed in part by the Manchester Arena Inquiry recommendations and the Protect Duty (Martyn's Law) work going on elsewhere in the industry. That means the exact current status of BS 7499 is moving. Don't take a year or a scope description on trust, including this one: check BSI's knowledge or shop pages (knowledge.bsigroup.com or shop.bsigroup.com, search "BS 7499") for the live status before you cite an edition to a client or an assessor, and read the standard itself for the actual clauses. This piece summarises what the standard is for, it isn't a substitute for it.

How it relates to BS 7858

BS 7499 and BS 7858 are frequently mentioned in the same breath but they answer different questions. BS 7499 is about how the guarding company runs its static site operation. BS 7858 is about how you screen the individual before you put them on a site: a structured vetting process covering identity, right to work, a multi-year employment history check and criminal record and reference checks. A company can be well run against BS 7499's principles and still have gaps in its BS 7858 vetting records, or vice versa, they're checking different things. BS 7858 vetting explained goes into that standard in more detail.

How it relates to BS 7984

BS 7984 is the standard for keyholding and response services, a different service line again: attending alarm activations, securing premises after a breach, and related response work. It's split into parts covering general keyholding and response recommendations, lone worker response services, and mobile security service provision specifically. If your company offers keyholding or alarm response alongside static guarding, that work is assessed against BS 7984, not BS 7499. Many guarding companies hold certification against more than one of these standards because they offer more than one service line, and it's worth knowing which standard covers which part of your operation before a client or certification body asks.

How it relates to ACS

The SIA's Approved Contractor Scheme doesn't require BS 7499 certification directly, ACS has its own self-assessment workbook and verification visit. There are two routes in. The standard route works through the SIA's own Self-Assessment Workbook, an eligibility check and a verification visit by a chosen approved certification body. The passport route lets a company that already holds relevant UKAS-accredited certification, commonly a "gold" level certification from a recognised certification body that itself bundles manned guarding standards including BS 7499 alongside BS 7858 vetting, substitute that existing assessment for the workbook and verification visit, shortening the path and avoiding paying two assessors to check the same thing. In other words, BS 7499 compliance tends to feed into your ACS readiness rather than being a separate, unrelated hoop. To be eligible for ACS at all, a company generally needs to have been trading and supplying licensable security services under contract for at least 12 months. What ACS involves explains the scheme itself, and how the pieces fit together for an assessment.

Why the current edition is worth checking twice

Standards like BS 7499 aren't static once published, BSI keeps them under periodic review and reissues them when the industry or the law around it moves. That's exactly what appears to be happening here: the previous edition's withdrawal and a revision reportedly shaped by post-Manchester Arena Inquiry recommendations and the wider Protect Duty agenda mean the scope or emphasis of the next edition could shift, for instance toward more explicit site-survey and counter-terror awareness expectations. If you're quoting a specific requirement to a client, writing it into a tender response, or relying on it for a certification renewal, check the live BSI listing first rather than repeating a year you read in an old procurement pack or a supplier's marketing page, including this one.

What this means day to day

None of these standards are things TacDesk certifies you against, no software makes a company BS 7499 or ACS compliant. What TacDesk's Compliance module does is hold the records an assessor or client audit actually asks for against these standards: BS 7858 vetting steps tracked per guard, training completion against a matrix, and evidence attached against each ACS criterion, so the paperwork behind these standards lives in one place instead of a filing cabinet, a shared drive and someone's inbox. The standard itself, and the operational decisions it asks you to make, are still yours to get right.

If you're building your compliance record from scratch, start free to get SIA licence tracking and your operational records running now, and add the Compliance module once BS 7858 vetting and ACS evidence become the thing you need to prove.