ΊΪΑΟΚΣΖ΅

Building Security Risk Assessment Template for Canada

Generate a bespoke document

What is a Building Security Risk Assessment?

A Building Security Risk Assessment is a crucial document required for identifying, analyzing, and mitigating security risks in building facilities across Canada. This assessment is typically conducted when establishing new security protocols, after significant security incidents, during major renovations, or as part of regular security reviews mandated by insurance requirements or regulatory compliance. The document must comply with various Canadian federal and provincial regulations, including occupational health and safety laws, privacy legislation, and building codes. It encompasses thorough analysis of physical security measures, access control systems, surveillance capabilities, emergency response procedures, and staff training requirements. The assessment is particularly vital for buildings housing sensitive operations, valuable assets, or large numbers of occupants, and serves as a foundation for security planning and resource allocation.

Frequently Asked Questions

Is a Building Security Risk Assessment legally required in Canada?

Yes, Building Security Risk Assessments are mandatory under Canadian federal and provincial legislation, including the Occupational Health and Safety Act and National Building Code of Canada. Commercial property owners and employers must conduct these assessments to comply with workplace safety requirements and building security standards. Failure to complete this assessment can result in regulatory penalties and increased liability.

Can I be fined if my Building Security Risk Assessment is incomplete or missing?

Yes, under Canadian occupational health and safety legislation, incomplete or missing Building Security Risk Assessments can result in significant fines ranging from $25,000 to $100,000 for corporations, depending on the province. Provincial safety inspectors can issue stop-work orders, and you may face increased liability in case of security incidents. Criminal charges may apply if worker safety is compromised due to inadequate security risk assessments.

How does a Building Security Risk Assessment differ from a general safety audit in Canada?

A Building Security Risk Assessment specifically focuses on security threats like unauthorized access, theft, and violence, while a general safety audit covers broader workplace hazards like equipment safety and environmental risks. The security assessment is required under specific sections of the Occupational Health and Safety Act relating to workplace violence prevention and building security measures. Both documents may be required depending on your facility type and provincial regulations.

How long does it typically take to complete a Building Security Risk Assessment?

For most commercial buildings, completing a comprehensive Building Security Risk Assessment takes 2-4 weeks, including site evaluation, stakeholder consultation, and documentation preparation. Large or complex facilities may require 6-8 weeks, while smaller properties can often be assessed within 1-2 weeks. The timeline depends on building size, security complexity, and availability of building plans and existing security documentation.

Which Canadian provinces have the strictest Building Security Risk Assessment requirements?

Ontario and British Columbia typically have the most comprehensive Building Security Risk Assessment requirements under their respective Occupational Health and Safety Acts. Quebec also has strict standards under the Act Respecting Occupational Health and Safety. Alberta and other provinces follow federal guidelines but may have additional requirements for specific building types like healthcare facilities or schools.

Can outdated Building Security Risk Assessments cause legal problems in Canada?

Yes, using outdated assessments can create significant legal liability under Canadian occupational health and safety law. Most provinces require assessments to be reviewed annually or when significant building changes occur. An outdated assessment may not reflect current security threats or building modifications, potentially resulting in regulatory violations and increased liability if security incidents occur.

Why do Building Security Risk Assessments get rejected by Canadian safety inspectors?

Common rejection reasons include failure to identify all potential security risks, inadequate mitigation measures, missing required elements under provincial regulations, or failure to consult with workers and safety committees as required by the Occupational Health and Safety Act. Assessments lacking proper documentation of physical security measures, emergency procedures, or workplace violence prevention strategies are also frequently rejected by inspectors.

Reviewed by

Legal Engineer, GenieAI

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Legal Engineer, GenieAI

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

Canada

Reviewed by

&

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Building Security Risk Assessment

A Building Security Risk Assessment is a comprehensive evaluation document that systematically identifies security vulnerabilities, analyzes potential threats, and recommends protective measures for your building facility. Under Canadian law, this assessment serves as both a regulatory compliance tool and a strategic security planning document that helps you fulfill your duty of care obligations to occupants, visitors, and employees.

When do you need this document?

You need a Building Security Risk Assessment when establishing security protocols for new facilities, following security incidents or breaches, during major renovations that affect building access or layout, or when insurance providers require updated risk evaluations. The assessment is also mandatory for buildings housing government offices, financial institutions, healthcare facilities, or educational institutions. Regular updates are typically required every 2-3 years or when significant changes occur to building operations, occupancy patterns, or surrounding security environment.

Key legal considerations

Your assessment must address several critical legal requirements including compliance with privacy legislation when implementing surveillance systems, ensuring security measures don't create discriminatory barriers under human rights legislation, and maintaining adequate emergency response capabilities. The document should clearly identify roles and responsibilities for security personnel, establish protocols for incident reporting and investigation, and ensure all security measures align with workplace safety standards. You must also consider liability implications of security decisions, documentation requirements for incident records, and coordination protocols with local law enforcement and emergency services.

Legal requirements in Canada

Under the Occupational Health and Safety Act, employers must provide a safe working environment, which includes conducting risk assessments and implementing appropriate security measures. The National Building Code of Canada establishes minimum requirements for building security features, emergency exits, and safety systems that must be evaluated in your assessment. PIPEDA governs how you collect, use, and store personal information through security systems like surveillance cameras and access control databases. Provincial Private Security and Investigative Services Acts regulate security personnel licensing and operational standards. Your assessment must demonstrate compliance with the Emergency Management Act requirements for emergency preparedness and response planning, while ensuring all security protocols respect Charter rights and freedoms.

GOVERNING LAW

Applicable law

This Building Security Risk Assessment is drafted to comply with Canada law. Key legislation includes:











Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it