In simple terms, organisations will be expected to:
- Assess security risks, including vehicle access risks
- Put reasonable measures in place to reduce those risks
- Train staff and have clear procedures
- Demonstrate that risks have been considered, not ignored
The emphasis is on reasonable and proportionate action, not one-size-fits-all solutions.