When Staffing Changes, Security Shouldn't: Managing Risk During Shift Changes and Off-Hours

​A business can have a well-designed security program and still develop vulnerabilities simply because the people, schedules, and conditions around that program change.

The transition from one shift to another. An early-morning opening before most employees arrive. An overnight period with a smaller workforce. A temporary staffing shortage. A holiday schedule. A sudden change in operating hours. These are routine business circumstances, but from a security perspective, routine does not necessarily mean low-risk.

Security programs are often designed around the assumption that an organization's normal staffing model will remain relatively consistent. In practice, staffing levels and operating schedules are constantly changing. Employees call out. Positions remain vacant. Overtime increases. Departments operate on different schedules. Facilities that are busy during the day may become nearly empty overnight.

The result can be a disconnect between how a facility is staffed and how it is protected.
That disconnect deserves particular attention because many physical security services depend on people knowing who should be present, who has authorized access, what activity is expected, and who is responsible for responding when something appears unusual.

When those conditions change, the security plan needs to change with them.

Security Risk Does Not Follow the Organizational Chart
Security vulnerabilities often appear due to oversights that can leave a facility unprotected. More often, they emerge from ordinary operational changes.

Consider a manufacturing facility operating three shifts. During the day, supervisors, administrative employees, maintenance personnel, contractors, truck drivers, and production workers may create a constant flow of people throughout the property. By midnight, the same facility might have only a fraction of that population.

The physical site has not changed. The assets have not changed. The doors, loading docks, parking lots, equipment, inventory, and sensitive areas are still there. But the human environment has changed considerably.

The same principle applies to warehouses and distribution centers, energy facilities, construction sites, commercial properties, and other businesses with extended or irregular operating hours.

For organizations evaluating commercial security services, this distinction is important. A security program should account for the way a facility actually operates rather than assuming that the same level of activity, supervision, and personnel will exist throughout the day.

The U.S. Department of Labor's Occupational Safety and Health Administration identifies several conditions that can increase workplace-violence risk, including working alone or in isolated areas and working late at night or in areas with higher crime rates. OSHA also identifies factors such as handling money, interacting with the public, and working in small groups as relevant considerations.
The implication is not that an overnight shift is inherently dangerous. Rather, time, staffing, location, and working conditions should be considered when evaluating risk.
​
That makes staffing changes a legitimate security-planning issue—not simply an HR or operations issue.

The Shift Change Itself Can Be a Vulnerable Period
The period between shifts deserves particular attention because responsibility is moving from one group of people to another. Even though this window is often very brief, it can open the door to security risks.

A security officer may know that a particular delivery is expected. A supervisor may know that a contractor is working in a normally restricted area. A manager may be aware that a certain employee has authorization to enter a particular portion of the facility.

If that information does not transfer to the next person responsible for the site, the incoming employee may be operating with an incomplete picture.

The principle of maintaining continuity during personnel changes is well established in other areas of workplace safety. OSHA's requirements for hazardous-energy control, for example, specifically address shift and personnel changes and require procedures that provide for an orderly transfer of responsibility between outgoing and incoming employees.

Although those requirements concern a specific workplace-safety hazard rather than physical security, the underlying management principle is broadly applicable: a change in personnel should not create a change in protection.

Security operations can apply the same concept through structured shift handoffs, written logs, incident reporting, access-control procedures, radio communications, and clearly defined responsibilities. A security officer coming on duty should not have to reconstruct the situation from scratch.

They should understand:

• What occurred during the previous shift
• Whether any incidents or suspicious activity were reported
• Which doors, gates, or access points require attention
• Which contractors or visitors are expected
• Whether any alarms, cameras, or access-control systems are malfunctioning
• Which areas require additional patrols
• Whether employees or managers have reported unusual activity
• Whether there are outstanding issues that the incoming officer needs to monitor

The objective is simple: the security posture should remain continuous even when the personnel providing that security changes.

Off-Hours Create a Different Security Environment
The security requirements of a facility at 2 p.m. may be very different from those at 2 a.m.

During peak operating hours, a suspicious person may be noticed quickly because hundreds of legitimate employees and visitors are moving throughout a property. At night, that same person may stand out less if only a handful of employees are present—or may be more noticeable if the organization has established clear procedures for identifying authorized personnel.

There are also practical differences in visibility, access, and response.

A facility may have:

• Fewer employees available to notice unusual activity
• Fewer managers or supervisors on site
• Reduced reception or administrative coverage
• Less traffic around entrances and parking areas
• More isolated employees
• Different delivery schedules
• Reduced maintenance staffing
• Fewer witnesses to suspicious behavior
• Longer response times for internal personnel​

For businesses responsible with comprehensive facility security needs, these conditions are worth evaluating as part of a broader security risk assessment. The objective is not necessarily to maintain identical coverage at every hour of the day, but to understand where changes in staffing and activity create different security requirements.

OSHA specifically recognizes late-night and isolated work as factors that should be considered when evaluating workplace-violence hazards. Security planning should similarly consider whether the organization's existing controls remain appropriate when staffing and activity levels decline.

Recent Incidents Illustrate the Problem
Recent cases in Pennsylvania and Ohio demonstrate that commercial properties can remain targets during periods when staffing is reduced.

In February 2025, Reuters reported that approximately 100,000 organic eggs valued at more than $40,000 were stolen from a warehouse in Greencastle, Pennsylvania. State Police said the theft occurred on a Saturday evening. The incident attracted national attention because of the unusual commodity involved and the broader shortage affecting egg prices.

More recently, a January 2026 U.S. Department of Justice announcement described a conspiracy involving burglaries at logistics warehouses in Pennsylvania and New Jersey. According to federal prosecutors, the group stole approximately $50,000 worth of Department of Defense laptops from a Pennsylvania warehouse in January 2025 and approximately $200,000 worth of high-end perfume from another Pennsylvania warehouse two months later.

These incidents are particularly relevant to businesses operating warehouses and distribution facilities because they illustrate that commercial inventory can be targeted for its value, portability, and resale potential.

Security for warehouses, even warehouses carrying goods that don’t seem like high value targets, is imperative. Security planning should account for more than the normal business day. Warehouse security guards can provide a visible physical presence during periods when employee activity declines, while also supporting access control, patrols, incident reporting, and other established security procedures.

Ohio has also seen incidents specifically involving overnight operations. In June 2025, the Ohio Board of Pharmacy issued an alert concerning a series of pharmacy break-ins across western Ohio and Indiana. The alert reported seven known break-ins beginning in May and stated that the incidents were consistently occurring between midnight and 5 a.m. The agency urged pharmacy owners and staff to review and strengthen overnight security protocols.

Separately, an Ohio appellate court case involved a series of convenience-store break-ins that occurred during overnight hours. According to the court's opinion, the businesses were entered after hours and the perpetrator repeatedly targeted ATMs.

These examples do not establish that businesses are generally more likely to experience crime during shift changes or overnight hours. They do, however, demonstrate why businesses should not assume that closing time means security considerations can be reduced to simply locking the doors.

Staffing Shortages Can Become a Security Issue
There is another dimension to the problem: sometimes staffing changes are not temporary.

Businesses in many industries have struggled with hiring and retention, and the security industry itself is not immune to workforce challenges. Research reported by ASIS International in 2025 identified employee turnover as a significant challenge for security-service providers, with labor shortages and rising labor costs among the issues reported by respondents.

That creates an important distinction between planned staffing changes and unplanned staffing reductions.

A facility may have a security plan built around a particular number of employees, supervisors, security officers, or other personnel. If several employees leave, call out, or cannot be replaced, the assumptions underlying that plan can change.

For example, a supervisor who normally monitors activity across several areas may suddenly be responsible for a larger area with fewer people available to assist. An employee who normally works alongside several colleagues may find themselves working alone. A manager who typically responds to security concerns may no longer be present during a particular shift.

This is where security planning should intersect with operational planning.

The question is not simply, "Do we have enough employees?"

It is also: "Does our security strategy still work with the number of employees we actually have?"

For some businesses, the answer may involve supplementing existing personnel with additional unarmed security services or contract security guards during periods when internal staffing levels are lower than normal. The appropriate approach depends on the organization's specific risk profile, facility, operating schedule, and security objectives.

Security Should Adapt to Operations—Not the Other Way Around
A strong physical-security program should reflect how a facility actually operates.

That means looking beyond a static list of security measures and examining the relationship between people, property, schedules, access points, and potential threats.

For some organizations, that may mean maintaining a visible security presence during overnight hours. For others, it may mean increasing coverage during shift changes, adding patrols during predictable periods of low staffing, controlling access to specific areas, or establishing more formal procedures for employee and contractor entry.

Technology can play an important role as well.

Access-control systems, surveillance cameras, alarms, lighting, and other physical-security technologies can provide important layers of protection. But technology is not a substitute for people.

CISA guidance on physical and operational security emphasizes the importance of understanding who has access to facilities and systems, assigning appropriate responsibilities, and maintaining awareness of personnel status and operational conditions.

The most effective approach is always layered.

A camera can document activity.
An access-control system can restrict entry.
An alarm can identify an intrusion.
Lighting can improve visibility.
Policies can establish expectations.

But professional security guards can observe conditions, identify anomalies, communicate with employees, interact with visitors, respond to developing situations, and serve as a visible deterrent. Relying solely on security technology is not enough.

This is particularly relevant for manufacturing plants, production facilities, warehouses, distribution centers, and other properties where operations continue beyond conventional business hours.

The Value of a Visible Security Presence
A uniformed security officer provides something that technology alone cannot: a physical presence that is immediately observable. That presence can influence how people interact with a property before an incident occurs. It can also provide employees with a clearly identifiable point of contact when they encounter an unfamiliar person, suspicious behavior, an access issue, or another concern.
This can be particularly relevant during periods when normal staffing levels are reduced.

Uniformed security guard services can provide businesses with an identifiable security presence while supporting established procedures for access control, visitor management, patrols, incident documentation, and emergency response. Because the uniform itself can act as a deterrent to unwanted activity.

The objective is not to create the appearance that a facility is under siege. Professional security should integrate into an organization's operations without unnecessarily disrupting employees, customers, contractors, or visitors.

This is why security planning should be based on the organization's actual operating environment rather than a generic checklist.

A distribution center may require different coverage from a manufacturing plant. A construction site may have different vulnerabilities from a commercial office. An energy facility may require different access controls from a warehouse.
​
There is no universal security schedule that works equally well for every organization.
​
Security Risk Assessments Should Examine the Transitions
Organizations reviewing their security posture should pay particular attention to the moments when normal operations change.

A useful security risk assessment can examine questions such as:

1. What happens when the last large group of employees leaves?
Is the facility effectively transitioning from a high-occupancy environment to a low-occupancy environment? Are access points adjusted accordingly? Does someone remain responsible for monitoring the property?

2. What happens when the first employees arrive?
Are entrances, parking areas, loading areas, and employee access points monitored appropriately? Is there a clear process for opening the facility?

3. What happens during shift changes?
Is there an established handoff process? Are incidents, unusual activity, maintenance issues, visitors, contractors, and access concerns communicated to the incoming team?

4. What happens when staffing falls below normal levels?
Does the security plan automatically adjust, or does it simply assume the normal number of employees will be present?

5. Who is responsible when a manager is not on site?
Employees should know who has authority to make security-related decisions and whom to contact when an issue occurs.

6. Are security resources concentrated during the wrong hours?
Some businesses devote substantial security resources to periods when the facility is busiest while providing significantly less coverage during the hours when staffing and natural surveillance are lowest.

That does not necessarily mean coverage should simply be shifted to nights. It means the allocation should be evaluated against actual risk.

Security as Part of Business Continuity
Physical security is sometimes treated as a standalone function, separate from operations, facilities, human resources, and business continuity.

A more integrated approach recognizes that security supports the organization's ability to operate. An unauthorized entry can disrupt production. Stolen inventory can affect customer commitments. Damage to equipment can delay operations. An incident involving employees can affect morale and attendance.

A security response can also influence how quickly an organization can return to normal operations.
This broader view is increasingly reflected in the security profession. ASIS research has found that security leaders increasingly view security as a business-enabling function rather than simply a cost center.

That shift matters because it changes the question from:
"How much security do we need?" to: "What level and type of security allows this operation to function safely and reliably?"

That is a fundamentally different way of approaching the issue.

For businesses evaluating asset protection and security services, this perspective can help shift the conversation away from simply purchasing hours of guard coverage and toward developing a security program that addresses the organization's operational requirements.

Building a Security Plan That Works in the Real World
The goal of a security assessment should not be to identify every conceivable threat. No organization can eliminate all risk.

Instead, a useful assessment identifies the organization's most meaningful vulnerabilities and determines which controls are practical, proportional, and sustainable.

That may involve reviewing:

• Operating hours and staffing patterns
• Shift-change procedures
• Employee and contractor access
• Parking areas and exterior approaches
• Loading docks and delivery schedules
• High-value inventory or equipment
• Restricted areas
• Surveillance coverage
• Lighting
• Alarm systems
• Emergency procedures
• Incident-reporting practices
• Existing security personnel
• Coverage during weekends and holidays
• Temporary staffing conditions
• Communication between shifts
• Procedures for unusual or suspicious activity

For commercial properties, this evaluation can form the foundation of an effective building security service. The specific measures will depend on the property and its operating environment.

The objective is to develop a security strategy that fits the business rather than forcing the business to work around its security program.

When Staffing Changes, Security Shouldn't
Businesses will always experience staffing changes.

Employees will come and go. Schedules will change. Facilities will operate longer hours, sometimes without notice. Production demands will fluctuate. Seasonal workloads will create temporary increases in staffing. Hiring challenges may reduce coverage. Managers will take vacations. Departments will operate on different schedules.

Those changes are a normal part of doing business. What should not be normal is allowing those changes to create an unrecognized gap in protection.

A security program should be capable of adapting to the organization it serves. That means understanding when a facility is most occupied, when it becomes most isolated, where responsibility changes hands, and what happens when the organization's normal staffing model is disrupted.

For businesses in Pennsylvania and Ohio, Capital Asset Protection provides professional security services designed around the practical realities of commercial operations. The appropriate approach may involve a visible security presence, additional coverage during specific operating periods, support during staffing shortages, or a longer-term security program designed around the organization's specific risks.

The first step does not have to be a major operational change. It can simply be a closer look at what is already in place.

Capital Asset Protection offers a free security assessment for businesses seeking a clearer understanding of their current security posture.

An assessment can help identify existing strengths, potential vulnerabilities, and practical opportunities for improvement while taking operational requirements and budget into consideration.
​
Security should not disappear when the workforce gets smaller.
When staffing changes, security shouldn't.



Sources and Additional Resources 
OSHA — Workplace Violence Overview: OSHA specifically identifies working alone, isolated areas, and late-night work as factors that can increase workplace-violence risk. OSHA: Workplace Violence

U.S. Department of Justice — Pennsylvania Warehouse Theft Investigation (2026): Documents a logistics-warehouse burglary conspiracy involving Pennsylvania warehouses and significant-value stolen goods. U.S. Department of Justice: Pennsylvania Warehouse Theft Case

Ohio Board of Pharmacy — Series of Pharmacy Break-Ins (2025): A particularly useful local example because the official alert specifically reported repeated break-ins between midnight and 5 a.m. and urged businesses to strengthen overnight security protocols. Ohio Board of Pharmacy: Series of Pharmacy Break-Ins

Reuters — Pennsylvania Warehouse Egg Theft (2025): Reports the theft of roughly 100,000 eggs valued at more than $40,000 from a Pennsylvania warehouse on a Saturday evening. Reuters: Pennsylvania Warehouse Egg Theft

ASIS International — Guarding Companies Face the Challenge of High Turnover (2025): Provides industry context on security workforce turnover, labor shortages, and staffing challenges. ASIS International: Guard Force Turnover

ASIS International — Security's Evolving Business Role: Useful support for the article's broader argument that security is increasingly being treated as a business-enabling function rather than simply an expense. ASIS International: Security's Evolving Business Role

OSHA — Shift & Personnel Changes: OSHA's discussion of shift changes provides a useful parallel for the principle of maintaining continuity when responsibility transfers between personnel. OSHA: Shift & Personnel Changes

CISA — Operational Security Recommendations: Provides federal guidance concerning personnel responsibility, physical security, access, and maintaining appropriate controls as organizational conditions change. CISA: Using Operational Security

George Campbell, The Manager's Handbook for Business Security — Google Books: Particularly relevant to the B2B/management audience because it covers risk assessment, strategic security planning, physical security, business continuity, security metrics, and contract security services. Google Books: The Manager's Handbook for Business Security

Michael Land, Truett Ricks & Bobby Ricks, Security Management: A Critical Thinking Approach — Google Books: Covers security-management systems, policies and procedures, staffing response forces, physical controls, and risk assessment. Google Books: Security Management: A Critical Thinking Approach

Charles Swanson, Professional Security Management: A Strategic Guide — Google Books: Useful further reading for the strategic-management perspective, including risk management, continuity management, business operations, and modern security management. Google Books: Professional Security Management
​

​