There is a point in every restaurant night when the business changes shape.
The dining room empties. Half the lights go out. The front door locks. One chef is still cooling stock, somebody is counting the till, the cleaner has arrived and a delivery may be due before sunrise. The building is no longer open, but it is not really empty either.
That hour deserves more attention than it usually gets.
Restaurants hold obvious valuables such as cash, wine, equipment and stock. They also hold things that are harder to replace: keys, access codes, payment terminals, supplier information, recipes, records and the ability to open normally the next morning. A sensible security plan protects the operation, not just the objects inside it.
Closing should be a sequence, not a feeling
"We always check the door" is not a closing procedure.
A proper routine gives the last people on site a fixed order of actions. Check the public entrance. Check the service entrance. Verify windows and external doors. Secure cash according to policy. Clear contractors. Confirm refrigeration and essential equipment. Set the alarm. Record anything unusual.
The order matters because people are tired at close. A sequence removes decisions.
It also makes exceptions visible. If a delivery driver is still expected, the team knows which part of the normal routine changes and who owns that change. If a private event has brought temporary staff into the building, the close includes returning passes, keys or access credentials. If a rear door needs to remain open for waste collection, the person responsible knows when it must be secured again.
Our guide to running restaurant events without losing the kitchen covers that temporary-access problem in more detail. Events are useful precisely because they break the normal pattern. Security needs to notice when the pattern changes too.
Start with the doors people actually use
The front door gets attention because guests see it. The risk often sits elsewhere.
Back doors are opened for suppliers. Yard gates are shared with neighbouring units. Staff entrances collect habits over time: a wedge during prep, a code everyone knows, a key hidden somewhere "for emergencies" that stopped being an emergency years ago.
Walk the building at the same time staff normally close it. Do not do the survey at 11am when every door is open and ten people are around.
Look at sight lines, external lighting, blind corners, accessible windows and any place where bins, furniture or stacked deliveries create an easy hiding point. Ask who holds keys, who has codes, when those were last changed and what happens when a manager leaves the business.
The Garda intruder alarm guide recommends using a PSA-licensed alarm installer and having the property assessed so the system suits the actual risk. That is a better starting point than buying equipment first and trying to make the building fit it afterwards.
Make the alarm fit restaurant life
Restaurants are awkward buildings for security systems because they rarely behave like offices.
Cleaners may arrive after close. Bakers or prep teams may start before dawn. Deliveries can come through one door while the rest of the premises should remain secure. Managers need access at odd hours. A cellar, office, kitchen and external store may all have different risk profiles.
That makes zoning, user permissions and event logs useful, provided the system is designed around the way the site actually operates.
For businesses reviewing an upgrade, HKC intruder alarm systems for businesses are one example of a platform that supports wired and wireless configurations, remote app control and event history. MJ Flood Security also notes that some HKC panels can use existing wired sensors while adding wireless devices where appropriate. That can matter in an established restaurant where chasing new cable through finished walls is not a trivial job.
The important part is not the brand name on the keypad. It is whether the system gives the right people the right access, records what happened and is installed and maintained properly.
In Ireland, alarm installation is a licensable security service. The Private Security Authority explicitly directs customers to check its register for licensed contractors and employees. Do that check before the work starts, not after an insurer or investigator asks who installed the system.
Give people their own credentials
Shared codes are convenient until you need to know who used them.
If every manager, cleaner and opener uses the same alarm code, the event history tells you very little. Individual credentials make it easier to remove access when somebody leaves, review unusual entries and avoid changing one master code every time the rota changes.
The same logic applies to physical keys. Keep a key register. Record spares. Stop cutting copies casually. Decide which keys can leave the premises and which should be controlled on site.
For temporary contractors, use time-limited arrangements where the system allows it. A refrigeration engineer visiting at 7am should not automatically inherit the same access as a general manager indefinitely.
Good access control is mostly administration. The hardware only enforces the decisions you have already made.
Secure the small technology that can stop tomorrow's service
Restaurants tend to think about security in physical terms: doors, windows, cash and stock. The small electronic pieces matter too.
Payment terminals, tablets, office laptops, reservation devices and backup keys often move around during service. By close, they can be sitting wherever the last person used them. Give each one a home.
Do not leave administrative accounts logged in on shared devices. Use individual staff logins where the system supports them and remove access promptly when somebody leaves. Keep sensitive paperwork and spare keys away from public areas, even after the door is locked.
The same discipline applies to CCTV or alarm apps. A former manager should not still have remote access because nobody remembered to remove a phone from the account. Review user lists periodically and after staffing changes.
If security footage is used, remember that data protection obligations may apply to how images are captured, accessed and retained. The Data Protection Commission provides guidance on CCTV and data protection. Security is not improved by collecting more footage than you can justify or manage properly.
A stolen bottle is an obvious loss. A compromised administrator account can be much quieter and far more disruptive.
Separate essential overnight systems from everything else
Closing a restaurant does not mean switching the building off.
Cold rooms, freezers, alarms, emergency systems and some ventilation or plant may need to continue operating. Other services may be running simply because nobody has checked the schedule in years.
That creates a useful overlap between security and building controls. A closing routine should confirm that essential equipment remains on while unnecessary loads follow the correct night-time settings. Our guide to what your restaurant building does after the kitchen closes explains how schedules, sensors and building management controls can drift away from actual opening hours.
Do not make the alarm system responsible for equipment it was not designed to manage. Do make sure the people responsible for security and the people responsible for building controls understand each other's overnight assumptions.
The 2am phone call is a bad time to discover that the alarm contractor, refrigeration contractor and facilities person all thought somebody else was monitoring a fault.
Treat deliveries as controlled access
Early deliveries are part of restaurant life. They are also one of the easiest ways to weaken an otherwise sensible closing system.
If suppliers have unsupervised access, document exactly what that means. Which door? Which hours? Which areas? Where is stock left? How is the premises secured afterwards? Who is contacted if something looks wrong?
Avoid informal arrangements that expand over time. A driver who was once allowed through a gate may gradually end up with a key to a store, then a code to a door, without anyone making a conscious decision.
Where possible, keep delivery access separate from offices, cash-handling areas and the main building. If that is not possible, make the route explicit and review it when the premises changes.
The same goes for bins and waste collection. Back-of-house security is often compromised for perfectly ordinary operational reasons. The answer is not to make service impossible. It is to design around the service you actually need.
Decide what happens after an alarm, not just before it
An alarm activation is a chain of decisions.
Who receives the notification? What if that person does not answer? Who is close enough to attend if required? Does the monitoring centre have the right contact order? Are staff expected to enter the building, wait outside or contact another party? What evidence should be preserved if there has been an incident?
Write the response down and keep it realistic. A contact list with three former employees and one owner who spends half the year abroad is not a response plan.
Managers should also know the difference between a routine fault notification and a security event that needs escalation. If the system sends frequent nuisance alerts, fix the cause rather than training everyone to ignore the phone.
After any genuine incident, review the closing routine as well as the hardware. The alarm may have worked exactly as designed while a door procedure, key-control habit or delivery arrangement created the opportunity.
Test the routine before there is a problem
Security systems fail quietly when nobody tests the full chain.
A sensor can be faulty. A contact list can contain an old manager's number. A monitoring arrangement can be misunderstood. Staff can forget what to do when an alarm activates. A backup communication path can exist on paper but not behave as expected.
Schedule reviews. Test the closing checklist. Confirm contact details. Service the alarm at the required interval. Make sure managers understand what happens after activation and who is authorised to respond.
The Garda guidance on alarm installation and maintenance is useful here because it treats the alarm as a maintained system rather than a one-off purchase. The same thinking should apply to your entire close.
A lock, a code and a checklist are all small things. Together they decide whether the restaurant is ready for the next service.