This toolbox talk equips security, retail and facilities staff with a comprehensive, legally‑grounded approach to recognising and managing hostile reconnaissance and suspicious behaviour. It details the statutory duties under the Terrorism Act 2000 (Section 47A), Public Order Act 1986 (Section 1) and Counter‑Terrorism and Security Act 2015 (Section 5), and aligns with HSE guidance on workplace violence. The guidance covers practical steps such as conducting pre‑shift surveillance risk assessments, maintaining BS EN‑standard CCTV and alarm systems, deploying BS EN‑certified signage, and ensuring robust data‑retention policies for video footage. It also stresses the importance of regular liaison with police intelligence, controlled access to security codes, and mandatory training on behavioural indicators and de‑escalation techniques. By following these controls, organisations can reduce the likelihood of hostile reconnaissance escalating into violent incidents, protect staff and assets, and demonstrate compliance with UK health‑and‑safety legislation. Additional benefits include improved incident reporting, faster police cooperation, and a culture of proactive threat awareness that supports overall organisational resilience. These measures also help meet insurance requirements and demonstrate a proactive security culture. Implement regular reviews of threat assessments to ensure controls remain effective and adapt to emerging tactics. Terrorism Act 2000 – Section 47A, Public Order Act 1986 – Section 1, Counter‑Terrorism and Security Act 2015 – Section 5, HSE Violence at Work Guidance.