Home / Loss Prevention / The response-time gap: why eight minutes is the most expensive number in commercial security.

The response-time gap: why eight minutes is the most expensive number in commercial security.

Most commercial premises are better protected than they were a decade ago. Intruder alarms are near-universal, CCTV coverage is broad, and monitoring contracts are standard. Yet losses from commercial break-ins have not fallen in step.
Security fog protection for supermarkets and grocery stores

Most commercial premises are better protected than they were a decade ago. Intruder alarms are near-universal, CCTV coverage is broad, and monitoring contracts are standard. Yet losses from commercial break-ins have not fallen in step. The reason is uncomfortable but simple: almost everything we have invested in tells us a crime is happening or has happened. Very little of it does anything about the crime while it is in progress.

That distance — between the moment a sensor trips and the moment anyone or anything actually intervenes — is the response-time gap. It is where the loss happens, and for most sites it is wide open.

What “response time” actually measures

When a panel signals an alarm, a sequence begins: the signal reaches the alarm receiving centre, the centre runs its verification protocol, and a keyholder or police response is dispatched. Each step is reasonable on its own. Stacked together, even an efficient chain rarely puts a human on site in under several minutes — and that assumes the response is prioritised, which for an unverified commercial alarm it often is not.

None of that is a criticism of the people in the chain. It is simply a different job from the one the moment requires. Verification and dispatch are built to get the right person to the right place. They are not built to stop a theft that is already underway.

8–15 min
Typical commercial alarm response window
< 2 min
Time an organised crew needs on a target
£32k
Average reported loss per UK commercial break-in

The raid doesn’t wait

Organised offending has changed shape. The opportunist who panics at a siren is no longer the typical threat to a warehouse or a high-value retailer. Crews arrive briefed, equipped and rehearsed. They expect the alarm. They expect the cameras. They have already priced both into a plan that assumes a multi-minute head start — because, historically, that assumption has been correct.

“We’d done everything — cameras, alarms, guards. The break-ins kept happening. The first thing that actually stopped them was something that acted in the first thirty seconds.”

Operations Director, UK 3PL operator · Real client, anonymised

Once you accept that the offender has planned around your response time, the strategic question changes. It is no longer “how do we respond faster?” — shaving a chain that involves human dispatch only goes so far. It becomes “how do we make the planned head start worthless?”

Detection and deterrence are not the same job

It helps to separate three functions that often get bundled together under the word “security”:

  • Detection tells you something is wrong. Alarms do this well.
  • Evidence records what happened for investigation and insurance. CCTV does this well.
  • Deterrence-in-progress physically interrupts the act before the loss completes. Almost nothing in a standard fit-out does this at all.

The first two are passive by design: they observe. The third has to be active — it has to do something to the environment the offender is standing in, fast enough to matter. That is the layer most premises are missing, and it is precisely the layer that closes the response-time gap.

Timeline diagram
Fig 1. Where each layer acts on a single timeline. Detection and recording run throughout; active deterrence is the only one that intervenes inside the offender’s working window.

Closing the gap

Active deterrence does not replace your alarm or your cameras — it reads the same trigger and acts on it. The moment a sensor trips, security fog discharges into the protected zone and visibility drops to under an arm’s length within seconds. The offender cannot see the stock, the safe, the till, or the exit they came through. The head start they planned around no longer exists.

  1. The panel signals an alarm exactly as it does today — no new monitoring contract, no rip-and-replace.
  2. A relay reads that same signal and fires the generators in the affected zone.
  3. The zone is fully obscured in under thirty seconds, while detection and recording continue in the background.

The numbers follow the logic. Across our own activation data, the large majority of incidents end without a successful theft — not because the response got faster, but because the window the offender relied on was removed. The crime still gets detected. It still gets recorded. It just doesn’t pay off.

Eight minutes is not a number you can negotiate down very far. But it is a number you can make irrelevant. The most resilient sites we work with have stopped trying to win the race to the door and started making sure there is nothing worth reaching when the offender gets there.

MR
Written by

Matt Robinson

Director at DNETUK, with over two decades working in this space and a recognised expert in the field.

Protecting High-Value Electronics: Why Semiconductor and Chip Shortages Demand Active Security

NSI & SSAIB-Approved Security Fog: Why Insurers Now Mandate Active Systems for Wholesale Depots

5.8 Million Thefts vs 507,086 Recorded: The True Scale of Off-Licence Crime in 2026