Fuel does not disappear only through dramatic theft. More often, loss begins with an unlocked pump, a shared PIN, an after-hours dispense with no clear purpose, or a handwritten log that cannot be reconciled. A fuel site security risk assessment gives fleet operators a disciplined way to find those weak points before they become recurring cost, safety or compliance problems.<\/p>\n
For a depot, airport, works yard or mobile fuelling operation, security is not simply about fencing and cameras. It is about proving who took fuel, which asset received it, when it was dispensed, how much was issued and whether the transaction makes operational sense. That level of accountability protects stock, budgets and the people responsible for the site.<\/p>\n
A useful assessment follows fuel from delivery to consumption. Begin at the point where product enters the site. Consider delivery scheduling, tank access, dip measurements or telemetry readings, delivery documentation and who checks the delivered volume. If a delivery discrepancy is discovered days later, the evidence needed to resolve it may already be lost.<\/p>\n
Then follow the fuel through storage, pumps, hoses, mobile bowsers and vehicles. Walk the site at the times it is most exposed, not only during office hours. A yard that appears well controlled at 10am may have unrestricted vehicle access at night, poor lighting near a dispensing island or a pump cabinet that can be opened without an audit trail.<\/p>\n
The objective is to map custody. At each handover, ask three direct questions: who can access the fuel, what record is created, and who reviews that record? Where the answer is unclear, there is a security risk.<\/p>\n
Not every issue deserves the same investment. A practical fuel site security risk assessment ranks exposures by the likelihood of occurrence and the operational, financial, environmental or safety impact if they occur.<\/p>\n
Unauthorised dispensing is usually a high-priority risk because it can happen repeatedly and remain hidden in a manual process. Shared keys, common access codes and pumps left live between shifts make it difficult to identify the person responsible. Even honest staff can make errors when the process does not require them to select a vehicle, enter an odometer reading or confirm the purpose of a dispense.<\/p>\n
Physical theft and vandalism require different controls. A remote bulk tank may need secure enclosures, lighting, sightlines and camera coverage, while a busy depot may be better served by access-controlled gates and clearly defined traffic routes. Cameras can deter and help investigate incidents, but they do not prevent unauthorised fuel use on their own. They are strongest when footage can be matched to a specific, time-stamped dispensing record.<\/p>\n
Inventory variance is another essential category. Some variation is expected from temperature changes, tank calibration tolerances and operational handling. Large or recurring unexplained variances are not. Compare fuel received, fuel issued and measured stock over a defined period. If the figures cannot be reconciled quickly, treat that lack of visibility as a control failure rather than an administrative inconvenience.<\/p>\n
A concise risk register should record the threat, the affected asset or process, the current controls, the owner of the control, the risk rating and the action required. This makes the assessment operational rather than a document that sits in a folder.<\/p>\n
The pump is the point where fuel becomes spend. That makes dispensing authorisation the centre of an effective control plan.<\/p>\n
Review every person, team and contractor who can currently fuel an asset. Are permissions linked to an individual identity, or does the site rely on shared cards, keys or codes<\/a>? Can a departing employee be removed immediately? Are temporary users granted access for a defined period? Is there a separate approval process for mobile fuelling staff, maintenance teams and third-party drivers?<\/p>\n The right answer depends on the operation. A small yard with a handful of drivers may need a straightforward system with simple user permissions. A multi-site fleet may require centralised controls, location-specific access and the ability to deactivate credentials instantly across several depots. In both cases, the principle is the same: no one should be able to dispense fuel without a traceable authorisation.<\/p>\n Smartphone-authorised pump controls can reduce the hardware and maintenance burden associated with legacy pedestal systems while improving accountability. With a system such as FluidSecure, a pump remains locked until an authorised user initiates a transaction, creating a cloud-based record<\/a> at the point of dispense. That record should include the user, vehicle or asset, product, quantity, date, time and location.<\/p>\n Technology is not a substitute for process. Set rules for exceptions, such as a flat mobile phone battery, emergency fuelling or a temporary asset without an assigned ID. If exceptions are necessary, record who approved them and review them promptly. An exception process that is too easy becomes the route around the control.<\/p>\nMatch transactions to operational reality<\/h2>\n