Maturity · Museum safety and security
Your museum safety set-up, measured theme by theme and turned into an action plan.
10 themes, a 5-level scale. And the action that moves each level to the next.
The framework’s 10 themes, already written from L1 to L5. One company, one business unit, or 300 at once.
Maturity · Museum safety and security
10 themes, 5-level scale.
Nordhavn Industries
53 / 100
They measure their maturity with Datamensio
An example
This could be your situation.
Take one company as an example: three sites, three spreadsheets, no shared answer.
Nobody can consolidate.
Nordhavn Industries, 2,400 people in Hamburg, Lyon and Porto. A client asks where the group stands. Each site answers in its own spreadsheet, with its own scales.
Three weeks, a single base.
One Museum safety and security framework (protection of collections, people and buildings) assessment launched across all three sites at once, from the managers’ interview notes. The framework was already written, its 10 themes and levels L1 to L5 too.
Two costs avoided before being committed.
A score of 53 out of 100, with the gap concentrated on three themes. The AI companion spotted that two actions duplicated those of another audit. The committee report took one sentence to request.
What it saved them
- 3sites measured on the same base, instead of three questionnaires to reconcile
- 2duplicate actions caught before the spend
- 1committee report, with no manual rework
These figures are an example. They could be yours.
The standard imposes processes. Datamensio says where you stand.
01
The framework is already written
Themes, questions and levels L1 to L5, all written. You do not start from an empty spreadsheet.
02
The score lands the same day
Online, by self-assessment link or in interview. Theme by theme, comparable over time.
03
The gap becomes a costed plan
Every step up carries its action. The AI prioritises on expected effect, not on the order of the standard.
04
Progress can be demonstrated
Campaign after campaign, against your target and against your own past. That is what your board asks for.
The maturity scale
One level, the next, and the action that links the two.
This mechanism (one level, the level above, and the action linking the two) is what turns an assessment into a trajectory.
Is the cultural property safeguarding plan operational and tested?
- N1
No formalised safeguarding plan. Evacuation priorities for objects are not set in advance.
- N2
A plan exists and lists priority objects, but it has not been rehearsed and staff have little knowledge of its content.
- N3
The plan is distributed, roles are assigned and an exercise has been run with emergency services. Quick reference sheets are available at the security post.
- N4
Exercises are scheduled at regular intervals, identified gaps lead to tracked actions, and the plan is updated after each significant collection movement.
- N5
The plan is revised based on internal and external lessons learned, tested against several scenarios, and coordinated with the plans of neighbouring institutions and local authorities.
Action to move from level 2 to level 3
Organise a tabletop exercise with the local fire and rescue service and gallery attendants on a gallery incident scenario, designating the staff responsible for carrying priority objects, then post the quick reference sheets at the central security post and include them in the opening briefing.
« With Datamensio, we meet our objectives far more efficiently. The ERDF inspection services and our supervising ministry particularly appreciated an approach that gives them reliable data. »
Director, CCI 94CCI Île-de-France
« We believe this is the most suitable solution to scale our transformation project and measure impact according to our needs. »
Maja SucekChief Operating Officer, Interreg Danube
Rarely on its own
Frameworks combine. Put several together to cover your business, or have the AI write yours.
Take your first measurement
What this framework covers
Museum safety and security cover two areas that everyday usage rarely separates but that practitioners distinguish clearly. Security deals with malicious acts: theft, vandalism, intrusion, deliberate damage, harm to people. Safety deals with unintentional risks: fire, water damage, climate control failure, accidents during object handling. Add to this preventive conservation conditions, protection of storage areas, gallery surveillance, and the specific regime governing temporary exhibitions and loans.
In practice, the set-up is hard to steer because it is spread across people who share neither the same tools nor the same vocabulary: collection managers, curators, gallery attendants, technical services, security contractors, management. The recurring questions are concrete. Do inventory checks and stocktaking allow the institution to know, at any moment, where each object is? Are access permissions to storage areas reviewed when a staff member changes role? Has the cultural property safeguarding plan been rehearsed, or only written?
Two trends are putting pressure on institutions. Growing public openness, with extended hours, evening events and filming, increases the number of people present outside normal surveillance routines. At the same time, the digitisation of systems, networked CCTV, centralised access control, building management systems, shifts part of the risk onto information systems: a failure or a compromise of the supervision system directly affects physical protection. Many institutions still handle these two subjects in separate governance bodies.
The maturity assessment answers a different question from regulatory inspection. Inspection asks whether the institution meets its obligations, for instance as a building open to the public, and concludes with compliance or a reservation. The assessment asks what level of control each practice has reached, and what specific action moves it to the next level. It does not replace the safety commission or security audits: it prepares for them and makes their conclusions manageable over time.
In Datamensio, the framework is ready to use and remains editable. The AI adjusts the themes, questions and levels to the institution’s profile, a local authority museum, a public institution, a network of sites, or builds a variant from your own documents: safeguarding plan, surveillance instructions, safety commission reports.
Reference standard: Museum safety and security framework (protection of collections, people and buildings)
The themes assessed
Safety and security governance
Formalised policy, roles and responsibilities between curatorial, surveillance and technical services, security committee, coordination with the supervisory authority and other authorities.
Risk and vulnerability analysis
Risk mapping by space and by collection, prioritisation of sensitive objects, consideration of insider threats, frequency of reassessment.
Physical protection of buildings and spaces
Outer perimeter, openings, display cases and fixings, compartmentalisation of sensitive zones, storage and transit areas, delivery points.
Access control and permissions
Management of badges and keys, permissions by zone, oversight of contractors and professional visitors, review of rights on staff changes.
Gallery surveillance and detection
Organisation of patrols and posts, attendant presence in galleries, CCTV and intrusion detection, central security post, alarm handling.
Fire safety and life safety
Compliance for premises open to the public, detection and extinguishing means suited to the collections, staff training, evacuation of the public and of people with reduced mobility.
Preventive conservation and environment
Climate and humidity monitoring, water damage prevention, protection from light and pests, storage conditions in reserve areas.
Object movements, loans and temporary exhibitions
Condition reports, packing and transport, courier arrangements, security of temporary installations, lenders’ requirements and facility reports.
Inventory, stocktaking and traceability
Maintenance of the inventory, stocktaking campaigns, marking and photographic documentation, procedure in the event of a confirmed loss.
Crisis management and safeguarding plan
Cultural property safeguarding plan, evacuation priorities for objects, exercises and lessons learned, liaison with emergency services and police, business continuity.
A short version of the framework is available for the online self-assessment.
Frequently asked questions
Does this assessment lead to certification?
No. Museum safety and security does not fall under a single certification scheme. The assessment measures the maturity level of your practices and produces an action plan. It prepares for regulatory inspections and security audits, it does not replace them.
How does this differ from a safety commission inspection?
The commission checks compliance with building-related obligations and concludes with an opinion. The assessment places all practices, including collection security, on a progressive scale and shows the trajectory. The commission’s findings can feed directly into the identified gaps.
How long does the assessment take?
The short version can be completed in one session. The full version involves several contributors, curatorial, surveillance, technical services, and generally takes one to two weeks, most of the time being spent gathering input from the teams.
Does the framework suit a small local authority museum?
Yes. The themes, questions and levels can be edited, and the AI adapts the framework to the institution’s profile or builds a variant from your internal documents. A site without a permanent central security post is not assessed against the same expectations as a large national museum.
Can several sites in the same network be compared?
Yes. Assessments run on the same framework can be compared across business units and over time. A cross-site roadmap consolidates several assessments to prioritise investment at network level, without duplicating shared actions.
Is technical expertise needed to answer?
The questions concern organisation and practices, not equipment specifications. Some require input from technical services or the security contractor: the collaborative mode allows these questions to be assigned to the right person.
How is the action plan costed?
Each gap between the score obtained and the target generates an action. The service catalogue offers a solution against each item, with its cost, timeframe and expected impact on the score. The AI groups everything into a prioritised roadmap.
Where is the data hosted?
In France, with OVH, with backup at Scaleway. No transfer outside the European Union. The AI models used can be selected, including from European providers.