The VPs are not a binding international treaty or a rulebook. Rather, it is a practical framework that can guide companies toward improving the effectiveness of their security practices and procedures while ensuring that the safety, security, and rights of local and affected communities are respected and safeguarded. The guidelines have three parts:
1. Risk Assessments
Risk assessments form the basis for properly informed, and thus appropriate, security arrangements to be put in place. These assessments involve identifying the risks in the company’s operating environment, including potential risks to its personnel and assets, and also risks to the local community. Good, well-informed risk assessments ensure that the deployment of security is appropriate to the level of security risk present, and as such reduce the risk of conflict or negative impacts.
2. Interacting with Public Security Forces
Governments have the primary role of maintaining law and order, security, and respect for human rights. However, companies have an interest in ensuring that actions taken by governments and their security forces are consistent with the protection and promotion of human rights. Sometimes, public security forces may be called upon to protect company operations, and companies may sometimes be requested to provide support to those forces. In all instances, it is critical that there is engagement between companies and public security forces to reduce the risk of human rights abuses and to ensure the continuing respect and protection of the rights of local and affected communities.
3. Contracting with Private Security Forces
The VPs recognize that in some environments, host governments may be unwilling or unable to provide adequate security to a company’s operations. To fill that gap, companies may employ the services of a private security provider. The nature of the security that is appropriate — or even legally permissible — will vary by location, such as whether guards are armed and if so, with what weapons. The VPs also recognize the contractual control that companies have over private security providers, and thus expect that companies demand that those providers meet certain standards.
For the full principles, visit the website.