What Criminals Look For Before Targeting a Business

Reviewed by SkyHigh Security’s licensed security operations team (BSIS PPO #121165).
Last updated September 2026.

Criminals overwhelmingly target businesses based on opportunity, not intent: how valuable a target looks, how visible it is, how easy it is to reach and escape, and whether anyone capable of intervening is present. That’s the finding echoed across decades of criminology research, and it’s why two businesses carrying identical inventory can face very different risk levels based on lighting, sightlines, and visible guardianship alone.

This guide breaks down exactly what criminals look for before targeting a business, using the same frameworks law enforcement and security researchers rely on, translated into practical steps for property managers, retailers, and facility operators across Los Angeles and Southern California.

This article is for business owners, property managers, facility managers, construction managers, retail and warehouse operators, HOA boards, and healthcare or school administrators who want to understand why certain properties get targeted and others don’t, so they can make an informed decision about closing the gaps, and about whether a private security or commercial security services provider is the right next step.

Key Takeaways

Most business crime is not driven primarily by how badly someone wants to steal from you: it’s driven by opportunity. Routine Activity Theory holds that a crime requires three things to converge: a motivated offender, a suitable target, and the absence of a capable guardian. Remove any one, and the crime typically doesn’t happen.
Offenders weigh a target the way a shopper weighs a purchase: quickly, but rationally. Researchers call this Rational Choice Theory: offenders size up effort, risk of getting caught, and expected reward before committing.
Crime Prevention Through Environmental Design (CPTED), natural surveillance, access control, territorial reinforcement, and maintenance, measurably changes how a property “reads” to a potential offender. One widely cited University of North Carolina at Charlotte study found roughly 60% of convicted burglars said they would look for a different target if visible security measures, like an alarm system, were present.
Nationally, FBI data shows residential burglary was 52.1% of all burglary offenses in 2024, meaning commercial property made up nearly half. The Council on Criminal Justice found nonresidential burglary rose 12% between 2019 and 2024 even as residential burglary fell 38%, a sign business break-ins aren’t following the same downward trend as home burglary.
Organized, high-value theft against commercial targets is climbing: the National Retail Federation reports 66% of retailers now see transnational organized retail crime involvement, and Verisk CargoNet recorded a 36% jump in average cargo theft value in 2025, to $273,990, with California logging more incidents than any other state.
Visible, trained guardianship (security guards, patrols, monitored access) is one of the few interventions that changes an offender’s real-time risk calculation, not just the property’s appearance.
A short business vulnerability assessment, covered near the end of this guide, can help you identify which of these risks apply to your property today.

Opportunity, Not Just Intent
The Three Ingredients of a Crime
How Offenders Actually Decide: Rational Choice
The VIVA Model: What Makes a Target “Suitable”
Environmental Cues That Signal “Easy Target“
25 Ways to Reduce Opportunity
The Human Factor: Routines That Create Openings
Business Security Risks by Property Type in Los Angeles
Why Visible Guardianship Changes the Calculation
Layered Security: Design + Technology + People
Common Misconceptions About Business Crime Prevention
Business Vulnerability Assessment Checklist
FAQ

Opportunity, Not Just Intent

Most business owners picture crime as a question of intent: a bad actor who has decided, for whatever reason, to target this building. Decades of criminological research point somewhere else. In the overwhelming majority of property crime, the deciding factor isn’t how much someone wants to steal from a business. It’s how easy that business makes it.

This distinction matters practically. If crime were purely about intent, business crime prevention would be about detection and punishment after the fact. But because crime is largely about opportunity, effective business security is mostly about what happens before anyone acts: the visible, structural, and behavioral signals a property sends out every single day, whether anyone is watching or not.

This article walks through the criminology behind that idea, in plain language, and translates it into what a property manager, GC, retailer, or HOA board can actually do to reduce business security risks. It draws on frameworks used by law enforcement agencies and researchers, including the National Institute of Justice, the FBI, and academic criminology, not tactical “how-to” advice for offenders.

The Three Ingredients of a Crime

The foundational framework here is Routine Activity Theory, developed by sociologists Lawrence Cohen and Marcus Felson in 1979 to explain why crime rates rose even as poverty, the assumed root cause at the time, was falling. Their answer: post-war life changed people’s daily routines in ways that increased opportunity, independent of anyone’s underlying motivation to offend.

The theory holds that a crime requires three elements to converge in the same place at the same time:

Element	What It Means for a Business
A motivated offender	Someone willing to act. This is the one variable you cannot control and, for prevention purposes, the one this guide spends the least time on.
A suitable target	Your property, inventory, cash, equipment, or vehicles: anything of value that can be accessed.
The absence of a capable guardian	No one and nothing present to intervene: no visible staff, no security presence, no camera actively monitored, no neighbor positioned to notice.

The practical insight is this: businesses cannot control whether a motivated offender exists in their area. What they can control, and what commercial security planning actually targets, is the second and third elements. Reduce how “suitable” a target looks, or increase the presence (real or perceived) of a capable guardian, and the probability of that convergence drops sharply, regardless of how many motivated offenders are nearby.

A “capable guardian” doesn’t need to be law enforcement. It can be an employee at a front desk, a mobile patrol security unit making scheduled rounds, a monitored camera system, or an on-site security guard. What matters is that the offender perceives someone or something capable of intervening or identifying them.

How Offenders Actually Decide: Rational Choice

A companion framework, Rational Choice Theory, explains the decision-making once a motivated offender and a potential target are in the same vicinity. The theory doesn’t assume offenders are careful planners running a cost-benefit spreadsheet. It assumes something closer to “limited rationality”: quick, situational judgments made under time pressure, using whatever cues are immediately visible.

In practice, that decision tends to weigh three questions, almost instinctively:

Effort: How hard is this going to be? Is there a fence, a locked gate, a monitored entrance, or does the path in look clear?
Risk: What’s the chance I get seen, identified, or interrupted? Is anyone watching? Are there cameras, and do they look active?
Reward: Is what’s here worth the effort and risk? Visible inventory, unattended equipment, or predictable cash-handling routines all raise perceived reward.

This is the basis for situational crime prevention, covered below: if a business can raise perceived effort and risk while lowering perceived reward, even modestly, it can shift an offender’s calculation away from that property entirely, often toward no target rather than a different one. Displacement is a real but frequently overstated concern; the UK College of Policing and the broader situational-prevention literature have found that wholesale displacement to a nearby target is the exception, and that visible prevention often produces a “diffusion of benefits” to surrounding properties.

The VIVA Model: What Makes a Target “Suitable”

Criminologist Marcus Felson later refined “suitability” into four measurable dimensions, sometimes taught under the acronym VIVA:

Factor	Definition	Business Example
Value	How desirable is the target to the offender (not necessarily its market value)	Cash on-site, electronics, copper wiring, catalytic converters, branded merchandise
Inertia	How easy is the item to move or carry away	Palletized freight staged near a loading dock vs. bolted equipment
Visibility	How exposed or advertised is the target	Merchandise visible through windows, tools left in an open trailer, package deliveries piled at an entrance
Accessibility	How easy is it to reach and to escape from	Unlit rear lot with multiple unmonitored exits vs. a single, camera-covered, badge-controlled entrance

Most practical commercial property security work is really just VIVA reduction: lowering visibility (blocked sightlines into cash areas), reducing accessibility (access control, fencing, lighting), and, for high-value or high-inertia items, adding friction between an offender and the item itself. Verisk CargoNet’s 2025 analysis found metals theft, driven largely by copper demand, climbed 77% year over year, a VIVA problem (high value, low inertia, often left visible on-site) more than a “criminals are getting bolder” problem.

Environmental Cues That Signal “Easy Target”

Crime Prevention Through Environmental Design (CPTED), first developed in the 1970s and maintained today through resources published by the National Institute of Justice, applies routine activity and rational choice thinking directly to physical space. The idea: the built environment itself can increase or decrease an offender’s perceived effort and risk, before any person or technology gets involved. CPTED rests on four pillars.

Natural surveillance. Sightlines, window placement, and lighting determine how visible any activity near your property actually is. Offenders consistently avoid locations where they believe they can be seen, even by ordinary passersby, not just security personnel. In a frequently cited University of North Carolina at Charlotte survey of incarcerated burglars, roughly three in five said they would seek an alternative target if they saw an alarm system on-site.

Natural access control. The placement of entrances, fencing, landscaping, and signage guides how people move through a space, and makes it obvious when someone is somewhere they shouldn’t be. A single, clearly defined entry point that funnels visitors past a staffed desk does more preventive work than five ambiguous, unmonitored ones.

Territorial reinforcement. Physical cues, such as signage, defined property lines, and well-marked private space, signal ownership and active use. Offenders read these cues as evidence that someone is paying attention to this specific property, which raises their perceived risk of detection.

Maintenance. Overgrown landscaping, broken lighting, graffiti left up, and general neglect send the opposite signal: that no one is watching closely enough to notice, let alone respond. Maintenance is frequently the cheapest and most overlooked CPTED lever available to a property manager.

Specific blind spots worth auditing on almost any commercial property security review: unlit rear entrances and loading docks, landscaping tall enough to conceal a person near ground-floor windows, stairwells and elevator lobbies in parking structures without sightlines to the exterior, and gaps between a property’s actual perimeter and where its cameras or lighting stop.

25 Ways to Reduce Opportunity

Criminologist Ronald V. Clarke built on Routine Activity and Rational Choice Theory to organize situational crime prevention into a practical framework used widely by police departments and security planners today, catalogued by the Center for Problem-Oriented Policing. The techniques fall into five mechanisms:

Mechanism	Goal	Commercial Example
Increase the effort	Make the act physically harder	Access control systems, locked gates, security screens, target hardening
Increase the risk	Make detection more likely	Security guards, monitored surveillance, natural surveillance, entry/exit logging
Reduce the reward	Make the target less worth taking	Cash-handling policies, marked/traceable equipment, removing visible inventory
Reduce provocations	Remove triggers for opportunistic or emotional incidents	Clear conflict-resolution protocols, reducing crowding, de-escalation-trained staff
Remove excuses	Eliminate rationalizations offenders use to justify the act	Clear signage on rules and consequences, visible policies, instructions that make compliance easy

No single technique carries the whole load; the framework is designed to be layered, since techniques often overlap. A monitored guard, for instance, increases both risk and effort at once, which is part of why guard-based business crime prevention tends to outperform a single-point fix like a lock upgrade.

The Human Factor: Routines That Create Openings

Environmental design addresses the property. But a large share of real-world vulnerability comes from predictable human routines: patterns of behavior so ordinary that no one notices them as risk.

Common examples include:

Tailgating, where someone without credentials follows an authorized employee through a secured door, relying on politeness rather than a badge.
Door propping, where a side or loading-dock door is left open for convenience during a shift, unintentionally defeating an entire access-control system.
Badge or key sharing, which breaks the link between access and accountability.
Predictable shift changes, cash pickups, or delivery windows: routines an offender can observe from a public sidewalk over a few days without ever approaching the property.
Weak visitor verification, where anyone with a clipboard or a vest is waved through without a second look.

None of these habits reflect carelessness in the way people usually think of it. They’re the natural byproduct of trying to keep a business running smoothly. But routine activity theory is, at its core, a theory about routines, which means the predictability of ordinary operations is itself part of what makes a target suitable. Addressing it isn’t about distrust; it’s about closing the small, consistent gaps that accumulate into a pattern an outside observer could map.

Vulnerability by Property Type

Different property types present different combinations of value, visibility, and accessibility, so the priority fixes differ too. This holds across Los Angeles and Southern California’s commercial districts, from the industrial parks and distribution hubs feeding the ports and rail yards, to the retail corridors and business parks of the San Fernando Valley.

Property Type	Typical Vulnerability	Highest-Leverage Fix
Retail stores / shopping centers	High visibility of merchandise, predictable staffing gaps, self-checkout scan-avoidance	Staffed entrances, security guards during peak hours, monitored exits
Warehouses / distribution centers	High-value freight, predictable dock schedules, large unmonitored perimeters	Access control at docks, mobile patrol security, lighting audits
Construction sites	Unattended equipment and materials overnight, open perimeters, copper and metals on-site	Construction site security guards, fencing, after-hours patrol
Healthcare facilities	24/7 public access, multiple unmonitored entrances, valuable equipment and medications	Access control by zone, visitor management, unarmed security guards at entry points
Schools, colleges & universities	Large open campuses, high foot traffic, after-hours access	School and campus security, controlled entry protocols
Libraries and public facilities	Open-access hours, unattended stacks and study areas, after-hours loitering	Library security, scheduled walkthroughs
HOAs / apartment communities	Gated but unmonitored entries, predictable resident routines, visitor pass abuse	Gated community security, patrol during low-traffic hours
Cannabis dispensaries	Cash-heavy operations, compliance-driven security mandates, known target profile	Dispensary security services, armed or unarmed guards per compliance requirements
Events and temporary venues	Large crowds, multiple access points, limited pre-built infrastructure	Event security, credential checks, perimeter control
Parking structures	Poor natural surveillance, concealed stairwells, isolated levels	Lighting to Illuminating Engineering Society standards, glass-enclosed stairwells and elevator lobbies, camera coverage

Regardless of vertical, the underlying analysis is the same: identify what an offender would value, how visible and accessible it currently is, and whether any capable guardian is present to intervene. A security company Los Angeles property owners can verify through BSIS, and one that understands local patterns like inland cargo migration or rising organized retail theft, can weight that assessment with more than generic advice.

Why Visible Guardianship Changes the Calculation

Of the three routine activity elements, guardianship is the one businesses have the most direct, immediate control over: more than they can meaningfully control an offender’s motivation, and often more than they can quickly redesign a building’s physical layout.

A trained guard does more than occupy space. Uniformed presence increases perceived risk (an offender doesn’t know whether they’re being observed at any given moment), increases actual risk (a guard can identify, document, and report), and often increases effort simultaneously (controlled access, visitor logging, patrol unpredictability). This is why guardianship shows up as a lever across nearly every framework covered in this article: routine activity, rational choice, and situational crime prevention all treat it as a load-bearing variable rather than a nice-to-have.

Guardianship doesn’t have to mean a fixed post at every door. It scales: scheduled mobile patrol security for a large perimeter, a stationed officer at a single high-traffic entrance, or event-specific coverage for a defined window of higher risk. The right mix depends on the VIVA profile of the specific property: what’s valuable, how visible it is, and how accessible it currently is.

In California, any company providing contracted private security personnel is required to hold a Private Patrol Operator (PPO) license through the Bureau of Security and Investigative Services (BSIS), and individual guards must hold a current registration and complete state-mandated training. Verifying a provider’s license, a step that takes about a minute through BSIS’s public lookup tool, is a legitimate, useful part of due diligence, independent of anything else in this article.

Layered Security: Design + Technology + People

No single measure covered above, whether design, technology, or personnel, reliably closes every gap on its own. The strongest commercial security services postures combine all three, because each compensates for the others’ blind spots:

Environmental design (CPTED) reduces opportunity passively, around the clock, at low ongoing cost, but can’t adapt in real time to an unfolding situation.
Technology: video surveillance, AI-assisted video analytics, access control systems, alarm and intrusion detection, and license plate recognition extend visibility and create a documented record, but generally require a human to interpret and act on what they capture.
Trained personnel: guards, patrol officers, and monitored dispatch provide judgment, real-time response, and the kind of unpredictable, visible presence that most directly affects an offender’s in-the-moment risk calculation.

Technology complements guardianship; it rarely replaces it outright. A camera that records an incident after the fact is a documentation tool. A monitored camera paired with live dispatch, or an officer conducting scheduled and unscheduled rounds, is a prevention tool: how businesses prevent business theft in a way that holds up over time, not just after one incident forces a temporary fix.

Common Misconceptions

“We haven’t had a problem, so we’re not a target.” Absence of a past incident is not the same as absence of risk; it often just means the convergence of offender, target, and opportunity hasn’t happened yet. Verisk CargoNet’s 2025 data shows theft activity moving away from historically monitored Los Angeles County, where incidents fell 11%, toward less-monitored Kern County (+82%) and San Joaquin County (+44%): a location’s past safety record can shift fast as offenders redistribute.

“More cameras automatically means more security.” Cameras document; they don’t independently intervene. Coverage without monitoring or a response protocol raises risk only marginally, since it mainly affects the “increase risk” lever, not effort or reward.

“Criminals are opportunists who can’t be deterred.” Rational choice research shows the opposite: brief, situational barriers change behavior, because most offenders make fast, limited-information judgments, not fixed, unshakeable decisions.

“Adding security guards means something is visibly wrong.” In practice, uniformed presence functions the same way locked doors and lit parking lots do: a baseline expectation for a well-run property, not an admission of a problem.

Business Vulnerability Self-Assessment

Use this quick business vulnerability assessment as a starting point, not a substitute for a full, on-site security risk assessment. Mark each item Yes, No, or Unsure.

Visibility & Design

Are entrances, loading docks, and parking areas lit well enough to see a face at 30 feet after dark?
Are there landscaping or structural blind spots near ground-floor windows or entry points?
Is high-value inventory, equipment, or cash visible from outside the building?

Access Control

Is there a single, clearly monitored point of entry for visitors and deliveries?
Are side and rear doors ever propped open during shifts?
Are keys, badges, or access codes shared informally among staff?

Guardianship

Is there a visible staff, reception, or security presence during all hours the property is occupied or holds value on-site?
Are cameras actively monitored, or do they only record for later review?
Is there a documented, practiced protocol for what staff do if they notice someone who shouldn’t be there?

Routines & Predictability

Do cash pickups, deliveries, or shift changes happen on a fixed, observable schedule?
Would an outside observer, watching from a public sidewalk for a few days, be able to predict when the property is least staffed?

Any “No” or “Unsure” answer is a reasonable starting point for a conversation with a security company in Los Angeles about a formal security risk assessment.

FAQ

What do criminals look for most before targeting a business?

Research consistently points to opportunity over intent: visible value, easy accessibility, poor visibility from outside, and the absence of anyone or anything capable of intervening. Offenders tend to make quick, situational judgments about effort, risk, and reward rather than committing to a specific target in advance.

Does having security cameras alone stop crime?

Cameras help with detection and evidence after an incident, and unmonitored cameras still contribute modestly to perceived risk. But research on situational crime prevention shows that monitored systems paired with a response protocol, versus passive recording, have a meaningfully larger deterrent effect, because they combine increased risk with increased effort.

Are small businesses actually at risk, or is this mostly a large-retailer problem?

Both. Large retailers generate the headline statistics on organized retail crime, but the same routine activity and opportunity principles apply at any scale: a construction site, dispensary, or small warehouse can present just as “suitable” a target if it’s valuable, visible, accessible, and unguarded.

How is a security guard different from a camera system for prevention?

A guard adds real-time judgment, unpredictable presence, and the ability to intervene or document immediately: factors that directly raise an offender’s perceived risk in the moment. A camera system primarily documents what already happened unless it’s actively monitored and connected to a response protocol.

How often should a business have a security assessment done?

Most security professionals recommend a full site assessment whenever a property changes use, after any incident or “close call,” and at minimum annually for higher-risk categories like retail, cannabis, construction, and logistics, since routines, staffing, and surrounding conditions all shift over time.

How do I choose a security company in Los Angeles?

Verify the provider holds an active BSIS Private Patrol Operator license, ask how guards are screened and trained beyond the state minimum, and ask what a typical site assessment covers before you’re asked to sign anything. A credible commercial security services provider should be able to answer all three without hesitation.

Where This Leaves You

None of the frameworks above predict who might target a specific business. They’re about recognizing that most business crime follows a predictable logic (value, visibility, accessibility, and guardianship) that owners and managers can influence directly, often without major capital investment. Lighting, sightlines, access control, and staff habits close a meaningful share of the gap on their own. Trained, visible guardianship closes the rest, because it responds to a situation in real time rather than just documenting it afterward.

If this checklist raised more “No” or “Unsure” answers than you expected, that’s common: most vulnerabilities accumulate quietly through ordinary daily operations, not negligence. Understanding what criminals look for before targeting a business is the first step; a security risk assessment from a licensed provider is the low-commitment way to see exactly where your property stands and what would close the gap fastest.

Sources referenced: National Institute of Justice, FBI Uniform Crime Reporting Program, National Retail Federation / Loss Prevention Research Council, Verisk CargoNet, Council on Criminal Justice, California Bureau of Security and Investigative Services, ASU Center for Problem-Oriented Policing, and peer-reviewed criminology research on Routine Activity Theory, Rational Choice Theory, and Crime Prevention Through Environmental Design.