What problem does it solve?
Many organizations invest in cameras, guards or locks without a prior risk assessment. The result is controls that exist on paper but don't work in practice: doors propped open, badges nobody checks, recordings nobody reviews and visitors walking around unescorted.
Who is it for?
- General and operations management
- Physical security and facilities managers
- Companies with warehouses, branches, data centers or restricted areas
- Organizations that receive a high volume of visitors or suppliers
What risks does it address?
- Unauthorized access and tailgating (entering behind an authorized person)
- Theft of equipment, documents or inventory
- In-person social engineering: fake technicians, couriers or suppliers
- Failures in the chain of custody of keys and credentials
- Surveillance blind spots and procedures that aren't applied
What's included?
- Walkthrough and survey of the perimeter, access points and critical areas
- Review of access control, badges, visitor log and key custody
- Analysis of CCTV coverage and operational use
- Review of security staff and reception procedures
- Controlled behavior tests (with express authorization)
- Executive report with prioritized findings and a roadmap
Business benefits
- Security investments based on risk, not intuition
- Controls that staff understand and apply
- Lower exposure to losses and to incidents that damage reputation
- Integration of physical security with cybersecurity
Methodology
Understand
Business context, critical processes and risk appetite, with leadership.
Assess
Review of physical and digital controls and behaviors, with evidence.
Prioritize
Findings ranked by impact and effort, with owners.
Implement
Support with actions, procedures and training.
Measure and improve
Executive indicators and periodic review.
Scope, duration and the financial proposal are defined after an initial conversation, according to the size and needs of the organization.
Frequently asked questions
Does the physical security assessment include in-person intrusion tests?
Only if the organization authorizes them in writing, with defined scope, schedules and owners. Tests are designed to measure procedures, not to expose people.
Do you recommend camera or equipment brands?
Our approach is independent: we define requirements and selection criteria based on risk. The choice of supplier belongs to the organization.