1. Assess & Mitigate · Comprehensive Physical Security Risk Assessment (SRA)
Independent Physical Security Risk Assessments (SRA)
Actionable Threat Identification & Facility Hardening Informed by ASIS International Standards
The stakes: Unidentified physical security gaps expose organizations to premises liability, regulatory penalties, and operational disruption.
Principal-led by Christian Colburn, PSP. Mutual NDA available on request.
100% Vendor-Neutral & Product-Independent. We never sell hardware, software, or guard labor.
The stakes
Why this matters
Most security gaps are invisible until someone exploits them: a propped dock door, a camera that records the wrong angle, a badge that still works months after the employee left. After an incident, leadership is asked what it knew and what it did about it.
An independent assessment gives you a documented, defensible answer before that question is asked — and a clear order of operations for spending on the risks that actually matter.
Actionable threat assessments, no sales fluff. On-site evaluation of your perimeter, access points and procedures to find vulnerabilities before an incident — delivered as a prioritized roadmap that protects people and limits liability.
Methodology
How the engagement runs
- 01
Scoping & data request
We confirm the sites, assets and concerns in scope and collect drawings, incident history, policies and prior reports.
- 02
Site survey
The principal walks the perimeter, entries, interior zones and critical spaces at the times that matter, including after hours where relevant.
- 03
Stakeholder interviews
Operations, facilities, HR, IT and frontline staff describe how the site really works — and where workarounds live.
- 04
Threat & vulnerability analysis
We score each scenario on impact, vulnerability and threat likelihood, informed by the ASIS General Security Risk Assessment Guideline.
- 05
Countermeasure development
For each priority risk we recommend layered options — physical, electronic, procedural — with vendor-neutral, budgetary cost estimates.
Tangible deliverables
What you receive
Executive Briefing
A concise, board-ready summary of the risk picture, top priorities and recommended investment path.
Prioritized Risk Register
Every scenario scored on Impact × Vulnerability × Threat Likelihood, ranked so leadership can see what to fix first.
Countermeasure Roadmap
Vendor-neutral recommendations with budgetary cost estimates, phased by priority and effort.
Standards Alignment
Documentation of how findings and recommendations are informed by the ASIS GSRA Guideline and CPTED principles.
Chemical Storage Bay
Unauthorized Forced Entry
- Inherent
- Severe
- Applied
- Biometric 2-Factor + Anti-Tailgating
- Residual
- Low
Regional Distribution Facility
Forced Entry via Loading Dock
- Inherent
- High
- Applied
- Dock Door Contacts + Video Verification
- Residual
- Moderate
Corporate HQ Lobby
Tailgating at Turnstiles
- Inherent
- High
- Applied
- Optical Turnstiles + Anti-Passback
- Residual
- Low
Data & Network Rooms
Insider Misuse of Credentials
- Inherent
- Elevated
- Applied
- Two-Factor Readers + Quarterly Access Review
- Residual
- Low
Illustrative example — fictional facility and findings. Not derived from a client engagement. Countermeasure selection informed by the ASIS General Security Risk Assessment Guideline and NFPA 730.
Standards
Informed by recognized standards
- ASIS General Security Risk Assessment Guideline
- CPTED (Crime Prevention Through Environmental Design)
- NFPA 730 Guide for Premises Security
Our work is informed by these references; C3RS does not certify compliance.
Ready to scope your Physical Security SRA engagement?
Principal-led by Christian Colburn, PSP. Mutual NDA available on request.