Unarmed / Armed Security
Licensed officers on fixed posts, patrols and event assignments, armed where licensed.
Learn more
Domestic and global
Security Risk Assessments for Facilities and Sites
Facility security assessments and supply chain security reviews for offices, industrial plants and supplier sites, in the United States and abroad.
Find the gaps before someone else does
Every site has security measures; fewer have measures that match their real risks. A fence that stops casual trespass may do nothing about a disgruntled contractor, and a well-guarded headquarters can depend on a supplier plant with no access control at all. A security risk assessment identifies what matters most at a site, what could threaten it and where current protection falls short.
SCG assesses corporate offices, industrial facilities, plants, warehouses and supplier sites. Our method is aligned with the risk management principles of ISO 31000 and the ASIS Security Risk Assessment standard, so findings are structured, repeatable and easy to compare across sites.
International sites are assessed with locally licensed partners where required, under the same method and reporting standard.
What the service covers
What an assessment covers
Facility security assessment
Perimeter, access control, lighting, camera systems, guard posts and response procedures, reviewed on site.
Industrial and plant sites
Critical processes, hazardous materials, shift changes and contractor access at plants and production sites.
Supply chain security
Supplier sites, warehouses and transport links assessed for theft, tampering, diversion and disruption.
Threat and vulnerability analysis
Credible threats to the site identified and matched against vulnerabilities to rank risk.
Program and policy review
Procedures, training, incident records and staffing measured against the risks identified.
Prioritized recommendations
Practical measures ranked by risk reduction, with quick wins separated from longer-term investment.
How SCG approaches it
A structured, repeatable method
Context
Assets, operations and risk tolerance agreed with stakeholders.
Identify
Threats, vulnerabilities and consequences assessed on site and through research.
Analyze
Risks rated consistently so sites and options can be compared.
Recommend
Treatment options prioritized, with owners and timelines.
Review
Follow-up to check progress and reassess as conditions change.
Method aligned with ISO 31000 and the ASIS Security Risk Assessment standard. Virginia DCJS PSSB Lic. No. 11-30873; international sites are assessed with locally licensed partners where required.
Who it’s for
Organizations responsible for people, assets and operations
- C-suite executives
- Facilities and operations leaders
- Corporate security teams
- Supply chain and procurement leaders
- Risk and compliance teams
What to expect
Site visits, a risk register and a clear plan
We start by agreeing which sites are in scope, what matters most at each and who we need to meet. Site visits include walk-throughs by day and, where useful, after dark, interviews with managers and security staff, and a review of incident history and procedures.
You receive a written assessment for each site, a risk register and a prioritized set of recommendations, presented to leadership in a debrief. For multi-site programs, a consistent method lets you compare sites and direct investment where it reduces the most risk.
Assessments draw on our security and consulting practices. Download our capability statement or request a consultation.
FAQ
Security risk assessments: common questions
What is the difference between a security risk assessment and a security audit?
An audit checks whether existing measures comply with a policy or standard. A risk assessment asks a broader question: what are the real threats to this site, how vulnerable is it, and what should change as a result.
What standards do you follow?
Our method is aligned with ISO 31000 risk management principles and the ASIS Security Risk Assessment standard, giving a consistent, documented approach that leadership, auditors and insurers can follow.
Can you assess supplier sites abroad?
Yes. International sites are assessed under the same method, with locally licensed partners where local law requires.
Will the recommendations push us toward buying equipment?
No. Recommendations are based on risk, not products. Where existing measures are adequate we say so, and options are ranked so you can see what each change achieves.
How often should a site be reassessed?
After significant changes, such as new operations, an incident, a shift in the threat picture or a major renovation, and periodically otherwise. Each report recommends a review interval for the site.
Related services
Corporate Security Consulting
Executive threat assessments, insider threat programs and security program reviews.
Learn more
International Due Diligence
Vendor and third-party risk investigations with FCPA, OFAC and conflict minerals flags.
Learn more
Start with a conversation
Tell us what you are facing, in general terms. A senior member of the team will ask the right questions and give you a straight recommendation, with no obligation.
Request a Consultation