Insights

Security Insights & Technical Guidance What Should a Threat, Vulnerability & Risk Assessment (TVRA) Actually Deliver? A Threat, Vulnerability & Risk Assessment (TVRA) should give decision-makers a defensible understanding of where their organization is exposed, why the exposure matters, and which improvements should be prioritized. A list of observations or an equipment wish-list does not…

Security Insights & Technical Guidance Security by Design: How to Integrate Physical Security From Concept to Handover Security by Design (SBD) starts from a simple proposition: security works better when incorporated into a building’s planning, layout and operating concept than when equipment is added after construction decisions are fixed. This is especially important where public…

Security Insights & Technical Guidance Physical Access-Control Weaknesses: What Security Audits Should Examine An electronic card reader can confirm that a credential was accepted; it cannot by itself establish that the right person entered the right area for an authorized business purpose. Effective access control is a combination of physical barriers, identity and privilege management,…

Security Insights & Technical Guidance Designing an Integrated Security Command Centre: Systems, People and Operational Resilience A security command centre is not defined by the number of screens on the wall. Its effectiveness depends on whether the people inside can recognize an event, understand its significance, coordinate a proportionate response and preserve an accurate record.…

Security Insights & Technical Guidance How to Prepare Effective Security System Tender Specifications Security procurement is vulnerable to ambiguity. If a tender says only “provide a suitable CCTV system,” bidders may propose fundamentally different solutions while all claiming compliance. The result can be difficult evaluation, expensive variations and disputes about what the contractor was required…

Security Insights & Technical Guidance Physical Security Red Teaming: What It Tests and How to Use the Results An organization can have policies, equipment and trained security officers yet still be uncertain whether the combination works under realistic conditions. Physical security red teaming provides a structured way to test selected protective assumptions under written authority…