Risk Assessment Tool
Assess Your Site Security Risk Level
Assessment Methodology
This tool utilizes the industry-standard Risk Formula: Risk = Threat × Vulnerability × Impact
The Risk Scale: 1 (Low) to 5 (High)
For each category, you should assign yourself a score (e.g., 1–5) based on the current state of protection.
Scoring Legend:
- 1(Optimized): Robust protection; proactive measures in place. No immediate action needed.
- 3(Moderate): Average protection; "Passive" security that may not deter a sophisticated intruder.
- 5(Critical Risk): No protection or major failure point; immediate intervention required.
Perimeter Security
- Fencing: Is there a fence in place at the facility perimeter?
- Is the fence in good condition and effective?
- Bollards/Barriers: Bollards or barriers protecting main entrance points and effective?
- Lighting: Does the parking lot/building exterior/facility perimeter have adequate lighting?
- Have any dark spots been identified?
- Landscaping/Vegetation: Allows for hiding spots or obstructs video surveillance?
- Signage: Are "No Trespassing" or "video surveillance in place"?
Self Assigned Risk Score
Score:
1
Optimized
1
2
3
4
5
Low Risk
High Risk
Access Control
- Entry/Exit Points:
- Are there multiple entrances employees/visitors enter the building?
- If yes, how many entrance points?
- Is there access control in place at each site entrance point?
- If yes, what access control measures are in place and are the controls effectively restricting access?
- Audible "local" alarms operational at emergency exits?
- Credentialing: How is access control being administered? Do employees, contractors, visitors, etc. have proper credentials?
- Visitor Management: Is there a log or a check-in process for guests?
- Are visitor logs up to date and accurate?
Self Assigned Risk Score
Score:
1
Optimized
1
2
3
4
5
Low Risk
High Risk
Surveillance & Detection
- Video Surveillance Coverage: Is a video surveillance system in place?
- Are all components working as expected and effective?
- Parking Lots - employee and visitor parking?
- High Security/sensitive areas within the facility?
- Facility lobbies?
- Have any critical area dark spots been identified?
- Intrusion Alarms: Are perimeter doors alarmed active after hours?
- Are high security/sensitive areas protected by alarms?
- Alarm Testing: Have alarms been tested within the past 12 months?
- Have alarm response procedures been tested?
- Monitoring: Are the systems being continuously monitored?
- If yes, who is monitoring local security systems?
Self Assigned Risk Score
Score:
1
Optimized
1
2
3
4
5
Low Risk
High Risk
Physical Environment & Assets
- Assets: Have all high value/critical assets been identified?
- Are high-value assets behind an extra layer of security?
- Natural Disasters: Is the site location prone to natural disasters?
- Crime Data: Has the most current FBI crime data report been reviewed?
- Hazardous Material: Are there any hazardous materials areas on site?
- Site History: Have previous security incidents been reviewed?
Self Assigned Risk Score
Score:
1
Optimized
1
2
3
4
5
Low Risk
High Risk
Security System/Infrastructure
- Service Date: Have system(s) deployment dates been determined?
- System Technical Support: Are there support agreements in place?
- System Health: Has system health been evaluated?
- Are any of the on site systems experiencing operational issues?
- Are any of the on site security systems at or nearing "end of life"?
Self Assigned Risk Score
Score:
1
Optimized
1
2
3
4
5
Low Risk
High Risk
Policies & Procedures (Security Culture)
- Security Training:
- Do site personnel receive training on security policies and procedures?
- Do site personnel know how to spot "tailgating" (someone following them through a door)?
- Do site personnel know the visitor control procedures?
- Do site personnel know where to report suspicious activity?
- Do site personnel know who their security POC is and how to contact them?
- Incident Response: Is there a written plan for a breach or emergency?
- Examples: Intruder Response, Active Shooter, Civil/Community Unrest, Bomb Threat, Natural Disaster
Self Assigned Risk Score
Score:
1
Optimized
1
2
3
4
5
Low Risk
High Risk
Final Risk Score
16
out of 30
0 (Low Risk)
15 (Medium Risk)
30 (High Risk)