What a risk assessment is
A security risk assessment is a structured look at what you need to protect, what could go wrong, how likely it is, and how bad it would be. The output is a ranked list of risks and a set of measures to deal with them.
It stops you buying a camera for a problem you do not have while leaving a real one open.
What it covers
A proper assessment looks at more than the fence.
- Assets: people, stock, cash, vehicles, equipment, information and reputation.
- Threats: theft, burglary, robbery, vandalism, trespass, internal theft, protest, and fire or flood.
- Vulnerabilities: perimeter, lighting, locks, access control, key control, blind spots and procedures.
- History: past incidents on the site and crime patterns in the area.
- Existing controls: guards, alarms, cameras, response, insurance, and how well each works.
- People and process: who has access, how visitors and contractors are handled, how staff are vetted.
How it is done
The assessor walks the site by day and by night, speaks to staff and management, reviews incident records and looks at the neighbourhood. Local crime data helps put your site in context.
Each risk is then scored by likelihood and impact. Risks that are likely and severe come first. Some risks are accepted, some are reduced by measures, some are transferred, for example by insurance, and some are removed.
Site check versus wider risk management
A site check looks at physical security. Wider risk management ties security into the rest of the business: continuity if the site is unusable, insurance, staff safety and legal duties. Risk management standards such as ISO 31000 describe this joined-up approach.
For a small business, a good site check with some attention to continuity is usually enough. For a large operation with several sites, the wider view pays off.
Turning the results into a plan
A report that sits in a drawer is worthless. Ask for recommendations with priorities, rough costs and who should do each one. Start with cheap fixes, such as lighting, key control and procedure, before buying hardware or adding guards.
Review the assessment after any serious incident, a change to the site, or at least once a year.
What a good report looks like
A useful report is short enough to read and specific enough to act on. It names the site, the date and the assessor, lists what was inspected, and ranks risks. Each recommendation says what to do, why, and how urgent it is.
Photographs of weak points help, as do simple maps showing blind spots and entry routes. Be wary of a report that is mostly generic text, because it could be about any site.
What assessments usually find
Many assessments find the same things: poor lighting, uncontrolled keys, unlocked side doors, no written visitor procedure, cameras no one reviews and guards without written instructions.
These are cheap to fix and make a large difference. An assessment can save money by showing you what not to buy as well as what to buy.
What to ask whoever does your assessment
An assessment from a provider that also sells guarding can be useful but may lean towards guards. Be aware of that and ask:
- Will you visit at night as well as in the day?
- Which risks come out as low, and why?
- Do you recommend things you do not sell?
- Will I get the report in writing, with priorities?
- Are the assessor and the company registered with PSiRA?
Questions people ask
How often should I reassess?
At least yearly, and after any serious incident, move, renovation or change in how the site is used.
Is a risk assessment the same as a quote?
No. A quote prices a service. An assessment tells you which services you actually need.
Can I do one myself?
A basic one, yes: list your assets, walk the site at night, review past incidents and rank what you find. A specialist helps most on larger or higher-risk sites.
Mtunzini Group is a family-run, PSiRA-registered guarding company in Cape Town that actively manages its officers with field supervision.