Physical Security Assessments
Know Where Your Facility Is Exposed
A physical security assessment is a structured, on-site review of the measures that keep a facility’s people, assets, and information safe, from the perimeter and lighting to access control, cameras, locks, visitor procedures, and the policies staff actually follow. Redbeard Intelligence and Investigations conducts these assessments for businesses, law firms, schools, healthcare providers, property managers, and private families, and delivers a risk-ranked report that shows what to fix first.
The work is mostly observation: daytime and after-dark walkthroughs, document review, and interviews with the people who run the building. Nothing is forced, picked, or bypassed. Whether an intruder could actually get in is a separate question, answered by physical penetration testing. An assessment answers a broader one: where the weak points are, how serious each one is, and what to address first.
Why a Physical Security Assessment Matters
Security drifts over time. Doors get propped, badges outlive the people who carried them, and cameras end up pointed at walls. An outside review catches what daily routine hides.
- Risk-Ranked Findings
Every gap is rated by likelihood and impact, so budget goes where it matters most.
- Day and Night Review
Lighting, cameras, and door habits are checked after dark, when many weaknesses appear.
- People and Procedures
Reception, visitor handling, and staff habits are reviewed alongside locks and hardware.
- Low-Disruption Method
Observation, interviews, and walkthroughs are scheduled to fit around normal operations.
- TSCM Pairing Available
Combine the review with a bug sweep of boardrooms and executive suites.
- An Outsider’s View
An optional OSINT review shows what the public can learn about your site and staff.
What a Physical Security Assessment Covers
The review follows the route a visitor, a delivery driver, or an intruder would take, from the street to the rooms that matter most. Depending on scope, assessors examine:
- Perimeter and grounds: fencing, gates, vehicle entrances, parking, and landscaping that hides approaches
- Lighting at entrances, loading docks, walkways, and parking
- Doors, windows, and roof access, including locks, latches, closers, and doors routinely propped open
- Electronic access control: credential types, reader placement, and how badges are issued and revoked
- Key control and master-key records
- Cameras and alarms: coverage, blind spots, night image quality, retention, and who responds to an alert
- Reception, visitors, contractors, and deliveries
- Sensitive areas such as server rooms, records storage, executive suites, and cash handling
- Policies on clean desks, shredding, employee separations, and incident reporting
Executive residences can be added where scoped.
How an Assessment Runs
- Scoping. Goals, sites, critical assets, known concerns, and who can approve the work.
- Document review. Floor plans, policies, guard post orders, access control settings, and incident history.
- Threat framing. Realistic threats for the site, such as theft, insider misuse, workplace violence, or severe weather.
- Site survey. Walkthroughs during business hours and after dark.
- Interviews. Facilities, security, front desk, IT, and HR staff.
- Light verification. Confirming that doors latch, cameras record, and alarm points report, without attempting entry.
- Analysis and reporting. Each gap is rated and paired with a recommendation.
- Briefing and follow-up. Results reviewed with leadership, with an optional re-check after fixes.
What You Receive
- An executive summary written for non-specialists
- Findings for each location, illustrated with photographs
- A risk-ranked list of gaps
- Recommendations that separate quick, low-cost fixes from capital projects
- An optional annotated site map of coverage gaps
- A leadership briefing and, if requested, a follow-up review
Lock and door recommendations respect fire and life-safety egress requirements. Findings can reference public guidance such as CPTED principles, NIST SP 800-53 physical controls, ISO/IEC 27002, and the ASIS security risk assessment standard as points of comparison, not certification.
Pairing With a Bug Sweep and an OSINT Review
Because Redbeard also performs technical surveillance countermeasures work, an assessment can be paired with a TSCM bug sweep. The assessment identifies places where a listening device or hidden camera could be concealed; the sweep looks for any already in place. The pairing suits boardrooms, executive suites, and rooms where deals or litigation are discussed.
A second option is an outsider’s-eye OSINT review of what public sources reveal about your building, security vendors, badge designs visible in online photos, and staff. The same research can inform social engineering testing if you later want to measure how staff respond to pretexts.
Authorization and Rules of Engagement
Even an observational review starts with written authorization from someone with legal authority over the premises. In leased or shared buildings that can include the landlord, the property manager, and the contract guard company. Before any site visit, the scope, areas, hours, and rules of engagement are signed; emergency contacts are exchanged; and a stop and deconfliction process is agreed in case guards, staff, or police ask questions. Assessors carry an authorization letter on-site, and photographs and notes follow an agreed retention schedule.
What Affects Cost
Cost depends on the number and size of sites, the buildings or floors in scope, after-dark review, the depth of document review and interviews, travel, and add-ons such as a TSCM sweep, an OSINT review, or an executive residence review. You receive a written scope and estimate before work begins.
Who It Is For and When to Schedule One
Facilities and operations leaders, security and risk managers, business owners, law firms, schools, healthcare providers, property managers, and families with executive exposure use assessments. Common triggers include:
- Opening a new site, relocating, or renovating
- A theft, break-in, violent incident, or near miss
- An upcoming audit, insurance renewal, or new guard or access control vendor
- Integrating sites after a merger or acquisition
- Threats against an executive, or a difficult layoff or termination
Redbeard Intelligence and Investigations is based in Florida and serves organizations nationwide; on-site work involves travel to your location. To learn whether an intruder could actually get in, follow up with physical penetration testing, and see Security Assessment and Testing Services to plan a broader program.
Frequently Asked Questions
What does a physical security assessment include?
A physical security assessment includes a review of the perimeter, lighting, doors and locks, electronic access control, cameras, alarms, visitor handling, sensitive areas, and written security policies. Assessors walk the site by day and after dark, read the relevant documents, and interview the people who run the building. The report rates each gap by likelihood and impact and recommends fixes in priority order.
How is a physical security assessment different from a penetration test?
A physical security assessment finds weaknesses through observation, interviews, and document review, while a penetration test actively tries to get inside. The assessment gives a broad, ranked view of gaps across the site. A physical penetration test is narrower and adversarial: authorized testers try to reach agreed objectives to show whether controls hold under pressure. Many organizations assess first and test later.
Will a physical security assessment disrupt our employees?
A physical security assessment is designed to fit around normal operations. Most of the work is quiet observation, short interviews, and walkthroughs scheduled with your point of contact. Assessors do not force doors, defeat locks, or approach staff with pretexts. Any light verification, such as confirming that a door latches or a camera records, is agreed with you in advance.
How often should physical security be reassessed?
Physical security should be reassessed whenever the site, the threat, or the controls change in a meaningful way, and otherwise on a regular cycle that leadership sets. Typical triggers include a move or renovation, a new access control system, a security incident, a merger, or threats against an executive. A follow-up review after fixes confirms the changes work as intended.
Can a physical security assessment help with compliance requirements?
Yes, an assessment can support compliance work by documenting physical controls against the frameworks you follow. PCI DSS Requirement 9, the HIPAA Security Rule physical safeguards, ISO/IEC 27001 physical controls, and NIST SP 800-171 physical protection requirements all address physical access, and findings can be mapped to them. The assessment does not certify compliance; that determination belongs to your auditor.
Explore Redbeard Security Services
- Security Assessment and Testing Services
- Physical Penetration Testing
- Social Engineering Testing
- Vulnerability Assessment Services
- Penetration Testing Services
- Mobile Application Penetration Testing
- Red Team and Attack Simulation
- AI Security Testing
- Cyber Threat and Incident Response
- Cybersecurity Advisory
- Contact Redbeard Intelligence and Investigations
Related services: TSCM bug sweeps, corporate bug sweeps, and OSINT investigations.
Get a Clear, Risk-Ranked Picture of Your Site
A physical security assessment gives leadership a plain-language view of where a site is exposed and what to fix first. Our assessors travel to client sites nationwide and work around your operations. Call (888) 564-8300 or email contact@redbeardpi.com to discuss scope.
What is the cost? | how does it work?
At Redbeard Intelligence & Investigations, we offer upfront, transparent pricing that reflects the specific details and complexity of each case. Instead of vague estimates or hidden charges, we provide clear, upfront pricing tailored to your investigation’s unique requirements—without unexpected fees, hidden costs, or additional unexpected expenses. Our goal is to offer efficient, high-quality investigative and intelligence solutions with transparency and peace of mind.
To begin an investigation, intelligence operation, or technical security assessment, the first step is a confidential consultation via phone or email with one of our experienced professionals. During this initial discussion, we will gather key details about your situation to determine the most effective strategy tailored to your needs. Whether you require private investigative services, intelligence gathering, or technical security solutions, our team will develop a customized plan designed to achieve your objectives. Based on the specific requirements of your case, we will then provide a transparent price quote and/or invoice for the cost of the services needed. Throughout the process, we ensure clear and consistent communication, keeping you informed of any significant developments. Upon completion, you will receive a comprehensive written report detailing our findings, along with any supporting evidence such as photos, video documentation, or technical security assessments.
Contact us through phone or email for an initial discussion and provide key details about your needs.
Based on the specific requirements of your case, you'll will receive a flat-rate price quote and invoice for the cost of the services needed.
With pricing and mutual terms accepted, payment will be collected for the predetermined costs, and you'll officially become our client.
Throughout the process, we keep you informed of any significant developments. Upon completion, you will receive a written report detailing our findings, along with any supporting evidence or documentation.
