09/03/2026
Your site has a version you see and a version an adversary sees. They are not the same site.
Security risk assessment — the vulnerability survey — is where you go looking for the second one.
It's a systematic physical inspection covering perimeter, access points, access control, surveillance, interior zones, procedures and people. And it asks one question everywhere: where would a threat succeed?
Three rules make or break it:
→ Survey at different times. Day, night, shift change, weekend. Vulnerabilities are time-dependent.
→ Test, don't assume. Try the door. Attempt the tailgate. Check whether alarm response actually happens.
→ Document with photos, notes and locations. Evidence, not impressions.
Cameras that record aren't the same as cameras someone is watching. Written policy isn't the same as what happens at 2am on a Sunday.
Vulnerabilities are opportunities. Find them before someone else does.
