What a security risk assessment covers
A site security assessment evaluates the physical environment: perimeter integrity, access control points, lighting, CCTV coverage, alarm systems, and the vulnerability of specific areas (server rooms, cash-handling areas, high-value storage). It also assesses procedural factors: visitor management, key control, out-of-hours procedures, and staff security awareness. The output is a site-specific vulnerability map with prioritised remediation recommendations.
A personal security risk assessment evaluates the threat profile of an individual: their public visibility, the sensitivity of their role, any specific threat intelligence, their travel patterns, and their current security measures. The output is a threat level assessment and a close-protection brief that specifies the appropriate level of protection and operational protocols.
A corporate security risk assessment covers both the physical and procedural environment plus the people risk: insider threat exposure, contractor security management, supply chain security, and the organisation's resilience to disruption events. This broader assessment is typically the foundation of a security management plan.