Proper Authorities | Security Risk Assessment

Identifying Vulnerabilities and Security Risks

Why do you need a Security Risk Assessment?

Independent third-party security risk assessment provides a focused, objective and holistic outlook on organizational security risks, vulnerabilities, and gaps in security governance, operations, and systems.

PHYSICAL INSPECTION

Walkthroughs, Staff Interviews

Inspection Components

Physical Walkthroughs
Staff Interviews
Department Leader Interview
Departments & Sensitive Areas
During & After Business Hours
Exterior – Evening Hours Assessment

Inspection Focuses

Hospital, campus, ancillary buildings, departments, courtyards, parking lots etc.
Assess safety-security culture, healthcare codes training, concerns, incidents, etc.
ED, ICU, Mother Infant Services, Pharmacy, Human Resources, Psychiatry, etc.
Crime Prevention Through Environmental Design (CPTED) Evening Assessment – lighting, isolated areas, pedestrian walkways, etc.

SECURITY MANAGEMENT

Risk Management

Inspection Components

Accreditation, Regulations, & Laws
Programs, Plans, Policies, & Procedures
Crime & Threat Analysis
Internal-External Security Risk Assessments
Security Program Metrics

Inspection Focuses

Review of The Joint Commission, CMS, FedOSHA, HIPAA, etc.
Security Management, Workplace Violence, Active Shooter, Use of Force etc.
CapIndex – CrimeCast crime analysis and threat evaluation and mitigation actions
Review of identified threats, risks, and vulnerabilities for continuity of efforts.
Review of metrics, associated with crime, incidents, etc.

SECURITY OPERATIONS

Security Presence & Response

Inspection Components

Staffing & Deployment Model
Personnel Utilization
Protective Equipment & Control Tools
Incident Response & Reporting
Emergency Response & Mass Notification
Security Control-Dispatch Center

Inspection Focuses

Based on multiple factors, evaluate if staffing deployment is adequate
Evaluate security responsibilities, leadership expectations of security etc.
Assess adequacy of protective equipment utilization & deployment of control tools
Review security incidents, reporting, and lessons learned etc.
Emergency response policies, response, procedures, notification systems
Review staffing & tasks for efficiency

SECURITY SYSTEMS

Monitoring & Control

Inspection Components

Video Surveillance
Physical Access Control Systems
Visitor Management & Screening
Panic and Intrusion Alarms
Infant Security Systems
Emergency Call Stations
Key Systems & Others

Inspection Focuses

Storage capacity for recordings, camera types, locations, sensitive area coverage
Access control types, card reader, proximity card types, database mgmt.
Review of issued badges/wrist band process, system review, screening methods
Adequacy, testing, monitoring, & response policies, procedures, for systems
Infant security system – location of exciters/repeaters, nursing training levels, response procedures

SECURITY TRAINING

Certifications & Annual Training

Inspection Components

Certifications
Annual Security Training
Use of Force Training
Workplace Violence Prevention Training (De-escalation training)
Emergency Response Training
Security Awareness Programs for Staff

Inspection Focuses

Review of required certifications for contracted, proprietary, sworn personnel etc.
Required annual security training required for security staff, field training officer etc.
Review of Use of Force training, reporting, review of incidents, & control tools
Review of workplace violence prevention training
Active Shooter, Healthcare Codes, etc.

OUR REPORT

Defensible and Helpful

Inspection Components

Observations “Not Findings”
Federal & State Laws, Regulations, & Standards
Crime Prevention Through Environmental Design (CPTED)
Survey Analysis for Evaluating Risk (SAFER MATRIX)
Security Risk Assessment Areas

Inspection Focuses

Risk-Ranked, numbered, prioritized, aligned to standards, requirements, etc.
The Joint Commission, CMS, HIPAA, FedOSHA, NIMS, HICS, etc.
ISO 3100:2018 Risk Management, ASIS, IAHSS, NFPA, NCMEC, IES, FEMA
Natural access control, natural surveillance, maintenance/management
SAFER Matrix adopted in 2017 by TJC to evaluate accredited & certified programs
Governance, management, operations, systems, training, etc.

Identifying Vulnerabilities and Security Risks

Why do you need a Security Risk Assessment?

PHYSICAL INSPECTION

Walkthroughs, Staff Interviews

Inspection Components

Inspection Focuses

SECURITY MANAGEMENT

Risk Management

Inspection Components

Inspection Focuses

SECURITY OPERATIONS

Security Presence & Response

Inspection Components

Inspection Focuses

SECURITY SYSTEMS

Monitoring & Control

Inspection Components

Inspection Focuses

SECURITY TRAINING

Certifications & Annual Training

Inspection Components

Inspection Focuses

OUR REPORT

Defensible and Helpful

Inspection Components

Inspection Focuses

Threat x Vulnerability x Consequence = Security Risks

REAL STORIES

Clients We've Helped

Membership & Affiliations