How do I interview staff without filling my risk assessment with guesses?
Turn staff accounts into attributable findings and targeted follow-up without mistaking confidence for verification.
How do I assess the security of a data centre’s physical support services?
Connect physical support services with customer outcomes and maintenance assurance.
How do I assess a university building used after hours?
Separate permission to enter from permission to perform an activity and the support that activity needs.
How do I assess security before a construction site opens?
Make a bounded opening decision for the first construction stage and its changing interfaces.
How do I assess a remote site’s dependence on outside help?
Test the chain required for useful help to reach a remote operation.
How do I assess security for a public event with several organisers?
Turn separate event plans into agreed authority and communication at shared interfaces.
How do I assess security at a clinic that must remain welcoming?
Connect public access and staff assistance without using diagnosis or appearance as risk evidence.
How do I assess security at a warehouse without disrupting dispatch?
Find the point where physical goods and release authorisation become disconnected.
How do I assess airport security risks at the boundary between operators?
Resolve conflicting assumptions where airport participants hand work and responsibility to one another.
How do I assess an airline’s security risks across several airports?
Compare airline stations without assuming common procedures prove identical local performance.
How do I assess security risks at a critical infrastructure facility?
Connect the facility assessment with essential services and the dependencies beyond its physical boundary.
How do I find information and systems missing from our security assessment?
Use real business workflows and their fallbacks to uncover important information and system dependencies absent from the assessment.