Manufacturing security review and enterprise security risk management audit

The engagement combined a physical security audit with an Enterprise Security Risk Management review to assess existing controls, identify practical improvements, and strengthen security governance. The result was a prioritized roadmap that supported informed, risk-based decision making while recognizing the site's existing security strengths.

The organization sought an independent assessment of security at one of its manufacturing facilities to determine whether existing governance, physical security measures, emergency preparedness, and risk management practices remained appropriate for its operating environment. While the site already maintained a generally strong security posture, leadership wanted an objective review that could validate existing practices and identify opportunities for improvement.

The engagement was initiated to complete a physical security audit and Enterprise Security Risk Management review that examined current threats, protection measures, detection capabilities, intervention processes, and site preparedness. The objective was to identify vulnerabilities and provide practical recommendations that aligned with the organization’s broader risk management objectives.

The work required evaluating governance, operational practices, emergency measures, and physical security as an integrated program rather than separate disciplines. Recommendations also had to reflect the realities of an active industrial facility, including production continuity, employee and contractor movement, shipping and receiving operations, sensitive areas, and business continuity considerations. Confidentiality remained essential because the assessment documented vulnerabilities that could not be publicly disclosed.

The engagement began with a review of the organization’s security governance structure, including decision-making processes, accountability, existing procedures, and the relationship between security activities and broader organizational objectives. Particular attention was given to the role of Health and Safety in supporting physical security and risk management.

A detailed field assessment followed, examining perimeter security, access control, lighting, locking systems, emergency exits, video surveillance, sensitive areas, and the site’s ability to deter, detect, delay, and respond to security events. Emergency measures, business continuity considerations, and operational procedures were also reviewed to understand how security supported day-to-day manufacturing activities.

The Enterprise Security Risk Management review involved collaboration with site leadership to evaluate assets, threats, vulnerabilities, preparedness, governance, organizational practices, learning and development, and performance management. Findings from the field assessment and ESRM review were analyzed together to identify practical opportunities for strengthening governance and physical security.

The engagement applied Enterprise Security Risk Management principles, physical security audit methodology, security governance review, threat and risk assessment principles, Deter, Detect, Delay thinking, emergency measures review, business continuity considerations, and professional security risk management judgement. The work involved Health and Safety leadership, site management, operations personnel, corporate partners, and personnel responsible for physical security, emergency measures, and risk management.

The client received a comprehensive report documenting the physical security audit, security governance review, emergency measures assessment, Enterprise Security Risk Management findings, and eleven prioritized recommendations for improvement. The deliverables provided practical guidance for strengthening security while supporting operational continuity and informed risk management decisions.

The engagement confirmed that the site’s physical security measures and governance structure were generally effective while identifying opportunities to strengthen access control, reduce unauthorized entry risks, and enhance emergency measures. The review provided leadership with an objective assessment that balanced recognition of existing strengths with practical recommendations for continued improvement.

The completed assessment documented site assets, threats, vulnerabilities, and Enterprise Security Risk Management findings, including a low-risk ESRM result. Eleven prioritized recommendations established a practical roadmap for improving governance and physical security without disrupting manufacturing operations.

Without this independent review, the organization may have continued relying on generally effective controls without a fully documented understanding of remaining opportunities to strengthen governance, emergency preparedness, and access control practices.

A strong security program still benefits from independent review. Combining structured Enterprise Security Risk Management methodology with field observation and professional judgement provides a more complete understanding of risk than relying on assessment tools or physical inspections alone.

Start with a confidential discussion about your situation, your exposure, and the right next step.