People and roles
Who is responsible, how decisions are made, and where accountability may be unclear.
Risk & Security Management
Understand your exposure before making security decisions
Independent security guidance to help clients understand their current posture, identify exposure, and prioritize practical action before pressure forces the issue.
When security measures do not tell the full story
Many organizations already have cameras, access control, alarms, guards, policies, or informal procedures in place.
The real question is whether those measures match the actual exposure, perform under real-world conditions, and support reasonable decisions if the organization is later questioned.
You may have a false sense of security
Cameras, access control, alarms, guards, policies, or informal procedures may be in place, but that does not mean they are aligned with the actual risk. An assessment helps determine whether current measures are appropriate, effective, and defensible.
Your controls may not be working as a system
Security controls often exist in separate pieces. Technology, procedures, staff roles, documentation, maintenance, and response may not be connected. This can create gaps between what appears to be protected and how security would actually perform under pressure.
Your documentation may not support your decisions
After an incident, audit, claim, or leadership concern, decisions may need to be explained. Weak documentation can make it harder to show what was known, what was considered, and why specific actions were taken or delayed.
Understand how your security performs under real-world conditions
Risk & Security Management is an independent assessment and advisory service that helps clients understand how well their current security measures align with their actual exposure. The work looks beyond visible controls to assess how security functions across people, processes, technology, governance, documentation, and response.
Policies and documentation
How procedures, records, and decision rationale support the way security is expected to work.
Access and movement
How people enter, move through, and use the site, including visitor flow and restricted areas.
Physical controls
How physical controls support access, detection, response, and overall site protection.
Incidents and response
What past events reveal about exposure, readiness, communication, and follow-through.
Governance and reporting
How security issues are tracked, escalated, documented, and reviewed over time.
Important service boundaries
This service does not include guard services, alarm monitoring, equipment sales, product installation, engineering services, architectural drawings, or legal advice. Recommendations may include these areas, but MWG remains independent from vendors and implementation services.
Clear deliverables that support better decisions
At the end of the engagement, clients receive practical documentation that clarifies the current security posture, identifies exposure, and supports better decisions. The list below outlines common deliverables that may be provided, depending on the scope and needs of the engagement.
The Outcome
Better security decisions before pressure forces action
Clients gain a clearer understanding of their actual security posture, where they may be exposed, and which actions should be prioritized first. This helps leadership avoid reactive spending, reduce reliance on vendor-led recommendations, strengthen documentation, and make more informed decisions about people, assets, operations, and reputation.
Common Questions About This Service
When should we consider a security risk assessment?
Common triggers include a recent incident, recurring losses, public safety concerns, unauthorized access, workplace violence risk, a new facility, renovation, leadership change, insurance pressure, board concern, regulatory expectations, vendor uncertainty, or the need to validate an existing security program.
Who is this service best suited for?
This service is suited for organizations with people, property, operations, assets, or reputation to protect. Common clients include municipalities, critical infrastructure operators, utilities, property managers, education, healthcare-related environments, manufacturing, logistics, corporate offices, public-facing facilities, and high-value commercial or private sites.
Is this service available for executives or private clients?
Yes. For high-net-worth individuals, executives, prominent families, and public-facing leaders, the assessment may focus on residential security, privacy, personal safety, household routines, travel patterns, public exposure, events, and coordination with family offices, estate managers, legal counsel, or protective providers.
What makes the approach different?
The work is independent and risk-based. The assessment is not designed to sell a product, justify a pre-selected solution, or apply a generic checklist. It considers how security would perform under real-world conditions and how decisions may be examined after an incident.
What frameworks or standards may inform the assessment?
Depending on the scope, the assessment may draw from recognized risk management, physical security, CPTED, government, and sector-specific guidance. This can include ISO 31000, ASIS guidance, RCMP-style threat/risk assessment concepts, Government of Canada Physical Security Guides, Public Safety Canada resources, People-Process-Technology analysis, and Defence in Depth thinking.
How is this different from a checklist-style review?
This service looks at security as a system, not a list of visible controls. The assessment considers people, process, technology, governance, accountability, documentation, physical conditions, and response. The goal is to understand how security would perform in real-world conditions.
How long does a typical engagement take?
A smaller single-site assessment may take 2 to 4 weeks from kickoff to final report. A more complex site, multi-site organization, critical infrastructure environment, or combined governance and physical security review may take 4 to 8 weeks. Additional phases may extend the timeline.
Related Case Studies
National loss prevention program development for a distribution and logistics organization
A multi-location Canadian distribution and logistics organization involved in national and international product movement needed a structured approach to enterprise security risk and a formal national loss prevention program.
Precious metal protection security assessment for a remote facility
A remote mining operation required an independent assessment to evaluate whether its high-value asset protection program was resilient, defensible, and prepared for evolving security risks.
City-wide municipal security risk assessment and governance review
A municipal government required a coordinated review of security risks, governance, and Crime Prevention Through Environmental Design across a diverse portfolio of public properties.
Get the strategy needed to reduce risk with confidence
Start with a confidential discussion about your right next step.