Agilient designed a consultative, scalable security risk assessment program for an operator of energy and water transportation assets, pairing site-level reports with a consolidated enterprise view to guide security investment.
THE CHALLENGE
An owner and operator of critical energy and water transportation assets provides essential services to a large number of households and businesses. Its property estate is extensive, geographically dispersed and functionally varied. The operator wanted a consistent, methodical way to assess security risk across these sites, so that it could identify both site-specific issues and enterprise-wide patterns and build a clear framework for treating them. Any approach needed to be flexible and scalable enough to cover a large number of sites without losing consistency from one assessment to the next.
OUR APPROACH
Agilient developed a structured, consultative program for assessing security risk across the estate, designed to be refined with the operator to maximise efficiency. The method followed a staged process, beginning with design and validation of the approach in consultation with stakeholders, then moving to formal site assessments and documentation. Each site assessment covered perimeter security, access control, lighting, alarms, CCTV and operational security procedures. Each site received its own security risk assessment report setting out local risks and treatment recommendations in a risk register format. Findings from the individual assessments were then consolidated into an enterprise-level view of the operator’s security posture. The program also offered optional support to develop an overarching corporate security risk policy and framework, and project management support for implementing risk treatments.
THE OUTCOME
The operator gained a repeatable approach to assessing security risk consistently across a large and varied estate.
- A scalable assessment method, validated with stakeholders, covering perimeter, access control, lighting, alarms, CCTV and operational procedures
- Site-level security risk assessment reports with treatment recommendations in a consistent risk register format
- A consolidated enterprise view of security posture to help prioritise security investment across the portfolio
Related services: security risk assessment consultants, physical security consultant, independent CCTV consultant. Sector experience: utilities security consultants and critical infrastructure security consultant. To discuss a similar project, contact Agilient.