Risk assessment or security survey: which do you need?

They are often used interchangeably. They answer different questions, and choosing the right one saves time and money.

· 3 min read
Consultant and manager reviewing a site plan at the entrance gate

When organisations ask us for "a security assessment", they usually mean one of two things. Sometimes they want to understand what could go wrong and how much it matters. Sometimes they want someone to examine a specific site and tell them what to fix. The first is a risk assessment. The second is a security survey.

A risk assessment asks: what could go wrong, and how much does it matter?

A risk assessment starts with the organisation, not the building. It looks at threats (who or what could cause harm), vulnerabilities (where you are exposed) and impact (what it would cost you). The result is a prioritised list of risks and the controls that would reduce them, written so leadership can make budget decisions.

It is the right starting point when you are entering a new market or location, after a serious incident, when leadership wants to know whether security spending is in the right places, or when you have never had one.

A security survey asks: how well is this site protected?

A survey is a structured inspection of a particular facility and its operations: perimeter, lighting, access control, alarms and cameras, guard routines, incident handling and reporting. It compares what exists with what the site needs, and produces practical, prioritised improvements.

It is the right choice when you know the risks and need to check whether a site is meeting them, before or after a fit-out or move, or as a periodic check.

"A risk assessment tells you where to look. A survey tells you what you'll find there."

Often, you need both

The two work best together. A risk assessment sets the priorities; surveys test each site against them. For multi-site organisations, a single risk assessment followed by a survey of each site is usually the most efficient approach.

What this means in practice

  • Start with a risk assessment if you are unsure what matters most.
  • Commission a survey when you need to test a specific site.
  • Use the risk assessment to set the scope of every survey.
  • Repeat both after significant changes to your operation.

Not sure which you need? Send us a short enquiry. → Risk assessments · Security assessments & surveys

CategoryRisk & ResilienceSectorsAll sectors

Talk to us about your security needs

A short enquiry is enough to start. We’ll guide the next steps.