Opening a new office, factory or warehouse is the best moment to get security right. Changes are cheap before fit-out is finished and expensive afterwards. A structured security risk assessment tells you what needs protecting, what could realistically go wrong and which controls are worth the money. This guide follows the logic of recognised risk management practice, such as the principles in ISO 31000, and applies it to a new site in Egypt.
Step 1: Define the scope and what you are protecting
Start by listing what matters to the business on that site. Assets are not only physical goods: they include people, information, reputation and the ability to keep operating.
- People: employees, contractors, visitors and, in some sites, members of the public
- Physical assets: stock, equipment, vehicles, cash and high-value items
- Information: documents, servers, prototypes and commercially sensitive data
- Operations: production lines, deliveries and critical services such as power and water
Step 2: Understand the environment
Visit the site at different times of day and night. Look at the neighbourhood, access roads, lighting, nearby businesses and how traffic flows. Speak to neighbours, the landlord and local staff who know the area. For industrial sites, understand shift patterns, delivery schedules and how contractors come and go.
Step 3: Identify realistic threats
Focus on the threats that are credible for your type of business and location rather than on worst-case scenarios. For most commercial sites in Egypt, the common issues are theft by outsiders or insiders, unauthorised access, vandalism, fraud at the gate, safety incidents and disruption from fire or utility failure. Some organisations also face protest activity or targeted interest because of their profile.
Step 4: Find the vulnerabilities
Walk the site as an intruder or a dishonest employee would. Where could someone enter unseen? Which doors are propped open? Who can reach the stockroom, the server room or the cash office? Are keys and access cards controlled? Is there CCTV, and does anyone actually watch it?
| Area | Typical vulnerabilities |
|---|---|
| Perimeter | Low or damaged fences, blind spots, poor lighting, unused gates |
| Entrances | No visitor registration, shared access cards, tailgating |
| Goods in and out | Weak checks on vehicles, paperwork and seals |
| Internal areas | Unrestricted access to stores, IT rooms and offices |
| People | No background checks, weak induction, unclear reporting lines |
Step 5: Rate the risks
For each risk, judge how likely it is and how serious the impact would be. A simple high, medium and low scale is enough. The aim is to put risks in order, so that money and attention go first to what matters most.
Step 6: Choose proportionate controls
Good security layers several measures so that one failure does not leave the site exposed. Combine physical controls, technology, people and procedures:
- Physical: fencing, gates, locks, lighting, secure stores
- Technology: access control, CCTV, alarms, visitor management
- People: trained security officers, supervisors and an operations room
- Procedures: post instructions, key control, incident reporting and regular audits
Each control should be linked to a specific risk. If you cannot explain which risk a measure reduces, question whether it is needed.
Step 7: Write it down and review it
Turn the assessment into an action plan with owners, budgets and dates. Review it after any incident, when the site changes and at least once a year. A risk assessment that sits in a drawer gives no protection.
A one-page summary for management
- What we are protecting
- The five most important risks
- Controls in place and planned
- Budget and timeline
- Who is responsible
Magnum carries out site assessments before every guarding contract and can design a full security programme for new offices, factories and warehouses. Learn more about our security guarding and security technology services, or request an assessment.
Frequently asked questions
When should a security risk assessment be done for a new site?
Ideally before fit-out is finished, so that doors, lighting, cabling for CCTV and access control can be planned without costly changes later.
Who should carry out the assessment?
An experienced security professional working with site management, facilities, HR and IT. Local staff and neighbours often provide the most useful information about the area.
How often should a risk assessment be reviewed?
At least once a year, and whenever there is a significant incident or change to the site, operations or surroundings.
