What a security site audit covers

A security site audit — sometimes called a site assessment or a risk walk — is the conversation that should happen before anyone talks about hours and uniforms. It is a structured look at the property, the people who use it, and the way incidents would actually unfold after hours. Xtreme starts every programme with a free security assessment. This guide explains what that visit is for, what a thorough one covers, and what you should be handed afterwards, so you can tell a real assessment from a sales tour.

The output of a good audit is a brief: the mix of posted officers, patrols, alarm response or other measures that fits this site, not a copied specification from the last building the salesperson saw. If you are still choosing a firm, keep how to choose a security company in Canada nearby, and use this page for the walk itself.

What the visit is for

The walk has three jobs. First, to see the property as it is, including the shortcuts staff already take. Second, to hear from the people who close the building and who get the 2:00 call. Third, to turn that into written recommendations you can accept, reject or phase. If a contractor is willing to quote a full programme without coming on site, or after a look at the lobby only, you are not being assessed. You are being sold a package.

You should expect the visit to take as long as the site is complicated. A single-door office and a hospital campus are not the same appointment. Prepare by naming a host who has keys, who knows the after-hours routine, and who can say which incidents have actually happened — not only which ones the organisation worries about.

Walk the boundary and then the inside

Begin at the perimeter: fences, vehicle gates, pedestrian doors, loading docks, parkades, roof access and any adjoining space that people use as a short cut. Note lighting, sightlines, hiding places and the difference between the legal property line and the line staff actually treat as theirs. A beautiful reception means little if the side gate is on a latch.

Inside, walk the public route and then the staff route. Reception, elevators, stairwells, plant rooms, server or records rooms, cash or pharmacy spaces, and any area that is supposed to be restricted should all be seen. Ask to be shown how a visitor is signed in today, and how a contractor gets to a ceiling space. The informal method is the one that will be used at 6:30 in the morning, and it belongs in the notes.

People, process and paperwork

A building is only as secure as the habits of the people who hold the keys. The audit should ask who locks up, who holds after-hours authority, how keys and fobs are issued and recovered, and what happens when a staff member leaves. It should also ask how incidents are reported today, and whether anyone reads those reports. A clean policy binder that no closer follows is a finding, not a comfort.

If you already have cameras, alarms or an access-control system, the question is not “do you have technology.” The question is who receives a signal, who can see a live view, and what a person is expected to do in the first minutes. A recorder no one reviews, or an alarm that rings to a voicemail box, should be written down as a gap. Our NSOC exists to be that answered desk when a programme includes monitoring and dispatch; the audit should say whether you need that, not assume it.

After hours, exceptions and the ugly paths

Most sites fail at the exceptions: the early contractor, the late truck, the propped door for a delivery, the event in the lobby, the seasonal overflow in a lot. Ask to be walked through a normal close, a weekend close, and one messy exception. If the host cannot describe those three, that is itself a finding. Patrol or static coverage should be designed around those paths, not around a floor plan that assumes everyone left on time.

Neighbourhood context matters, but it should not be the whole story. A quiet industrial park can lose a trailer because the dock was left open; a busy street can be fine because the close-up is disciplined. The audit should record both the setting and the habits.

What you should receive afterwards

A useful write-up is short enough to be read and specific enough to be acted on. It should list observed strengths, ranked gaps, and recommended measures with a clear sense of what is urgent and what can be phased. It should name doors, lots and processes, not only “improve access control.” You should also receive a proposed programme — posts, patrols, monitoring, or a mix — that you can compare with another bidder on the same facts.

You should not receive invented crime statistics, a fear narrative, or a binding legal opinion. The assessment is a professional observation of your site. Confirm any regulatory, fire or insurer requirements with the authority or the broker that applies to you. Xtreme will not pretend the walk replaces those opinions.

How we turn the walk into a programme

Once the gaps are agreed, we scope coverage to the site: a posted officer where a door or a lobby needs a person, a randomised patrol where a yard or a lot needs presence, alarm response where a signal should produce a unit, a fire watch where an impairment requires one. The proposal should show supervision, reporting and the number you call after hours. Behind that sit 4,500+ full-time staff, a 17,000+ officer network, 40+ offices, 270+ patrol units and $10 million in liability coverage — useful only if they show up as a roster and a desk for your building.

We will do this walk in service cities such as Surrey, Toronto, Bellevue and Brisbane, and in the other areas listed in our locations directory. Call 1-800-730-3712 and press 1, 2 or 3, or start on Get Started. Bring keys, a closer, and an hour of honest conversation. That is enough to begin.

Who should be in the room, and what not to expect

Besides the host with keys, it helps to have someone from operations or nursing or the night close, not only a facilities person who works days. The after-hours truth of a site rarely lives in the same head as the capital plan. If unions, tenants or clinical leads will have to live with the recommendations, tell them the walk is happening. You do not need a committee on the tour; you need fewer surprises afterwards.

Do not expect the auditor to test every alarm point, climb every roof, or write your policy manual in an afternoon. A first assessment is a professional reconnaissance. Specialist surveys — electronic security design, fire engineering, a legal review — may still be required, and a careful contractor will say so rather than stretch the walk into those disciplines. You should leave with clearer priorities and a scoped operational programme, not with the feeling that every possible study has been finished.