Comprehensive Risk Assessments

Whether you're exploring a new business opportunity, or you're in the midst of a complex legal battle, a comprehensive risk assessment can help your organization identify blind spots, close gaps in your security, and provide certainty during your most challenging events.

Assessing Risk

We've all seen the news. Another major brand has fallen victim to a security breach they could have been prepared for. Whether it be a lack of foresight, or an unwillingness to recognize the bitter truth; 9 out of 10 crises are avoidable. Whether that risk is physical or digital, the hazards of running a business are myriad and complex. With so many opportunities for things to go wrong, how can a business owner avoid becoming a headline while keeping their team and business safe?

Whether a company is exploring an opportunity to expand or transform its business, navigating a complex, high-stakes dispute, or facing threats from an adversary; actionable intelligence and a trusted advisor can mean the difference between success and failure.

Chesley Brown routinely advises corporations, governments, schools, and other organizations on how to manage and mitigate risk. Our global team has diverse cultural, geographic, industry and functional know-how and the ability to immerse themselves in the most challenging regions, situations, and industries. We leverage the investigative craft that has been developed through decades of experience, the latest in data analysis technologies and artificial intelligence, as well as a vast network of resources including law enforcement agencies, subject matter experts, industry leaders and other cross-sections of society to gather information for our clients. We utilize that expertise and experience to develop strategies which reduce risk and enhance physical security. Our experts then help our clients implement, manage, and optimize those strategies.

Our team is relentless about optimizing your risk management approach. Regardless of your organization's size or industry, a comprehensive security risk assessment can help you identify a wide variety of weaknesses while safeguarding your employees, property, organization, and intellectual property (IP). We apply battle-tested tools and methods that includes:

  • A review of current exposures and previous security incidents as part of a security risk assessment in order to identify immediate and present risks. You can't plan for what you don't know, so by looking at the historical record, our risk analysis team can prioritize the most likely threats to your organization.
  • Interviews with managers, employees and other key individuals for behind-the-scenes insights and information about common issues, policies, countermeasures and procedures.
  • Provide a comparative analysis to isolate areas where your security program and processes may fall short, or do not meet industry best practices.
  • Make timely, relevant recommendations and assist you in implementing and managing any new countermeasures or physical protection systems, in order to reduce or eliminate any areas of vulnerability. We then fine-tune those procedures to optimize performance and cost.

Professional Risk Assessments

At Chesley Brown we believe that no business leader should lose sleep at night worrying "what if." Complete security begins with a comprehensive risk assessment. Businesses can no longer afford a simple vulnerability scan. A physical vulnerability assessment does nothing to combat the rising threat of cyber espionage, and even the best trained law enforcement professionals aren't public health experts.

Our cross-functional approach to risk analysis and risk mitigation takes decades of business, security, and law enforcement experience to gain an intimate understanding of your risk landscape. Our goal is to understand your safety and security posture from every angle, chart each hazard your organization faces, and map a clear path forward that saves lives, protects property, and enables you to continue growing. We then distill this information down into a comprehensive security risk report called a Chesley Brown Report, where we outline a detailed action plan to address your unique challenges. Our experts will then review each section with your stakeholders and make any changes before implementation.

An in-depth risk assessment will usually include any combination of the following items:

  • Vulnerability assessments
  • Threat assessments
  • Physical security assessments
  • Student Threat Assessment (if applicable)
  • Cybersecurity assessments
  • Penetration testing
  • A full security assessment (audit)
  • Red Team Exercise Results
  • Health risk assessment

We leverage decades of security and law enforcement experience to conduct an in-depth assessment of your security from every angle to prevent any disruption or attack. This information is organized into an assessment report, and we create an action plan to address the vulnerabilities described in the report.

Chesley Brown's unique approach looks at risk from a variety of strategic points to better understand your situation. We look at everything from natural disasters to cybersecurity. Our Risk analysis looks at over 2,000 risk factors that may affect or disrupt your organization in order to improve physical security. Our highly skilled threat assessment team will comb your organization looking for any vulnerabilities within the 6 Pillars of Risk Management:

  1. Hazard and event risk
  2. Operational risk
  3. Technology and information risk (Cybersecurity)
  4. Economic risk
  5. Environmental risk
  6. Emergency preparedness and training

What is a vulnerability assessment?

A vulnerability assessment is the process of identifying the security vulnerabilities and risk factors in your organization or region, and taking active steps toward remediation. The information and tools gathered via vulnerability testing can be leveraged by security teams to assess and improve your threat mitigation and prevention processes whether that be physical or digital.

High and medium vulnerabilities should have a detailed mitigation report which may include:

  • The name of each vulnerability
  • The date of discovery
  • The score based on Common Vulnerabilities and Exposures (CVE) databases
  • A detailed description of the vulnerability
  • Details regarding the affected systems
  • Details regarding the process and tools used to correct the vulnerability
  • A proof of concept (PoC) of the vulnerability for the system (if possible)
  • A blank field for the owner of the vulnerability,
    • The time it took to correct
    • The next revision
    • Any countermeasures between the ultimate solution

Armed with this basic list as art of any broader risk assessment, the recommendations phase should reflect a complete analysis and understanding of an organization's weaknesses and overall security posture in all aspects of the risk mitigation process.

What is a Threat Assessment?

A threat assessment is the evaluation of the intentions and capabilities of anyone or anything which may pose a threat to an organization, how they might cause harm, and their ability or motivation to carry out the task. To fully understand the nature of threat is to also identify the source of threat, which includes man and mother nature. Therefore, threat assessments are another tool in a risk manager's broader risk management toolkit.

Why are Risk Assessments so Important?

Producing regular risk assessment reports can put you one step ahead of the bad guys by helping identify holes in your security defenses yourself rather than waiting for a breach to expose them. Active scans and ongoing monitoring for incoming or developing threats can help you plug holes in your own security net before threat actors discover them. You can't fix the flaws you can't see, and the clearer the sense of your overall security posture, the better situated you are to improve it.

Ultimately, a vulnerability assessment helps you shift from a reactive approach to a proactive one, with an increased awareness of the risks your organization faces and an ability to prioritize the flaws that most need attention through strategies like penetration testing (pen testing), red teaming, tabletop exercises, security audits, and ultimately vulnerability management. Vulnerability analysis, on the other hand, focuses both on consequences for the event itself and on primary and secondary consequences for the surrounding environment. A vulnerability analysis serves to "categorize key assets and drive the risk management process," according to the US Department of Energy.

Our risk management process involves identifying and prioritizing the locations, people, systems, networks, processes, and assets most likely to come under attack by identifying, documenting, and scoring any vulnerabilities found. We may use threat assessments, security assessments, a more generalized risk assessment or a physical vulnerability assessment as part of our broader risk mitigation strategy. We then prioritize the remediation process to focus on the higher risk/impact vulnerabilities that affect your most critical systems. Ultimately, a risk assessment helps you shift from a reactive security approach to a proactive one with an increased awareness of the risks your organization faces and an ability to prioritize the threats that most need attention.

Testimonials

Once the decision was made to renovate the entire property's electric security system, Chesley Brown began developing specifications and identifying prospective bidders. After this was accomplished, Chesley Brown was with us to manage the bid process, award the bid and oversee the installation of the new system.

General Manager

Office Complex, Georgia

Our unique property required a firm that tould customize a security management program that addressed our property's individuality. Chesley Brown was the only firm that had the flexibility and experience to make it happen.

General Managed

Regional Shopping City, Missouri

Expert Risk Analysis

By working directly with your stakeholders, law enforcement, cybersecurity professionals and industry experts our risk analysis team can determine the likelihood of any particular threat, prioritize action plans, recommend appropriate security measures implement solutions, and when necessary, conduct penetration testing to ensure resiliency. Data and facts should be your be your source of truth when implementing or improving new security systems or frameworks, that's why we've made it so easy to get started. Here's how:

step-1-meeting
01

Schedule a Strategy Call

Our first job is to gather as much information as possible about your organization's unique challenges and concerns.

step-2-create-plan
02

Create a plan

After studying the problem, our team of experts will get to work crafting a bespoke strategy that protects all aspects of your business, and enables continued growth.

step-3-execute
03

Let’s execute that plan together

We’ll work directly with you and your stakeholders to implement and manage your new strategy, helping you navigate any pitfalls along the way.

What are you waiting for?

Let's Talk!

Is your organization prepared for a crisis?

We take security seriously. It’s not enough to place guards on post and hope for the best. Managing threats like terrorism (both domestic and abroad), natural disasters, corporate espionage, climate change, and workplace violence in an increasingly competitive marketplace have become more complex than ever. Threat and vulnerability assessments are but one tool in a business leader's belt. You also need effective countermeasures and the correct security posture to prevent any scenario which may disrupt your operations. Because we must address facility and company security on a variety of levels, the most effective approach requires the nuanced analysis only Chesley Brown can provide.

While conducting risk assessments can be a cumbersome and time-consuming process, the benefits far outweigh the risks. Because of our global network of assets, our broad depth of experience, and a commitment to the truth, Chesley Brown is the only security company fully equipped to identify and prevent potential threats, customize action plans around your organization, recommend appropriate security measures, and implement and oversee those solutions. We're focused on security risk, so you can focus on your business. If you would like to learn more about our threat and vulnerability assessment process, our experts are standing by.

While conducting risk assessments can be a cumbersome and time-consuming process, the benefits far outweigh the risks. Because of our global network of assets, our broad depth of experience, and a commitment to the truth, Chesley Brown is the only security company fully equipped to identify and prevent potential threats, customize action plans around your organization, recommend appropriate security measures, and implement and oversee those solutions. We're focused on security risk, so you can focus on your business. If you would like to learn more about our threat and vulnerability assessment process, our experts are standing by.

security risk consulting at a class A office tower
Blog
Reasons Why You Should Hire an Outside Security Risk Consultant
The security services industry is one of the fastest growing industries in America today. With so many new entrants, technology developments, and emerging threats, it ...
Read More
preventing economic espionage, trade secret theft and intellectual property theft
Blog
The Ultimate Guide for Small Businesses to Combat Economic Espionage
For decades, the US has been a victim of economic espionage — a foe that is now costing American companies billions of dollars in lost ...
Read More
Protestors storming the captiol in an act of civil unrest, insurection
Blog
Preventing Civil Unrest
We’ve all recoiled in disbelief and horror as we watched scenes of violence stream across our TVs. The violent insurrection we saw in the U.S. ...
Read More
Vulnerability assessments and management in the new risk landscape. Threat assessment
Blog
What Achilles can Teach us About Threat Management
By: Dell Spry There are numerous similar, seemingly inconsequential, soft targets scattered across our country unprotected by a single surveillance camera or even a strand ...
Read More
The solarwinds supply chain hack represented by 6 locks, one of which is a different color
Blog
The SolarWinds Supply Chain Attack: What Businesses Need to Know
What is the SolarWinds Supply Chain Attack? SolarWinds, the Austin-based cybersecurity firm, found itself in the middle of a catastrophe due to internal security lapses. ...
Read More
officers overlooking the damaged caused by the christmas morning bombing in Nashville, Tennesseee
Blog
Lessons Businesses Must Learn from the Nashville Bombing
The sound of gunfire punctuated the peaceful hush of Christmas morning. According to one witness, “It sounded like an automatic weapon.” About 10 minutes later ...
Read More
Hallway camera in a school providing a safe and secure learning environment, How to optimize school safety for COVID-19
Blog
3 Simple Practices to Optimize School Safety During Covid-19
Maximizing safety for students and employees If you’re anything like me, keeping your family safe is your number one priority. During the Covid-19 pandemic, this ...
Read More
a puzzle with a misisng piece revealing a dollar as a symbol of business impact analysis
Blog
4 Crucial Things To Know About Business Impact Analysis
Risk is not optional. If you own a business, chances are, you will confront risks at some point. What’s more, as your business grows, potential ...
Read More
sign cautioning people to remain six feet apart at a shopping mall or retail space for COVID-19 precautions
Blog
2 Painless Ways to Transition Your Retail Business to Touchless Technology
Why your business should be transitioning to touchless tech right now As a business owner in the retail industry, adjusting to the Covid-19 pandemic is ...
Read More
Family and friends enjoying a carefree holiday meal because they know to destress during the holidays
Blog
3 Overlooked Tips to Destress During the Holidays
Bring home holiday gifts without the baggage It’s that time of the year. Some would say the most wonderful time. But for others, the lights ...
Read More
Blog
Top 5 Problems Facing the Retail Industry
And the best ways to solve them We’ve all heard the Black Friday stories of fist fights breaking out in aisles of the local big-box ...
Read More
family playing outside while traveling for the holidays
Blog
Holiday Safety Tips
3 practical ways to stay safe in 2020 We’ve all heard humorous holiday tales. They make for great entertainment around the table during a turkey ...
Read More
police prepare for election day civil unrest as a political protest moves through a downtown area during a moment of civil unres
Blog
Election Day: Planning for Civil Unrest
4 Guaranteed Ways to Prepare Your Business The 2020 presidential election is approaching and the possibility of election day civil unrest is very real, according ...
Read More
Lighthouse on a lonely dirt road preventing the threat of shipwrecks
Blog
The Transformational Power of Threat Assessments
Getting Started Threat is real; an opportunistic adversary waiting to strike.  Cyber crime is one of the most insidious threats facing businesses. As reported here, ...
Read More
small business team smiling after sucessfully navigating a crisis using their crisis management plan
Blog
3 Practical Strategies to Protect Your Small Business During Covid-19
October 15, 2020 / Justin Hayes Ensure the Future of Your Company Small to medium-sized enterprises (SMEs) comprise a massive portion of American industry. In ...
Read More
overhead view of business people working on a crisis management plan outside
Blog
The Anatomy of a Crisis Management Plan
4 key strategies to protect your business against risk By Justin Hayes No executive expects a crisis to strike. But every day organizations fall prey ...
Read More
Podcast
risk-takers #9. Joe Sheram – The Turnaround Guru
https://media.bcast.fm/682pl1p8.m4aBrent sits down with corporate turnaround expert Joe Sheram to discuss financial risk, corporate theft, the importance of cash, and some of the biggest challenges ...
Read More
Podcast
Podcast | Risk Takers Series #9. Joe Sheram – The Turnaround Guru
Brent sits down with corporate turnaround expert Joe Sheram to discuss financial risk, corporate theft, the importance of cash, and some of the biggest challenges ...
Read More
Podcast
Podcast | Risk Takers Series #08. The State of Security – SPECIAL EPISODE
2020 has been a year full of change. In this week's special episode Brent sits down with Vice Presidents Bryan Taylor, Josh Noland and Max ...
Read More
Podcast
risk-takers #08. The State of Security – SPECIAL EPISODE
https://media.bcast.fm/jwq0nyq8.m4a2020 has been a year full of change. In this week's special episode Brent sits down with Vice Presidents Bryan Taylor, Josh Noland and Max ...
Read More
Business COntinuity Plan Illustration
Blog
What is Business Continuity?
Before completely rewriting your Business Continuity Plan, it helps to understand the fundamentals of business continuity. I put together the following FAQ to give you ...
Read More
Podcast
Podcast | Risk Takers Series #07 Jack Barsky – Former KGB Spy
As part of our on going conversation around corporate espionage, we decided to sit down with a real KGB spy for some insider knowledge. In ...
Read More
Podcast
risk-takers #07 Jack Barsky – Former KGB Spy
https://media.bcast.fm/j8ym6q58.m4aAs part of our on going conversation around corporate espionage, we decided to sit down with a real KGB spy for some insider knowledge. In ...
Read More
Podcast
Podcast | Risk Takers Series #06. Human Trafficking with Bazzel Baz
Human trafficking touches nearly every city, county, state and locality in America. Yet law enforcement remains critically under prepared to handle this insidious business. Bazzel ...
Read More
Podcast
risk-takers #06. Human Trafficking with Bazzel Baz
https://media.bcast.fm/lwvmny48.m4aHuman trafficking touches nearly every city, county, state and locality in America. Yet law enforcement remains critically under prepared to handle this insidious business. Bazzel ...
Read More
Podcast
Podcast | Risk Takers Series #05 Corporate Counterespionage
Its not always the stuff of cold war spy novels but corporate or economic espionage continues to affect businesses all over the world both large ...
Read More
Podcast
risk-takers #05 Corporate Counterespionage
https://media.bcast.fm/5wljl47w.m4aIts not always the stuff of cold war spy novels but corporate or economic espionage continues to affect businesses all over the world both large ...
Read More
Podcast
Podcast | Risk Takers Series #04 Brad Orsini – Community-based Security
Visiting our places of worship shouldn't be dangerous. Unfortunately, faith-based organizations are facing the difficult challenge of how to protect their congregations from religion-motivated violence, ...
Read More
Podcast
risk-takers #04 Brad Orsini – Community-based Security
https://media.bcast.fm/z86p6l78.m4aVisiting our places of worship shouldn't be dangerous. Unfortunately, faith-based organizations are facing the difficult challenge of how to protect their congregations from religion-motivated violence, ...
Read More
Podcast
Podcast | Risk Takers Series #3 Surveillance Detection Routes (SDR)
Have you ever had a gut feeling you were being followed? You might not be so crazy after all. It's a frightening thought. You've spent ...
Read More
Podcast
risk-takers #3 Surveillance Detection Routes (SDR)
https://media.bcast.fm/xw7klzxw.mp3Have you ever had a gut feeling you were being followed? You might not be so crazy after all. It's a frightening thought. You've spent ...
Read More
Blog
How to Prepare for Economic Risk
Best Strategies for Building Resiliency How to position your business for uncertainty If there is one aspect of business that is certain, it's uncertainty. It ...
Read More
Podcast
Podcast | Risk Takers Series #2 Terry Fisher — Electronic Countermeasures
Have you ever stopped to ask yourself what it is about your business that is truly valuable? When you really think about it, any business ...
Read More
Podcast
risk-takers #2 Terry Fisher — Electronic Countermeasures
https://media.bcast.fm/08m9ljk8.mp3Have you ever stopped to ask yourself what it is about your business that is truly valuable? When you really think about it, any business ...
Read More
Blog
The Risk Takers Podcast Series Launches Today!
Chesley Brown Launches the Risk Takers Podcast Series Security Risk Management experts Chesley Brown Companies today announced the launch of "The Risk Takers Podcast Series" ...
Read More
Podcast
Podcast | Risk Takers Series #1 The Aldrich Ames Espionage Case
Dell Spry, a former FBI investigator and counterespionage expert, sits down to discuss the biggest case of insider theft in U.S. History: The Aldrich Ames ...
Read More
Podcast
risk-takers #1 The Aldrich Ames Espionage Case
https://media.bcast.fm/18pln668.mp3Dell Spry, a former FBI investigator and counterespionage expert, sits down to discuss the biggest case of insider theft in U.S. History: The Aldrich Ames ...
Read More
hand stopping dominos from falling, represent a crisis being prevents or stopped
Blog
10 Steps for Building a Crisis Management Communication Strategy
Small changes have a big impact. As a public health crisis of worldwide proportions comes into focus, it is imperative for individuals, organizations, and nations ...
Read More
Blog
7 Tips the Pros Won’t Tell You About Budgeting For Risk
Every business must create its own process for identifying, testing, and budgeting for risk. We studied the data and talked to several industry-leading CSOs to ...
Read More
Two people riding a moving sidewalk into a bright white void to represent transformation
Blog
The Future of Work
The Future of Work: Protecting Trade Secrets Written by: Dell Spry Many businesses, both large and small, are desperately seeking ways to keep their companies ...
Read More
Graphic of two people Looking at charts and graphs representing a risk assessment
Blog
Managing Risk During a Pandemic
5 Tips for Conducting Better Risk Assessments for a Pandemic In earlier sections, we discussed the need for a risk-based approach and outlined 6 New ...
Read More
6 new business risks crom Coronavirus
Blog
6 New Risks for Businesses post COVID-19
Coronavirus: 6 New Business Risks Your risk management strategy can and should play an important role in managing your business’s response to the coronavirus outbreak. ...
Read More
Crisis Management Process Framework diagram
Blog
5 Tips for Creating Better Crisis Management Plans
Like a lot of people, you may be wondering what comes next for your business or organization following the Coronavirus outbreak (or any other crisis ...
Read More
Blog
FREE DOWNLOAD Securing a New World: Security, COVID-19, and Boots on the Ground
SECURING A NEW WORLD Thank you for your interest In this free report we have outlined the most effective strategies for protecting your home, school, ...
Read More
Blog
When it Comes to Corporate Espionage, Harvard’s Dr. Lieber is Just the Tip of the Iceberg
When it Comes to Espionage Harvard's Dr. Lieber is Just the Tip of the Iceberg From Chesley Brown International By Dell Spry Renowned Harvard Professor ...
Read More
Blog
Chesley Brown Launches Initiative to Fight Human Trafficking
Chesley Brown Launches New Initiative to Fight Human Trafficking From The Chesley Brown Group Risk Management Chesley Brown, the security management experts, announced today a ...
Read More
Blog
Spotlight: Bryan Taylor Promoted to Vice President
Chesley Brown Spotlight: Bryan Taylor Promoted to Associate Vice President From Chesley Brown International Employee Spotlight Chesley Brown is excited to introduce our newest Associate ...
Read More
Blog
Spotlight: Christian Kalinski Promoted to Senior Director of Security
Chesley Brown Spotlight: Christian Kalinski Promoted to Senior Director of Security From Chesley Brown International Employee Spotlight We’re always looking to spotlight the amazing work ...
Read More
Blog
An Open Letter on 9/11
An Open Letter on Sep 11th from Managing Director Dell Spry Shared by Chesley Brown International By: Dell Spry They died that day. They woke ...
Read More
Blog
Chesley Brown Announces Counterespionage Unit
Chesley Brown Announces New Special Operations Unit to Combat the Global Rise in Corporate Espionage From Chesley Brown International Risk Management PROTECT YOUR COMPETITIVE ADVANTAGE ...
Read More
Blog
Account Protection with Password Manager
Account Protection with a Password Manager What good is a password if anyone can read it? From Chesley Brown International Risk Management Password managers are ...
Read More
Blog
Chesley Brown Announces Addition to Senior Team
Dell Spry Joins Chesley Brown Team To support the ongoing growth and demand Chesley Brown is pleased to announce Marvin O. “Dell” Spry has joined ...
Read More
Happy kids with rucksacks walking leaving school
Blog
Federal Commission on School Safety Releases Comprehensive Report
  Federal Commission on School Safety Comprehensive Report Released From Chesley Brown International Risk Management President’s Federal Commission on School Safety Releases Comprehensive Report After ...
Read More
Blog
Fighting Terrorism with Strong Private Sector Relationships
Fighting Terrorism with Strong Private Sector Relationships From Chesley Brown International Risk Management "Threat mitigation is a team effort; it’s this relationship and collaboration which ...
Read More
face recognition, automatic face recognition biometric identification; biometric authentication; identity verification
Blog
Facial Recognition: the First Catch
Facial Recognition Makes its Grand Entry The new technology, deployed in airports across the country, makes its first catch. From Chesley Brown International Risk Management ...
Read More
hands on a keyboard as if hacking into something
Blog
Are Employees an Unintentional Security Risk for Cyber Attacks?
Are Your Employees an Unintentional Security Risk for Cyber Attacks? In these times when malware is prevalent and easily disguised as email attachments or seemingly ...
Read More
Blog
DHS and Canada Team up for First Responders
DHS and Canada Team Up to Develop Resources for First Responders From Chesley Brown International Risk Management Artificial Intelligence Meets Boots on the Ground to ...
Read More
preventing economic espionage, trade secret theft and intellectual property theft
Blog
Supreme Court Decision Regarding the Privacy of Digital Data
Supreme Court Decision Personal Rights and the Expectation of Privacy in the Digital Age From Chesley Brown International Risk Management In Major Privacy Case, Court ...
Read More
Blog
The Evolution of School Security
Special E-Brief June 2018 In the current climate of school shootings, we have anguished over the potentials that may follow the ongoing rise in active ...
Read More
Blog
Threats Our Kids Face Online
Protecting Our Children Against Online Threats Teaching our kids to be wary onlineChesley Brown E-Brief May 2018 From Chesley Brown International Risk Management Cyber bullying ...
Read More
risk management
Blog
The Property Manager’s Guide to Risk Management
10 Steps for Developing An Emergency Response Plan Bomb Threats and Suspicious Packages From Chesley Brown International Risk Management The recent bombing incidents in and ...
Read More
first responder on the scene of a disaster
News
10 Steps for Developing An Emergency Response Plan
Bomb Threats and Suspicious Packages By: Chesley Brown International The recent bombing incidents in and around Austin, Texas serve as an unfortunate reminder that those ...
Read More