"Risk you haven't assessed is risk you've accepted by default."
Field Assessment Techniques
Professor Sele: An ESRA conducted from an office using only the client's documents is incomplete. The field assessment is where real risks are found — the drainage channel not on any plan, the door that should be locked but never is, the guard who has been skipping his patrol for months. This module teaches you to assess in the field.
Section 1 — Preparing for the Field Assessment
Before arriving on site: review all available documents (previous assessments, incident logs, site plans, post orders); prepare a structured checklist specific to the site type (office, warehouse, residential, event venue); brief the client on the assessment scope and what access is required; and confirm the assessment will include unannounced elements — some checks must be conducted without prior notice to get an accurate picture of actual (not performed) security.
Section 2 — Physical Inspection Checklist
A thorough field assessment physically checks the perimeter (fencing condition, gates, lighting, CCTV coverage, blind spots); entry points (access control effectiveness, visitor logging, vehicle checking); the interior (access to sensitive areas, lock quality, alarm coverage, fire safety equipment); guard posts (equipment present and functional, post orders displayed and current, log books maintained); CCTV (coverage mapped, recording verified, storage adequate, blind spots identified); and patrol routes (walked in full, checkpoints verified, timing validated).
Section 3 — Stakeholder Interviews
Interviews provide insight that physical inspection cannot. Client management — what are their primary concerns? What incidents have occurred but not been formally reported? Security supervisors — what are the recurring operational challenges? Where are the gaps? Guards — what do they actually observe on patrol? Are there patterns or individuals of concern? Other staff — have they noticed anything unusual? What are their security concerns?
Interviews must be conducted individually and confidentially — group interviews suppress honest answers, particularly about management and colleague behaviour.
Section 4 — Documenting Field Findings
All field observations must be documented in real time — not from memory after the visit. Photographs of vulnerabilities (with the client's permission), GPS co-ordinates or precise location references for physical findings, verbatim or accurate paraphrased notes from interviews (anonymised where necessary), and a time-stamped log of all areas inspected and tests conducted.
The field documentation is the evidence base for the ESRA report. If a finding is disputed later, the documentation must support the assessor's conclusion.
- •Field assessment must include unannounced elements to capture actual (not performed) security
- •Physical inspection covers perimeter, access control, interior, CCTV, guard posts, and patrol routes
- •Stakeholder interviews must be individual and confidential to obtain honest feedback
- •Document all findings in real time — photographs, GPS references, and time-stamped notes
- •Field documentation is the evidence base for every finding in the ESRA report
"I conducted an unannounced check of a night patrol at 02:30. The patrol log showed the checkpoint had been signed at 02:15 — 15 minutes earlier. I found the guard asleep in the guardroom. When I showed the site manager the log versus the CCTV footage, there was a 45-minute gap in the patrol record where nothing moved on any camera. That guard had been falsifying the patrol log for months. The client had assumed the patrols were happening because the log said so. Unannounced checks find the truth. Announced assessments find the performance."
When conducting a field assessment, the assessor should: