"Good advice changes something. Great advice changes the right thing."
Monitoring, Evaluation, and Review
Professor Sele: A consulting engagement that delivers recommendations without measuring whether they were implemented — and whether they worked — has completed only half the job. This module covers the monitoring and evaluation discipline that turns consulting from advice into impact.
Section 1 — What Is Monitoring and Evaluation?
Monitoring is the continuous tracking of whether activities are being implemented as planned. Evaluation is the periodic assessment of whether those activities are producing the intended outcomes.
Together, M&E answers: Are we doing what we said we would do? (Monitoring) Is what we are doing making a difference? (Evaluation) M&E is not bureaucracy — it is the mechanism by which consulting value is demonstrated, underperforming interventions are identified, and successful approaches are scaled.
Section 2 — The M&E Framework
An M&E framework for a consulting engagement defines: Inputs — the resources invested (staff time, budget, equipment). Activities — the actions taken (training delivered, policies written, assessments conducted). Outputs — the direct products of the activities (number of staff trained, number of policies published). Outcomes — the changes produced by the outputs (improved guard performance, fewer incidents). Impact — the long-term effect on the client's security situation.
Most consulting engagements measure outputs well. Fewer measure outcomes. Almost none measure impact. The most valuable M&E goes beyond counting activities to assessing whether the situation actually improved.
Section 3 — Indicators
An indicator is a specific, measurable piece of evidence that shows whether an objective has been achieved. Good indicators are: Specific — measure exactly what matters. Measurable — can be quantified or clearly assessed as met/not met. Attributable — can be reasonably linked to the intervention being evaluated. Practical — can be collected with available resources.
Example: for the objective "Improve access control compliance at the main gate," an indicator might be: "Percentage of visitor entries with complete log entries (target: 95% within 30 days of policy implementation)."
Section 4 — After-Action Review in Consulting
At the end of every consulting engagement, the SafeHaven team conducts an internal AAR: What did we deliver against the agreed scope? What did we do well that we should repeat? What did we do poorly that we should change? What did we learn about the client, the sector, or the methodology that informs future engagements?
This internal review drives continuous improvement in SafeHaven's consulting practice — ensuring each engagement builds on the last.
- •Monitoring tracks implementation; evaluation assesses whether activities produce intended outcomes
- •The M&E chain: Inputs → Activities → Outputs → Outcomes → Impact — most engagements stop at outputs
- •Good indicators are specific, measurable, attributable, and practical
- •M&E is how consulting value is demonstrated — without it, impact cannot be proven or improved
- •Internal AAR at the end of every engagement drives continuous improvement in SafeHaven's consulting practice
"I returned to a client 12 months after delivering a security policy package. I asked to review the incident logs from before and after implementation. Incident rates were down 34%. Policy compliance (measured by audit) was at 89%. Guard training completion was at 100% for the first time in the organisation's history. None of that would have been visible without the M&E framework we built into the engagement. The client renewed our contract. The evidence made the case better than any proposal I could have written."
Monitoring and evaluation (M&E) in a security consulting context measures: