Elite Police Protection
← All articles Assessing Your Property Security Risk Level, Step by Step how-to

Assessing Your Property Security Risk Level, Step by Step

Last Updated: November 4, 2026

Quick Summary

A property security risk level is a ranked judgment of how likely harm is at a property and how severe it would be, built by surveying the site and scoring each risk. Walk the perimeter at different times, map every entry point, find blind spots, review access control, then score likelihood, impact and existing controls on a 1-to-5 scale.

  • Assess four areas: threats, vulnerabilities, assets and existing controls.
  • Walk the full perimeter at different times of day, since busy areas can empty at night.
  • Score likelihood and impact from 1 to 5, then multiply by a control factor.
  • Set High, Medium and Low bands in advance and apply them consistently.
  • Have someone who did not do the walkthrough review the scores before finalizing.

Table of Contents

Why Property Security Risk Assessment Matters and What It Covers

A property security risk level tells you how likely harm is, and how bad it would be. Most owners guess. A structured assessment replaces guesses with evidence.

SafeHome.org's 2026 home security report reports that 61% of households now have at least one camera, up from 52% in 2024. Cameras alone do not show whether a property is safe, though. You still need to know where the weak points are.

A complete assessment covers these areas:

  • Threats: what could realistically happen, such as theft, vandalism or unauthorized entry
  • Vulnerabilities: where the property is easiest to reach or harder to watch
  • Assets: what would hurt most to lose or damage
  • Existing controls: locks, lighting, cameras and procedures already in place

A risk assessment is a documented review of these four areas. If you want a guide to running one on your own, see How to Conduct a Personal Security Risk Assessment. Its goal is a short, ranked list of what to fix first.

Step 1: Survey the Property and Its Surroundings

Start outside. Walk the full perimeter at different times of day, because a parking lot that feels busy at noon can be empty at 2 a.m.

Note the following as you walk:

  • Lighting gaps in parking areas, alleys and back entrances
  • Fences, gates and shrubs that block sightlines
  • Nearby vacant buildings or properties with frequent foot traffic
  • Signs of past incidents, such as graffiti, broken glass or dumped trash

Write down what you see. Photos help, and a simple sketch of the property works too.

Security consultant with a clipboard assessing the security risk level of a commercial building exterior.
Security consultant with a clipboard assessing the security risk level of a commercial building exterior.

Step 2: Map Entry Points, Doors, Windows, and Locks

Entry points are the first thing an intruder checks. List every one: main doors, side doors, loading docks, ground-floor windows, roof access and utility openings.

For each entry point, record:

  • Lock type and condition
  • Whether the door frame and hinges are solid
  • Whether windows lock and are hard to pry open
  • Whether the entry is visible from the street or a neighbor's view

Look for doors that do not close fully, windows that are painted shut, and keys held by former tenants or staff. These small failures often matter more than any large one.

Step 3: Find Blind Spots and Review Access Control

Blind spots are areas no one can see, either in person or on camera. Check corners of buildings, rear stairwells, storage yards and the space under loading docks.

Then review access control:

  • Who holds keys, key cards or codes right now?
  • Are former employees and tenants removed from access lists?
  • How are visitors, contractors and deliveries checked in?
  • Is there a sign-in log, and does anyone review it?

Step 4: Score Each Risk With a Simple Rubric

A scoring rubric turns observations into a ranking you can defend to an owner, a board, or an insurer. The goal is not a precise number. The goal is a repeatable number, so two people walking the same property reach roughly the same conclusion and so this year's results can be compared with next year's.

Use three scales, each from 1 to 5. Write the anchors down before you start so scores do not drift between assessors.

Likelihood (how often the incident could realistically occur):

  • 1 = Rare: no history and no obvious pathway
  • 2 = Unlikely: possible but no supporting signs
  • 3 = Possible: some signs, such as repeated tampering or a known local pattern
  • 4 = Likely: recurring incidents or an easy, unmonitored pathway
  • 5 = Almost certain: active, repeated incidents at this property

Impact (how bad the outcome would be):

  • 1 = Minor: cosmetic damage or a small loss
  • 2 = Moderate: repair cost and brief disruption
  • 3 = Significant: meaningful financial loss or lost use of a space
  • 4 = Severe: major loss, injury risk, or a tenant or customer safety concern
  • 5 = Critical: serious injury, structural damage, or a shutdown of operations

Existing controls (how much protection is already in place):

  • 1 = Strong: layered controls that are tested and maintained
  • 2 = Good: controls in place with minor gaps
  • 3 = Partial: some controls, inconsistently applied
  • 4 = Weak: one control, easily defeated or unmonitored
  • 5 = None: no meaningful control

Now combine them. A transparent formula most practitioners find workable is:

Risk score = Likelihood × Impact × Control factor

where the control factor is 1.0 for strong controls, 1.25 for partial controls, and 1.5 for weak or absent controls. Multiplying by a control factor keeps the 1-to-5 anchors readable while still rewarding properties that have already invested in protection. If you prefer a simpler method, score likelihood and impact only and note the control status in a separate column.

Apply Now →

A sample matrix makes the output easier to read. List each risk as a row, with columns for likelihood, impact, control factor, total score, and band:

Risk Likelihood Impact Control factor Score Band
Unlit rear door, repeated attempted entry 4 4 1.25 20.0 High
Side gate propped open 4 4 1.25 20.0 High
Rear stairwell, no camera 3 3 1.25 11.3 Medium
Storage shed, weak lock 2 2 1.5 6.0 Low

Set bands in advance: 20 and above is High and gets action within days; 10 to 19.9 is Medium and gets action within the quarter; below 10 is Low and goes on a watch list. The exact cutoffs matter less than applying them consistently.

Watch out: scoring without written anchors invites grade inflation, because the person who owns the property tends to rate its controls better than an outside assessor would. Have someone who did not perform the walkthrough review the scores before you finalize them.

Keep the completed matrix with the assessment file. It becomes the baseline that shows whether your risk level is actually falling, and it gives a security provider or insurer a concrete starting point rather than a vague impression.

Physical Security Assessment Template and a Worked Example

Use a template so every assessment captures the same information. A basic physical security assessment checklist includes:

  • Property name, address and assessment date
  • Surroundings and nearby risk factors noted
  • Every entry point listed with lock and condition
  • Blind spots identified
  • Access control reviewed
  • Each risk scored for likelihood and impact
  • Fixes ranked by total score
  • Owner and deadline assigned to each fix

Worked example: A 40-unit apartment building has an unlit side gate that residents report as often propped open. Likelihood is 4, impact is 4, total 16. A rear stairwell with no camera is likelihood 3, impact 3, total 9. The side gate gets fixed first, with added lighting and a self-closing latch, then the stairwell gets a camera.

Prioritizing Fixes, Costs, and Emergency Readiness

Rank fixes by score first, then by cost, then by how quickly the fix can be completed. A high-scoring risk with a cheap, fast fix should almost always go first, because it removes the most exposure per dollar spent.

A phased plan keeps the work realistic. Most practitioners find three phases workable:

Phase 1, Low-cost, same-week fixes:

  • Replace or rekey locks and retrieve keys from former tenants or staff
  • Remove former employees and tenants from access lists and change shared codes
  • Add motion-activated lighting at dark doors, gates, and parking edges
  • Trim shrubs and clear sightlines that hide doors or windows
  • Repair doors that do not latch fully and windows that do not lock
  • Start or reinstate a visitor sign-in log and assign someone to review it

Phase 2, Moderate investments (weeks to a couple of months):

  • Add cameras to blind spots identified in Step 3, prioritizing entries and stairwells
  • Install self-closing and self-latching hardware on gates and side doors
  • Add bollards, reinforced strike plates, or security film where forced entry is likely
  • Formalize key control with a sign-out log and numbered keys

Phase 3, Larger capital projects (budget cycle):

  • Perimeter fencing or gate upgrades
  • Access control systems with audit trails
  • Professional monitoring or guard coverage for high-risk hours

Costs vary widely by property size, equipment, and whether you hire outside help, so get at least two written quotes for anything in Phase 2 or 3 and compare scope, not just price. A cheap camera package that no one monitors may score worse on controls than a smaller, well-placed set. For guidance on what a security provider should carry in coverage, see our article on Liability Insurance for Security Services: A 2026 Guide.

Emergency readiness belongs in the same plan, because a fix no one knows how to use does not reduce risk. Write down and post:

  • Who to call, in order, for an alarm, an intrusion, or an injury
  • Where keys and access cards are kept and who holds spares
  • How staff or residents should respond to an alarm, including whether to confront or evacuate
  • Where occupants gather after an evacuation and who accounts for them
  • How incidents are reported, to whom, and where the record is kept

Run a short drill or tabletop walkthrough at least once a year, and update the plan after any incident or major change. People and procedures are controls just like locks and cameras, and they are usually the cheapest ones to improve.

If your assessment shows you need added protection, see what an armed security guard hiring process involves before you decide.

Schedule Your Next Assessment With Elite Police Protection

Assess your property at least once a year, and again after any incident or major change. Repeat the same rubric each time so you can see whether your risk level is falling.

Elite Police Protection provides uniformed guards, investigations and K9 services for property owners who want a professional review. You can get a professional security guard quote for your property, then compare results against the rubric above. Apply Now to start the conversation.

Frequently Asked Questions

What are the five risk rating levels for property security?

A common approach uses a 5x5 risk matrix, which scores likelihood and impact on five-point scales and multiplies them to place each risk into a level such as low, moderate, elevated, high, or critical. This structure matches the approach described in current physical security best practices that align with NIST and ASIS guidance. Using the same scale every time makes results comparable across buildings and across reviews, so you can see whether a property's risk is rising or falling over time.

What are the five steps of a security risk assessment?

A practical sequence is to survey the property and its surroundings, identify assets and likely threats, map vulnerabilities such as entry points and coverage gaps, score each risk using a consistent rubric, and then prioritize and document mitigation measures. Each step feeds the next, so the findings from the survey determine which threats you score. Repeat the process after any major change to the building, tenancy, or local incident patterns.

How often should a property security risk assessment be updated?

Review the assessment at least once a year and after any significant event, such as a break-in, a change in tenants or operations, new construction nearby, or a shift in local incident trends. A short re-score of the highest-risk items can be done quarterly. Keep dated records so you can show what changed and which fixes were completed.

What should a physical security assessment checklist include?

A useful checklist covers the property perimeter and lighting, all doors and windows with their locks and barriers, camera coverage and blind spots, access control for staff and visitors, the location of valuable assets and sensitive areas, emergency procedures, and incident history. Pricing for professional assessments depends on property size, complexity, and scope, so request a quote from Elite Police Protection on its website for current figures.

GoogleAdd elitepoliceprotection.com as a preferred source on Google →