Rethink Your Risk Assessment
Post-CFATS Security Needs

Rethink Your Risk Assessment: Post-CFATS Security Needs
In an era of growing threats and evolving vulnerabilities, a robust risk assessment isn’t just a compliance checkbox, it’s a business imperative. At Business Protection Specialists (BPS), we’ve spent more than three and a half decades helping organizations secure what matters most. From manufacturing plants and chemical facilities to schools and hospitals, we understand that no two facilities or their risks are the same.
The expiration of the CFATS (Chemical Facility Anti-Terrorism Standards) program has made this even more critical. With regulatory pressure receding but threats still very much present, the importance of reassessing your site’s physical security posture cannot be overstated. That’s where a comprehensive risk assessment comes in.
Whether your goal is to maintain compliance, protect personnel, or secure operational continuity, a strategic, independent risk assessment lays the groundwork for effective security planning and long-term peace of mind.
Speak to a physical security expert now
Why a Risk Assessment Is Non-Negotiable
Security is not static. Threats change. Facilities evolve. Communities grow. What worked five years ago may not be suitable today. In fact, we recommend that every organization conduct a thorough risk assessment at least once every five years and sooner if there have been significant changes in operations, staffing, or physical layout.
For facilities formerly governed by CFATS, the urgency is even greater. The expiration of the regulation doesn’t eliminate the risk. It only removes the compliance framework that once guided your response. Hazardous materials still pose an attractive target, and adversaries are increasingly opportunistic. A lapsed plan is a vulnerable one.
A physical security risk assessment protects and aligns your site with current threats, operational realities, and best practices in corporate security. It enables your leadership to make informed, data-backed decisions, using risk prioritization to drive investment where it matters most.
Learn more about the BPS approach to Security Risk Assessment
Understanding Our Approach to Risk Assessment
At BPS, we take a scenario-based, client-centered approach to every risk assessment. Our method is both structured and adaptable, designed to fit the unique needs of each facility while adhering to proven methodologies.
We typically begin with a comprehensive facility security risk assessment, which includes:
- Facility Characterization: Understanding the physical layout, operations, and context of your site
- Identification of Critical Assets: Pinpointing the people, property, systems, and processes most essential to your mission
- Threat Assessment: Evaluating potential threat actors, including internal, external, accidental, and intentional
- Vulnerability Analysis: Determining weak points across physical, procedural, and personnel dimensions
- Risk Classification: Applying a hybrid risk scoring model that incorporates probability, consequence, and preparedness
- Mitigation Strategy Development: Offering prioritized recommendations tailored to your operations and budget
- Security Program Assessment: Evaluating current policies, protocols, training, and emergency response readiness
The result is a clear and practical roadmap, designed to reduce the likelihood and impact of incidents before they occur.
Assess your security program now
Facility Security Risk Assessment: More Than Perimeter Checks
A facility security risk assessment isn’t just about checking cameras and doors. It’s about understanding how your facility functions, how people move, what assets are vulnerable, and what failure could look like.
Too often, organizations assume that existing systems like video surveillance or access control equals protection. But even the best tools can’t compensate for procedural gaps or outdated assumptions.
Our risk assessments go far beyond hardware. We consider everything from building codes and visitor management to staff awareness and response protocols. Because securing a facility is as much about culture and training as it is about equipment.
We also examine environmental and operational changes that may have introduced new vulnerabilities, such as nearby construction, changes in surrounding crime rates, or a recent expansion in production capacity.
Physical Security Risk Assessment: Protecting What Matters Most
When conducting a physical security risk assessment, our goal is simple: identify what needs protection, understand the threats against it, assess your current defenses, and offer recommendations that are realistic, scalable, and effective.
We break this down into key areas:
Access Control
Who can enter your facility, and where can they go once inside? We evaluate systems, policies, and human factors that govern access.
Intrusion Detection
Are you alerted when someone tries to gain unauthorized entry? We analyze the reliability and coverage of intrusion detection systems.
Video Surveillance
We assess your current video surveillance infrastructure to determine whether it’s providing actionable visibility or simply storing unusable footage.
Crisis Communication
Do you have a plan for rapid, effective communication during emergencies? We review your capabilities for internal alerts, stakeholder updates, and emergency response coordination.
Staff Preparedness
Are your personnel trained to respond to workplace violence, theft, or a security breach? Our assessments include a review of your training programs and emergency protocols.
Each of these areas feeds into a final risk assessment report, with actionable insights, scoring, and tiered recommendations that your team can use to plan budgets and timelines effectively.
From Data to Decision: Prioritizing Risk Mitigation
One of the biggest challenges organizations face is knowing where to start. A well-conducted risk assessment highlights vulnerabilities and ranks them.
At BPS, we use a proprietary scoring matrix to calculate risk levels by factoring in probability, consequence, and preparedness. An issue that might seem minor, like a broken fence or unsecured gate, could score high if it increases exposure to a high-value target or aligns with a recent pattern of intrusion attempts.
Our recommendations are always prioritized:
Priority 1: High-impact, low-cost mitigations that can be implemented quickly
Priority 2: Operational changes or policy adjustments with moderate costs
Priority 3: Capital improvements requiring long-term planning
This tiered approach allows you to make strategic decisions, balancing security gains with operational realities.
Security Program Assessment: The Overlooked Layer
Even the best physical measures won’t hold up if your broader security program assessment is out of date. That’s why we take a holistic look at your overall security culture, including:
- Roles and responsibilities
- Incident response protocols
- Contractor and vendor controls
- Regulatory compliance posture
- Training and drills
- Communication flow in emergencies
Often, weaknesses lie not in the physical structure but in the way people interact with it. For example, having a well-designed access control system is ineffective if employees routinely prop open doors. Our Security Risk Assessments uncover these gaps and provide you with guidance on how to close them.
Don’t wait for an incident to expose gaps in your security. Our vendor-neutral risk assessments deliver clear, actionable insights to help you prevent threats and protect your people, property, and operations.
See how our Security Risk Assessments work
Why Vendor-Neutral Risk Assessments Deliver Better Outcomes
BPS is proudly independent and vendor-neutral. That means we have no financial stake in recommending any specific product, installer, or service. Our only commitment is to your safety and operational continuity.
This independence allows us to:
- Evaluate technologies based on performance, not sales quotas
- Recommend only what you truly need
- Help you avoid overspending on ineffective or redundant systems
- Maintain objectivity when designing or auditing security solutions
We believe our role is not to sell, but to serve. That’s why we’ve earned the trust of clients across healthcare, manufacturing, education, government, and critical infrastructure sectors.
Risk Assessment Case Example: From Assumptions to Assurance
One of our manufacturing clients recently approached BPS following the sunset of CFATS. They had assumed their previous compliance meant their site was secure. However, our risk assessment uncovered several gaps:
- A gate left unmonitored during shift changes
- Emergency lockdown procedures known only to senior management
- An outdated badge system that no longer aligned with job functions
- A reliance on camera coverage in areas where response time was delayed
Within six weeks, we provided a prioritized action plan. By implementing just the top-tier recommendations, improved training, access controls, and revised shift procedures, the client saw measurable improvements in both security performance and employee confidence.
That’s the power of an independent, professional facility security risk assessment.
Why Business Protection Specialists?
With over 150 years of combined experience and a Net Promoter Score of 96, BPS is a trusted partner in proactive security. Our consultants have backgrounds in military, government, and private-sector security leadership, and we bring that expertise to every project.
We are not a product company. We are not a guarding agency. We are professional security consultants, dedicated to protecting people and premises through evidence-based risk management.
Whether you’re responding to a recent incident, looking ahead to the next audit, or simply want the peace of mind that your facility is secure, a BPS-led risk assessment is the best place to start.
The Best Time to Reassess Your Risk Is Now
Security is not about fear – it’s about foresight. A timely, expert-led risk assessment empowers your organization to face uncertainty with clarity, confidence, and control. Whether you’re navigating post-CFATS vulnerabilities or strengthening an existing program, BPS is here to help.
Don’t wait for an incident
When it comes to protecting people and property, there is no substitute for preparation.
Schedule a physical security risk assessment today.
