We combine experience with a structured qualitative methodology to assess security risks for computer networks, corporate buildings, industrial complexes, and critical infrastructure. Our team identifies threats, assets, and vulnerabilities as precursors to determining security risks. Our experts then formulate mitigation plans, in alignment with client risk tolerance and business operations.

Physical Security Risk Assessment

The Guidry Group Risk Assessment provides a systematic and reproducible means to assess security vulnerabilities, risks, and countermeasure benefits. Our assessment methodology stresses identification of threats, vulnerabilities, and security risk applicable to critical assets, information, and personnel. The Risk Assessment methodology employs site reviews and scenario based risk assessment. This methodology and derivatives thereof have been widely utilized across industry and government, with Guidry Expertise providing the differentiating value. Risk Assessment Key Elements:

• Assessment of asset vulnerability of assets (people, facilities, information)
• Assessment of risk to stated threat profile
• Recommend countermeasures that reduce vulnerability in alignment with client risk tolerance

The Guidry Group can tailor a Risk Assessment program that addresses physical security, cyber security, or both. Through additional dialog, general client threat tolerance, areas of concern and facility environment will be identified so that the most applicable team of experts can be identified to perform and support the assessment. The Risk Assessment focuses on and produces results for the following areas:

• Current security measures
• Relevant threats
• Vulnerability of critical assets
• Current security risk to assets and personnel
• Countermeasure recommendations

Additional services that can be provided following a successful Risk Assessment:

• Development of recommendation implementation action plans
• Policy and procedure development
• Security awareness training and security guard manual development
• Security infrastructure design, upgrade, and installation management

Experience is the key to success

Guidry has a wealth of experience in Risk Assessments across government and industry. Our staff incorporates personnel with Security Engineering, Military Special Operations, Infrastructure Technology Security, Security Force Operations, Executive Protection, Investigation, and Security Program Management expertise. The Guidry Group's staff has led over 50 physical and cyber risk assessments around the world within the last three years and participated in many others as subject matter experts. Some examples include:

• Corporate Headquarters
• Industrial Facilities
• National Memorials and Landmarks
• High-rise buildings
• Airports
• Marine Ports and Vessels
• Rail and Bus Transportation Facilities
• Banking and Financial Institutions
• Hospitals and Critical Healthcare Centers

Network Vulnerability Assessment

Specifically for network assessments, The Guidry Group provides a detailed view of our client's external and internal computer security. Network vulnerabilities related to architecture and connections with other systems are identified. External scans are conducted from a remote location, concentrating on the client's "permanent" connections to the Internet. Those internal and external scans provide the client with information concerning their potential vulnerabilities such as:

• Internet-based attacks
• Disgruntled Employees
• Corporate Espionage
• Blatant and Accidental Misuse

Building on information obtained through network scans, this testing program attempts to exploit known vulnerabilities to simulate the degree of success outside and inside individuals can achieve given existing security measures. These meticulous assessments and penetrations provide detailed information concerning the client's vulnerability to specific Internet-based attacks and outside threats. Information reported includes systems penetrated, what account/password combinations were broken, and ability to conduct second-level exploitation of compromised systems. Deliverables for this service include:

• Executive Summary
• Management Recommendations
• Technical Recommendations to Correct Exploited Vulnerabilities
• Other Supporting Documentation

About • Risk Assessment • Security • Telecom/Wireless • 
Computer Services • Tabletop Forum • Investigations • Continuity • Protection • Contact • Home