Regulatory Alignment
- NERC CIP-014 physical security
- Bank Protection Act
- IRS-132 & Interagency Security Committee (ISC)
- Joint Commission (healthcare)
- TSA Security Directives (transportation)
- OSHA workplace violence guidance
Pragmatic, standards aligned physical security consulting for campuses, critical facilities, and corporate environments.
At every Big Four firm we came from, physical security assessments produced the same output: a narrative report with general recommendations that sat on a shelf. No scores. No benchmarks. No way to compare one facility to another. Nevermore's proprietary physical risk scoring methodology was built to fix that, and it now anchors every security risk engagement we deliver.
Ten weighted domains are assessed: perimeter, access control, surveillance, response force, hardening, cyber-physical integration, life safety, insider threat, supply chain, and governance. Controls are scored on effectiveness and maturity. Residual risk is calculated per domain and per facility, and results are benchmarked across the portfolio.
Six-phase delivery: scoping, onsite assessment, stakeholder interviews, heat map development, findings and recommendations, executive briefing. Tabletop exercises stress-test the findings before the final report.
A Threat, Vulnerability, and Risk Assessment evaluates credible threats, exposure, and impact across your people, sites, and processes. The output prioritizes controls and investments to reduce residual risk.
Typical single-site engagements run 2-4 weeks from kickoff to report; multi-site programs scale with a phased schedule and standardized scoring.
Big Four physical security assessments typically produce a narrative report. Ours produces a quantified, decomposable score grounded in a ten-domain methodology - a number a board, regulator, or insurer can cite. We also embed tabletop exercises in every engagement to stress-test findings before delivery.
Nevermore partners and principals. The partner who scopes the engagement is the partner delivering it. No junior staff, no team rotations, no subcontracted assessors.
Speak with a senior advisor about the right assessment scope for your environment.
Request a Consultation