Search hans.study
Indexed across articles, news, KB updates, knowledge base, books, learning, and tools. Press Esc to close.
// PHYSICAL SECURITY DESIGN AND ASSESSMENT · HANS STUDY · ONTARIO, CANADA
Independent design and gap assessment for access control, CCTV, and integrated physical security systems. Project history across airports, government facilities, law enforcement buildings, transit infrastructure, and enterprise campuses across Canada and the US.
Independent physical security design means the recommendation is not shaped by what the integrator distributes, what the vendor is pushing this quarter, or what generates the best margin on a particular product. The design reflects the security requirements of the facility. That is the only thing it reflects.
An independent assessment tells you what your current system actually provides, not what the integrator's commissioning report says it provides. For organizations that inherited a physical security system, or that have not had a third-party review in several years, those are often different things.
I have designed and assessed physical security systems at airports, government facilities, law enforcement buildings, transit infrastructure, and enterprise campuses across Canada and the US. The advisory draws on direct platform experience with Genetec Security Center, C-CURE 9000, Milestone XProtect, Avigilon, Axis, and Bosch.
What exists, how it is configured, whether it has been maintained, and whether it meets the security requirements of the facility today. Compares the current state against a defined baseline and produces a prioritized remediation plan that is not a product replacement catalog.
Physical security in regulated environments including federal facilities, airports, and law enforcement buildings needs to satisfy specific standards for access control, surveillance, and evidence handling. NERC CIP physical access controls, CMMC physical protection requirements, and government facility standards.
Coverage verification, configuration review, integration testing between access control and video, and retention verification. Provides a documented technical baseline and a specific remediation list.
Translation of the actual threat model for the facility into design specifications integrators can build to. Skips the vendor catalog and works from the security requirement.
Review of the integrator's design before it goes to construction. Catches scope gaps, undersized infrastructure, and misaligned specifications before they become installed facts.
For organizations taking over a facility without reliable documentation of what is installed. Inventory, condition assessment, configuration audit, and a defensible baseline going forward.
Vendor-agnostic platform advisory across the major VMS and access control families.
Integrated facility systems advisory and owner's representative services across multiple disciplines.
Physical security for OT facilities, NERC CIP physical access controls, substations and unmanned sites.
Genetec-specific architecture, sizing, federation, and post-deployment troubleshooting.
Direct hands-on experience with Genetec Security Center, C-CURE 9000, Milestone XProtect, Avigilon Control Center, Axis cameras and controllers, and Bosch. Advisory and assessment engagements draw on direct platform experience. No margin on what is specified. No revenue from platform selection.
Before a technology refresh or significant capital investment, to understand what exists and what actually needs to change. After a security incident or near-miss. As part of a compliance review. When an organization has acquired a facility and does not have reliable documentation of what is installed. All four are good reasons to reach out.
Based in Ontario. Vendor-agnostic physical security design and assessment across Canada and the US. Project history covers airports, transit facilities, law enforcement buildings, government campuses, and enterprise environments. No equipment sales, no integrator relationships.
Pre-design assessment, design review, owner's representative engagement during deployment, and post-deployment audit are all available as discrete engagements, each scoped and quoted on its own. The earliest point of engagement is also the highest-impact point.
Two tools run by default to help me understand how the site is used. You can turn either off at any time. Cloudflare's server-side analytics is always on and never sees your identity.