Assess before you buy

A threat and risk assessment establishes which threats are credible, how exposed the people, places and information that matter actually are, and which controls genuinely reduce the risk. It is the foundation for every other security decision: guarding, cameras, access control, protection and monitoring should follow the assessment, not precede it.

Forged-CS reviews the operating environment, people, routines, sites, information and technology that shape exposure, and tests current controls against credible threats rather than a generic checklist. The result is a defensible order of work: what to correct now, what to monitor and what does not justify additional cost.

Threat and risk assessment or corporate threat assessment?

The two are related but answer different questions.

Threat and risk assessment (this page) looks across the whole picture: an organization, a residence or estate, a site, a leadership team or a travel program. It suits a new site, a change in visibility, a security program that needs proof, or spending that needs a client-owned standard.
Corporate threat assessment examines a specific concern about people and behaviour: concerning communications, harassment, unwanted attention or an insider issue.

If you are unsure which applies, start with an intake; we will recommend the narrower or broader scope.

What a threat assessment covers

Threat and operating context

Credible threat actors, past incidents, visibility, surrounding conditions and foreseeable change, informed by protective intelligence and OSINT.

Site, residence and access vulnerabilities

Perimeter, entry, circulation, lighting, surveillance, key assets and response constraints, at corporate facilities, private residences and event venues.

People, process and information

Roles, routines, reporting, escalation, vendors, systems and the gaps between them, including how sensitive information is handled and who could collect it.

Prioritized recommendations

Immediate actions, staged improvements, ownership, evaluation criteria and residual risk, written so that leadership, family offices and providers can act on them.

How the assessment works

Define the decision, assets, stakeholders and operating constraints.
Observe the environment, evidence, controls and real working practices.
Test likelihood, consequence, control effectiveness and critical gaps.
Prioritize a practical roadmap with clear ownership and next actions.

What you receive

A written assessment agreed in scope before work begins: the credible threats, the exposures that matter, how current controls perform and a prioritized plan. Where protection is warranted, findings carry straight into executive protection services; where the concern is espionage or information leakage, see what counterintelligence is and why Canadian firms cannot ignore it.

An assessment cannot predict every action or eliminate every risk. It replaces assumption with evidence and gives you a defensible basis for the decisions that follow.

Where we work

Forged-CS conducts threat and risk assessments across Canada, with international reach by scoped engagement, for organizations, family offices and private clients.

Threat and risk assessment, before you spend on security.