Home / Services / Threat, Vulnerability and Risk Assessment

Threat, Vulnerability and Risk Assessment

We identify what could happen at a site, how likely it is and how bad it would be. Then we rank the measures that reduce the most risk for the money, from operational changes to engineered protection.

Scope of work

What PNH Does

Threat characterization

Explosive, fragment, incendiary, vehicle, unmanned aircraft and armed attack threats, defined for the site and its use.

Vulnerability review

Site survey of approaches, standoff, envelope, access control and the people and operations at risk.

Risk ranking

Each threat graded on likelihood and consequence, with the main risk drivers named.

Mitigation options

Measures ranked by risk reduction and cost, from operational changes to engineered protection.

Crowded places

Retail centers, stadiums, plazas, events, hospitality, campuses and transit.

Portfolio screening

Many sites graded on one scale with CORDON, so budgets go where risk is highest.

Likelihood and consequence, before and after measures
Illustrative likelihood and consequence risk matrix showing four risk drivers moving from inherent to residual risk after measures Almost certain Likely Possible Unlikely Rare Minor Moderate Serious Major Severe CONSEQUENCE LIKELIHOOD 1 1 2 2 3 3 4 4 ILLUSTRATIVE RISK DRIVERS 1 Vehicle ramming into the entrance plaza 2 Vehicle-borne explosive at the curb 3 Unscreened queue outside the entry 4 Drone over exposed rooftop plant KEY Inherent risk Residual risk after measures Risk reduced by measures Low Medium High Critical Illustrative. Qualitative scale; the criteria are agreed for each assessment.
Each risk driver is graded on likelihood and consequence, then re-graded with the recommended measures in place.
Vulnerability markup on a site plan
Illustrative vulnerability markup on a generic site plan: approaches, curbside parking, queue, loading dock and rooftop plant 1 2 3 4 5 VULNERABILITY MARKUP 1 Street aligned with the entrance gives a long straight run into the plaza 2 Curbside parking sits close to the glazed lobby 3 Queue forms outside the screening point 4 Service gate left open during deliveries 5 Rooftop plant exposed to a drone from above Credible threat path Existing planter Protected building Generic plan. Not to scale.
A vulnerability review marks every weak point a site walk reveals, from approach routes to rooftop plant.
From every threat to a plan the board can act on
From every threat to a ranked mitigation plan: the five stages of a threat, vulnerability and risk assessment 01 All threats Explosive, fragment, incendiary, vehicle, drone and armed attack 02 Credible threats Defined for this site, its use and its people 03 Vulnerabilities Approaches, standoff, envelope, access control and operations 04 Ranked risks Likelihood and consequence, with the main drivers named 05 Mitigation plan Measures ranked by risk reduced per dollar MANY POSSIBLE THREATS IN A PLAN THE BOARD CAN ACT ON Illustrative process. Each assessment is scoped to the site and the governing criteria.
Threats are narrowed to the credible, matched to vulnerabilities, ranked by risk and answered with measures ranked by risk reduced per dollar.

Independent and Engineer-Led

PNH does not make, sell or install protective products. Analysis is performed in house with PNH's own tools and issued under the review of PNH's Chief Technical Officer. Every assumption is documented and traceable to the governing criteria.

Engineer-led site review
Overhead view of an engineer's hands marking up a printed generic site plan with a pencil and an engineer's scale

Threat, Vulnerability and Risk Assessment: Common Questions

What is the difference between a threat assessment and a vulnerability assessment?

A threat assessment defines what could realistically be used against a site: vehicles, explosives, drones or armed attack. A vulnerability assessment looks at how the site, its approaches and its operations would hold up against those threats. Risk combines both with the consequence of a successful attack.

How long does a risk assessment take?

Most single-site assessments are scoped as a fixed-fee engagement with the schedule agreed in the proposal. PNH sends a proposal within five business days of the first call.

Do you assess crowded places such as stadiums, malls and hotels?

Yes. Crowded places are a core focus. PNH grades them with CORDON across nine attack modes and ranks the measures that improve the grade the most.

Discuss Your Threat, Vulnerability and Risk Assessment Project

Send us the site and the deadline. A short note on the site, what concerns you and when the tender or decision is due is enough to start. We reply within one business day.

  • The siteAn address, a site plan or a few photos.
  • The concernThe threat question, an incident or a client requirement.
  • The criteriaAny standard or client specification that applies.
  • The dateWhen the tender, review or decision is due.

Email [email protected] or call +1-818-253-9557

Thank you. PNH will reply within one business day.