Physical Risk
Facilities, operational environments, and the physical estate: a peer domain, not a subordinate clause.
The badge cloned from a phished credential. The plant floor where operational technology meets an unlocked door. The threat that walks in rather than logs in. Physical risk is where the consequence chain becomes tangible, and most organizations govern it with less rigor than their firewalls.
Where the physical practice takes you
Each area can be engaged as an assessment, a strategy, a governance design, or a sustained program: scoped at a briefing and gated every interval.
Physical security assessment & program design
A structured read of the physical estate (access control, surveillance posture, layered defenses, and the operating discipline behind them) followed by a program engineered for the way your sites actually run.
OT exposure at the physical plant
Where operational technology meets the plant floor, cyber and physical stop being separate problems. We assess and govern the seam: controllers, sensors, physical access to the systems that move real things.
Site & distributed operations risk
Multiple sites, remote operations, and field environments multiply the surface. Governance that keeps standards uniform where the headquarters cannot see.
Workplace violence prevention & response
Prevention programs, behavioral escalation paths, and response planning that is rehearsed before it is needed, built by people who have managed real incidents, not tabletop hypotheticals.
Executive protection posture
A sober read of principal exposure and the protective posture it actually warrants, scaled to real risk rather than theater.
Crisis & continuity
Crisis management and continuity planning that assumes the plan will be executed by people under stress (because it will be). Decision rights, communications, and recovery sequenced in advance.
This is the domain where the badge was earned.
The firm's leadership carried physical security in the environments where it is least forgiving: the United States Marine Corps and the FBI, where protective operations, facility security, and crisis response are practiced disciplines rather than binders on a shelf.
That background is directly load-bearing here. The physical practice is advised by people who have stood post, run protective details, and answered for what happened on their watch.
Common questions
What does a physical security risk assessment cover?
A structured read of the physical estate: access control, surveillance posture, layered defenses, and the operating discipline behind them. It includes OT exposure at the plant floor, site and distributed-operations risk, executive protection posture, and workplace violence prevention, followed by a program engineered for the way your sites actually run.
How does physical risk connect to cyber risk?
Cyber and physical stop being separate problems wherever operational technology meets a plant floor, or where a cloned badge rides a phished credential into a facility. Apogee governs the convergence point, assessing controllers, sensors, and physical access to the systems that move real things, rather than treating each domain in isolation.
What credentials does Apogee bring to physical security?
The firm's leadership carried physical security in the environments where it is least forgiving: the United States Marine Corps and the FBI, where protective operations, facility security, and crisis response are practiced disciplines. The physical practice is advised by people who have stood post, run protective details, and answered for what happened on their watch.
Ready to take a unified view of enterprise risk?
Schedule a conversation with M.K. Palmore to explore how Apogee Global RMS can serve your organization.
Schedule a Consultation