Does your security consultant or internal security staff assess both physical and operational aspects of the security program? We often review prior assessments that focus solely on one or the other, usually the physical side only, but less frequently do consultants or security staff review both.
A physical security assessment typically includes a review of physical security measures (e.g. perimeter barriers, access control, fencing, etc), electronic security systems (e.g. access control, cameras, alarms, etc) and exterior lighting. An operational security assessment, on the other hand, focuses on policies, processes, training, written and unwritten protocols and on personnel.
Most security failures occur on the operational side. As such, operational security aspects should be included in a comprehensive security assessment.