After the Security Assessment: Turning Recommendations Into Results

By Alicia M. Alfani | Founder & CEO, Greyhaven Advisory

The physical security assessment is complete. Leadership has reviewed the findings. Recommendations have been delivered.

Now comes a different challenge: putting them into practice.

A recommendation may call for improved access control, stronger visitor procedures, additional guard coverage, or more consistent incident reporting. Each can be valuable. Each also creates work that extends beyond approving a budget or selecting a provider.

Someone has to guide that work through the organization and make sure the resulting changes hold up in daily operations.

Implementation Requires Business Decisions

Consider a recommendation to strengthen access control across several facilities.

An integrator can design and install the solution.

Within the organization, leaders still need to establish how access will be approved, how exceptions will be handled, and how responsibilities will carry across facilities, HR, IT, and security.

Those decisions shape how effectively the investment operates after installation.

The same applies to guard services. A provider supplies personnel, but the client still needs clear operating expectations, escalation procedures, internal contacts, and a useful way to evaluate performance.

Physical security program implementation brings these business responsibilities together.

The Client’s Role Matters

Before founding Greyhaven Advisory, I managed corporate physical security from inside a Fortune 500 organization.

I was the client: setting priorities, managing providers, making investment decisions, and working across internal teams to move initiatives forward.

That experience taught me to look beyond the recommendation itself.

A proposed improvement might be sound, yet implementing it could involve competing priorities, limited internal capacity, several departments, and different operating conditions across locations.

Progress depended on understanding those realities and giving the work a clear owner.

For organizations without dedicated security leadership, these responsibilities can fall to people who already have demanding roles elsewhere in the business.

Connecting Specialist Expertise

Assessors, integrators, guard companies, and other security specialists bring valuable expertise.

Their work becomes more effective when it connects to a coordinated program inside the client’s organization.

That connection requires leadership attention to priorities, responsibilities, operating expectations, and follow-through.

It also requires continuity. Once a project is complete, the organization needs to maintain the procedures, review performance, and adapt as facilities, personnel, and business needs change.

This is where program governance and implementation support contribute lasting value.

Plan for the Work After the Report

When commissioning an assessment or approving a security investment, consider the internal capacity required to carry it forward.

W

ho will coordinate implementation? Who has the authority to resolve competing priorities? Who will oversee the program once the initial project ends?

Addressing that responsibility early gives recommendations a clearer path into practice.

At Greyhaven Advisory, we help organizations build, implement, and govern physical security programs.

We work alongside corporate leaders and the security specialists supporting them to connect recommendations and investments with practical execution.

Have assessment findings or a security initiative ready to move forward? Schedule a conversation with Greyhaven Advisory to discuss the support your organization needs.