Soft target threat analysis
Audits for companies
Security audit of the company and workplace
We will assess how the campus and employees are prepared for crisis situation. Prověříme perimetr, recepci, evakuaci i návaznost na IT a slabá místa převedeme do measure.
An audit should end with a decision, not a document in a drawer
First, we show the management where the risk arises, what would have the biggest impact and what makes sense to pay first.
The audit looks at the object, people, documentation and crisis mode at once. The director, mayor, company management and operations manager then work with the output.
Object
entrances, routes, zones and points of first contact
Documentation
crisis plan, GDPR, camera mode and responsibilities
Risk
probability, impact, priority and budget of measures
Map of weak points
First, we will go through the places where the risk arises. Only then do we write recommendations.
What is most at risk?
What to fix first
What to defend with the budget
1-3 days
On-site visit
20-50 pages
Structured output
5 areas
Perimeter · People · IT · Crisis · Operations
100 %
Confidentiality (NDA)
We audit where error is not permissible
We audit using the same methodology public institution, company headquarters, retail and production premises.
Workplace audit and staff training
Safety assessment of operation
Normal operation determines the safety of the company
Practical impact
Reception, entrances, parking and people must work as one mode.
Workplace audit will assess physical security, reception, visitor regime, evacuation and crisis management. We don't just monitor the building, but also how people actually move in it.
- 01
Headquarters and HQ
Corporation: Reception, visitor areas, management, access.
- 02
Stores and OC
Retail: Attendance, de-escalation, evacuation, security.
- 03
Hotels, gastronomy, events
Hospitality: Guests, staff, events, mass incident.
- 04
Production premises
Industry: Perimeter, inputs, operation, continuity to OT/SCADA.
Audit, training and crisis communication from one team
The audit will propose a building regime. It is followed by the training of people and crisis communication leadership.
01
Auditors from URNA, SOG and the 601st Special Forces Group
We assess workplace weaknesses through the eyes of an attacker, not according to a checklist.
02
Accreditation MV ČR for the protection of soft targets
We work according to ČSN 73 4400 and MV ČR methodology for the protection of soft targets.
03
References where error is not allowed
Czech Radio, National Theatre, Ombudsman, Academy of Sciences of the Czech Republic.
04
Audit and follow-up training from one team
We will translate the recommendations from the audit into reception, security and management training.
What does a workplace audit cover?
Perimeter and entry control
Who and where enters the premises and building
Reception and visiting regime
The first point of contact and its weaknesses
Cameras, EMS and access control
Electronic protection and its coverage
Evacuation and escape routes
Routes, collection points, coordination with IZS
Employee readiness
De-escalation, lockdown, crisis communication
Crisis management and continuity
Mass incident and traffic recovery
Continuity with IT / OT
Physical and cyber security together
Documentation and annual review
Comparison with ČSN 73 4400 and MV ČR methodology
How the audit takes place
- 01
Input risk analysis
We review safety documentation, emergency plans, previous incidents and insurance company requirements. We are talking to management and the security manager.
- 02
Physical assessment
We will check the perimeter, entrances, reception, CCTV, access control, parking, collection points and evacuation routes. We follow the ČSN 73 4400 policy.
- 03
People and procedures
We will verify the readiness of security, reception, selected employees and management. We will test de-escalation and crisis communication in a model situation.
- 04
Output for management
You will receive a structured audit with prioritized recommendations, a cost estimate and a follow-up training plan. You will use the output for risk management and for the insurance company.
Workplace audit, shot by shot
This is what a tour of operations looks like: perimeter, reception, access systems and evacuation routes.
Frequently asked questions
What is a company security audit and what do we get as an output?
The company's security audit is an independent assessment of the physical security of the workplace. It will assess the perimeter, entrances, reception, cameras, evacuation routes and people's reactions and show how the workplace is prepared for a crisis situation. The output is a structured document (usually 20-50 pages) with recommendations sorted by priority, a cost estimate and a follow-up training plan. We are based on the ČSN 73 4400 standard and the MV ČR methodology for the protection of soft targets.
Who is the workplace audit intended for?
For employers and company management in various fields: corporate headquarters, retail and business centers, hotels, gastro and event facilities as well as production and industrial premises. It is usually ordered by a security manager, operations director or executive who needs a documented risk assessment for management and the insurance company.
How much does a company security audit cost?
We determine the price according to the scope: the number of locations, the size of the area and the depth of the assessment. It can be a short inspection of one object or a detailed audit of several operations. After a non-binding inquiry, we will send you a scope and price proposal under NDA.
How long does the audit take?
The on-site visit usually takes 1-3 days depending on the number and size of the objects. We usually process the written output within 10 working days of the last visit.
Is a company security audit mandatory?
There is no comprehensive statutory audit obligation for ordinary companies. However, obligations arise from health and safety, fire protection and, for selected operations, from the protection of soft targets or cyber security (NIS2 / NÚKIB). The audit is mainly used for prevention: it reduces the risk of an incident and gives the management and the insurance company a basis for decisions.
Who conducts the audit and what are their qualifications?
The audit is led by former members of the URNA Police of the Czech Republic, the SOG of the Military Police and the 601st Special Forces Group with experience from foreign missions. GBH Academy is an educational institution with MV ČR (AK/I-48/2025) accreditation for the protection of soft targets. References include Czech Radio, the National Theatre, the Public Defender of Rights and the Academy of Sciences of the Czech Republic.
Does the audit follow up employee training?
Yes, we recommend it. An audit will find weak points. Follow-up reception and security training, de-escalation training and crisis communication for management will then prepare people to know what to do in a crisis situation.
What next
An audit will find weaknesses. Follow-up training prepares people
Training for reception, security and management will be directly linked to findings from the audit.
Related audits and training
Physical security audit for your business
Write the field, the number of locations and what you want to solve first. We will send you the scope and price under NDA.
- Dlouhá 730/35, 110 00 Prague 1
- info@gbhdefence.com
- +420 252 548 480