← All services

Security Design & Auditing

A risk assessment says what should be installed. We check what actually was, against the specification and the invoices.

Overview

Most security advice stops at the assessment. The expensive problems start after it: systems specified one way, installed another and invoiced as a third. MCMS designs physical security from the threat up, then audits what was built against what was specified and paid for, with the evidence attached to every finding.

The evidence
0
Buildings governed across 64 countries

The operating model we sit inside every week for one of the world's largest technology companies, not a borrowed reference.

Independent advice is the start

Independent of every vendor. Every finding traced to the document it came from.

No supplier agreements, no commissions, nothing to sell you afterwards. That much should be standard. What we add is proof: every recommendation arrives with the contract clause, invoice line or site record behind it, so you can act on it or hand it to an auditor without taking our word for anything.

No commercial ties to any installer, integrator or manufacturer
Every finding evidenced and scored, never a matter of opinion
We will recommend walking away from a site, and we have
What we do

Threat and Vulnerability Assessment

We assess the site against the threat it actually faces, score each gap by severity, and tell you plainly when a site isn't worth the risk.

Physical Security Design

Layered barriers, access control, CCTV and procedures, designed so every element can later be checked against the specification.

Security Modernisation

We check legacy systems against current standards and set out what to replace first, so upgrades fix real gaps rather than follow a vendor's roadmap.

CPTED (Crime Prevention Through Environmental Design)

We review layout, sightlines, lighting and access against CPTED principles, and record exactly where the environment works against you.

Installation Monitoring

We check work on site against the design as it goes in, so defects are caught before sign-off rather than after the invoice is paid.

Site Auditing

Independent audits of installed systems against the specification and the invoices, with an evidence file for every finding.

Why MCMS

We examine the site against the standard, not against the vendor's description of the site. Findings come with the evidence attached, scored by severity, in a form you can act on or hand to an auditor. That includes the findings nobody wants: we have recommended against buildings that had already cleared the commercial process. MCMS was trusted to design and manage physical security across 102 buildings in 64 countries.

Advice or proof

A typical advisor tells you what should happen. We show you what did.

A typical security advisorMCMS
ScopeSecurity advice on its ownSecurity, cost, vendors, PMO and training governed as one layer
EvidenceAssessments and recommendationsWhat was specified, built and invoiced, traced back to source
NumbersA promise of value for moneyOver $10.6M identified, £750k recovered in ten audits, a 10% markup found to be 300%
ReachOne country102 buildings in 64 countries, teams across the US, APAC and Europe
What lands with youA reportRegisters, reconciliations, dashboards and audit files your team keeps