For Organisations
Run physical security
the way you run cyber.
Board reporting, a threat cadence, and an annual posture score, for the people who carry the accountability.
The standard
A security decision is defensible when the evidence behind it is legible, the reasoning is testable, and the record endures.
Cyber risk earned its place on the board agenda by building a rhythm: converged reporting, a standing item, clear ownership, and a maturity score the board can read. Protective security — the threats that arrive through the front door, the car park, the perimeter, and the people — can be run to the same standard. Most organisations have not yet done it.
An organisation working to it knows its threat environment before it is asked. It reports physical risk to the board on the same cadence as cyber. It assesses its posture every year against a consistent frame, and it records each decision with the evidence beside it.
Our work in this lane exists to put that in place and keep it current.
The standing relationship
What a well-run function has in place
Four components on the rhythm your governance calendar already runs. Together they keep the board's threat picture current and its decisions documented, year round.
Who works to it
Already in service
Every brief is written by a Core42 analyst and read by a principal before it leaves the firm. Codee Ludbey reviews the intelligence lane. The work runs on the same discipline as our published research, and it is already relied on in government.
In service
State-government engagement
Our standing threat intelligence supports a multi-year engagement with a state government agency, with reporting that is briefed upward, on the record.
Peer-reviewed process
A method that survives review
The analytical process behind the briefs is built on peer-reviewed foundations.
Underneath it all
The incident database
A detailed incident database sits under the judgement, so likelihood language means something and every assessment traces back to recorded events.
The briefing is the demonstration.
A 45-minute executive threat briefing, drawn from our published research and live intelligence pipeline. Request one; if the fit is right, we'll find the time.