Independent Physical Security Audits
Pegasus Ops provides independent physical security audits in London, across the UK and internationally for private residences, estates, family offices and corporate premises. We review how people, procedures and protective systems work together against an agreed brief.
The audit combines a review of existing security documentation and procedures with inspection of physical systems and relevant site records. Findings distinguish the controls examined, the evidence available and any limits to the review.
You receive prioritised recommendations to help decide what needs immediate attention and what can be planned. Findings can also inform a subsequent security risk and threat assessment.
For private clients, the scope can connect with residential security arrangements and the responsibilities of a family office, while respecting household privacy and daily routines.
To arrange an audit, tell us the property or organisation involved, its general location, why a review is needed and any deadline. We agree a written scope, access requirements, deliverables, fees and reporting timetable before work begins.
Assessing Compliance with Security Standards and Regulatory Requirements
Before the audit, we agree which requirements and assessment criteria apply to your site and the purpose of the review. These may include internal policies, contractual obligations and relevant parts of recognised security standards or risk-management frameworks.
Any assessment against a named standard must be expressly included in the scope. A security audit does not automatically provide certification or establish compliance with every legal, contractual or insurance requirement. If a report is intended for an insurer or another adviser, their requirements should be confirmed before commissioning the work.
Auditing Physical Implementation
Beyond written policy, a security audit examines whether your security measures are in place, properly configured and maintained. We inspect physical infrastructure and review site records to verify that hardware, security systems and personnel adhere to documented procedures.
This identifies where day-to-day operations no longer reflect security policies, and provides estate managers, corporate leadership and trustees with evidence that controls are actively maintained and contractors are held accountable to their service agreements.
Our Security Audit Process
We conduct every security audit through a structured four-stage methodology designed to gather objective evidence while causing minimal disruption to your daily operations.
01. Baseline & Documentation Review
We examine existing security documentation including written policies, risk registers, guard assignment instructions, SLA contracts and insurance requirements. This establishes the formal compliance and operational baseline against which all on-site findings are evaluated.
02. On-Site Physical Inspection
We inspect active site infrastructure, physical perimeters, access barriers, electronic security systems and hardware configurations. This physical walk-through verifies whether installed controls conform to recognised standards such as BS 8220 and are properly maintained in working order.
03. Operational Observation & Records Sampling
We review working registers, incident logs, visitor records and guard patrol histories while observing live staff adherence to established procedures. This stage checks compliance with vetting standards such as BS 7858 and verifies whether daily execution matches documented policy.
04. Gap Analysis & Executive Reporting
We benchmark all collected evidence against your regulatory obligations, internal policies and external frameworks. The final deliverable provides corporate leadership and trustees with a clear gap analysis, a formal record for insurers and a prioritised remediation roadmap.
What We Audit
A security audit provides a structured evaluation across physical infrastructure, technical systems, security personnel and governance frameworks.
Perimeter & Physical Infrastructure
Electronic Security Systems
Personnel & Guard Operations
Governance & Emergency Procedures
Common Triggers for a Security Audit
Corporate boards, family office trustees and estate managers across London and the UK engage an independent physical security audit when key operational, legal or governance requirements arise.
Change of Ownership, Occupancy or Acquisition
Evaluating inherited physical security infrastructure and establishing a verified baseline prior to assuming management responsibility for an estate, facility, or asset.
Insurance Policy Renewals or Mandates
Reviewing the security measures and records relevant to a stated insurance requirement. The insurer or broker should confirm the required scope and report format in advance. Acceptance of a report, satisfaction of policy conditions and coverage decisions remain with the insurer.
Security Contractor Onboarding or Contract Renewal
Verifying third-party security contractor adherence to service level agreements (SLAs), post instructions, and BS 7858 vetting standards.
Periodic Governance & Risk Reviews
Fulfilling board, trustee, or regulatory requirements for scheduled, independent verification of physical security controls.
Post-Incident Remediation
Verifying that corrective actions and physical upgrades have been properly implemented following a security breach or procedural failure.
Security Audit Deliverables
Following site inspection and evidence review, you receive three core deliverables:
01. Executive Summary
A concise briefing on overall compliance status, critical findings and key vulnerabilities for board and trustee review.
02. Itemised Gap Analysis
A line-by-line audit log documenting specific hardware, physical barrier and procedural failures benchmarked against recognised frameworks.
03. Prioritised Action Plan
A risk-ranked plan of recommended corrective steps, from immediate operational fixes to longer-term physical upgrades.
Kabul: Safeguarding 350+ International Personnel in an Active Conflict Zone
Pegasus Ops was brought in to design and build a complete security infrastructure for a high-threat site in Kabul, housing more than 350 international personnel, following a catastrophic attack on a nearby compound that exposed critical failures in its existing security framework.
Physical Security Audit FAQs
How does a physical security audit differ from a risk assessment or physical penetration test?
A security audit examines whether your existing security measures, policies and procedures conform to recognised standards and are properly implemented, configured and maintained.
A security risk and threat assessment identifies specific threats and vulnerabilities, evaluates the likelihood of them occurring, and assesses the potential impact they could have on your organisation, people and assets.
Physical penetration testing is a controlled, authorised assessment designed to evaluate how your physical security performs against real-world intrusion techniques.
Why hire an independent auditor instead of letting our guard provider or installer self-audit?
An independent review can give the client a separate assessment of existing arrangements, including systems and services supplied by other providers. We agree the review’s purpose, evidence requirements and reporting lines before work begins. Any existing or proposed implementation role is disclosed so responsibilities are clear.
What standards do you benchmark against, and are reports accepted by insurers?
The assessment criteria are agreed before work begins and recorded in the report. Where a named standard or framework is relevant, the scope identifies which elements will be assessed and the limits of that assessment.
If you need a report for insurance purposes, ask your insurer or broker to confirm their requirements and whether they will accept the proposed provider and scope. Pegasus Ops cannot guarantee insurer acceptance, certification, satisfaction of policy conditions or a particular coverage decision.
How often should a physical security audit be conducted?
An independent security audit is typically conducted every 12 to 24 months. Additional audits are recommended following changes in ownership or occupancy, security contractor renewals, insurance policy mandates or post-incident remediation.
What documentation or site access is required before the audit begins?
We conduct a document review prior to arriving on site to maximise efficiency during the physical inspection. This typically includes site floor plans, security contractor post instructions, maintenance records for access control and CCTV systems, contract SLAs and any applicable insurance policy requirements.
Is all information and documentation kept confidential?
We agree confidentiality, information handling and authorised recipients before the engagement. A non-disclosure agreement can be put in place where required. Sensitive site plans, findings and reports should be shared only through the agreed process and with those who need access, subject to applicable legal obligations.
Will an on-site security audit disrupt our daily operations or tenants?
We plan walkthroughs, inspections and record sampling with your estate manager or security lead to minimise disruption. Access requirements and any activities that could affect occupants or operations are discussed and agreed in advance.
What happens after the audit? Do you help resolve the issues identified?
Yes. The audit concludes with a Prioritised Action Plan detailing recommended corrective steps. For clients who require it, we can provide ongoing advisory support to help prioritise and implement recommendations.
How long does an audit take, and what geographical areas do you cover?
On-site inspections typically take 1 to 3 days depending on site size and complexity, with final reporting delivered within 10 business days. We conduct audits across London, the wider UK and internationally for clients with single assets or multi-site portfolios.
Explore related support
Discuss your security audit requirement
Tell us the type and number of properties, their general location, the reason for the audit and any deadline. We can discuss the scope, access, reporting requirements and quotation before agreeing the next step.