Security Risk Assessment in Kenya: What It Is and How It Works
A security risk assessment is the starting point for any serious security plan. It answers three simple questions: what are you trying to protect, what could go wrong, and what should you do about it? Without an assessment, businesses and households tend to buy security the way they buy insurance they do not understand, choosing whatever a salesperson recommends or copying what neighbours have. With an assessment, every shilling is spent on real risks.
This guide explains what a security risk assessment is, what it covers, how it is carried out in Kenya, what you should receive at the end, and how to use the results.
What is a security risk assessment?
A security risk assessment is a structured review of a property or organisation that identifies threats, weaknesses and the likely impact of incidents, then recommends proportionate measures to reduce risk. It looks at people, buildings, procedures and technology together.
In simple terms:
Risk = likelihood of an incident × impact if it happens
A risk that is likely and would cause serious harm needs urgent attention. A risk that is unlikely and would cause little harm may need no action at all.
Who needs an assessment?
| Organisation | Why an assessment helps |
|---|---|
| Offices and corporate premises | Protect staff, assets and information; satisfy insurers and head offices |
| Warehouses and factories | Reduce theft, insider fraud and losses in transit |
| Retail shops and malls | Cut shrinkage and protect staff and customers |
| Schools and hospitals | Protect vulnerable people and meet duty-of-care expectations |
| SACCOs and banks | Protect cash, members and data |
| Estates and apartment blocks | Plan fair, effective shared security |
| NGOs and embassies-adjacent organisations | Protect staff in changing security environments |
| High-value homes | Plan protection around family routines and risks |
Want a professional security risk assessment? Call us to book one
Talk to a Bestcare Security adviser now: call 0709 004 600. We answer 24/7 and the first site assessment is free.
What an assessment covers
1. Assets
What needs protecting: people, cash, stock, equipment, vehicles, data, reputation and continuity of operations.
2. Threats
Who or what could cause harm: burglars, robbers, shoplifters, dishonest insiders, fraudsters, trespassers, aggressive visitors, fire, and in some locations, civil unrest.
3. Vulnerabilities
Weaknesses that threats could exploit: low walls, dark areas, weak locks, poor visitor control, lack of supervision, blind spots in CCTV, predictable routines, weak cash procedures.
4. Existing controls
What is already in place and how well it works: guards, patrols, alarms, CCTV, access control, lighting, procedures, training.
5. Impact
What would happen if each risk occurred: financial loss, injury, disruption, legal consequences and damage to reputation.
6. Recommendations
Practical, prioritised actions to reduce each significant risk.
How an assessment is carried out
- Briefing: the assessor meets owners or managers to understand the organisation, concerns and past incidents.
- Site inspection: a walk-through of the perimeter, entrances, buildings, sensitive areas and surroundings, in daylight and ideally after dark.
- Review of procedures: visitor handling, cash handling, key control, opening and closing, emergency plans.
- Review of technology: CCTV coverage and recording, alarms, access control, lighting.
- Interviews: guards, reception, supervisors and staff, who often know the real weaknesses.
- Local context: crime patterns and risks in the area.
- Analysis: rating each risk by likelihood and impact.
- Report: findings and prioritised recommendations.
What you should receive
A useful report is clear and practical. It should include:
| Section | What it contains |
|---|---|
| Summary | The most important risks and top recommendations |
| Asset and threat overview | What is being protected and from what |
| Findings | Vulnerabilities found, with photos where helpful |
| Risk rating | Each risk rated by likelihood and impact |
| Recommendations | Specific actions, prioritised and, where possible, costed |
| Action plan | Quick wins, medium-term and long-term improvements |
Rating risks: a simple matrix
| Likelihood / Impact | Low impact | Medium impact | High impact |
|---|---|---|---|
| Likely | Medium | High | Critical |
| Possible | Low | Medium | High |
| Unlikely | Low | Low | Medium |
Critical and high risks get attention first. Low risks may simply be monitored.
Examples of findings and recommendations
| Finding | Risk | Recommendation |
|---|---|---|
| Back gate left open during deliveries | Theft of stock | Delivery procedure with guard at back gate |
| Visitors not confirmed with hosts | Theft from offices | Host confirmation and badges |
| No supervision of night guards | Sleeping guards, missed incidents | Unannounced night supervision |
| CCTV recording only 3 days | Evidence lost before losses are noticed | Increase storage |
| Cash banked at the same time daily | Robbery on the way to the bank | Vary times, use cash-in-transit |
| Dark perimeter at the back | Undetected intrusion | Security lighting and patrols |
Common mistakes when commissioning an assessment
- Asking the company that will sell you equipment to assess only what it sells
- Assessing only in daylight
- Ignoring procedures and focusing only on hardware
- Not involving guards and front-line staff
- Receiving a report and never implementing it
- Never repeating the assessment as the organisation changes
How often should you assess?
Carry out a full assessment when you move into new premises, after a serious incident, when operations change significantly, and at least every one to two years. Review the action plan every few months.
Using the results
- Share the summary with decision-makers
- Assign each recommendation to a named person with a deadline
- Start with quick wins that cost little, such as procedures, lighting and key control
- Budget for larger improvements over time
- Brief your security provider and staff on changes
- Track progress and review the plan regularly
Worked example: a manufacturing company in Ruaraka
A manufacturer suffered repeated stock losses and a night break-in. A security risk assessment found that the perimeter fence had gaps behind the boiler house, night guards were rarely supervised, the CCTV recorder kept footage for only four days, and the same guard had managed the vehicle gate for two years. Recommendations included repairing the fence and adding lighting, introducing unannounced night supervision, extending CCTV storage to cover monthly stock counts, rotating gate guards, and a two-person check for outgoing loads. The company implemented the quick wins within a month and budgeted the rest over the following quarter, and losses fell as each change took effect.
Assessments for homes
Homes benefit from the same approach on a smaller scale: understanding the family’s routine, the compound’s weaknesses and the neighbourhood’s risks, then choosing proportionate measures. See our home security checklist for Nairobi homeowners.
How Bestcare Security can help
We carry out security risk assessments for businesses, institutions, estates and homes across Nairobi and beyond. Our assessments cover people, procedures and technology, and our reports give you a clear, prioritised action plan. Learn more about our corporate security services and residential security services.
Choosing an assessor
The value of an assessment depends heavily on who carries it out. Look for an assessor with practical security experience in your type of site, a willingness to visit at night, and the independence to recommend procedures and people as well as equipment. Ask for an example report with client details removed, and ask how recommendations are prioritised. Be cautious of assessments that conclude you simply need more of whatever the assessor happens to sell. A good assessor will sometimes recommend doing less in one area and more in another.
Preparing for an assessment
You can make the assessment faster and more useful by preparing in advance:
- A list of incidents and losses over the past two years
- Site plans or a simple sketch of the property
- Current security contracts and post instructions
- Details of existing CCTV, alarms and access control
- Key procedures, such as cash handling, deliveries and opening and closing
- Names of staff who can be interviewed, including night guards
Tell the assessor about any concerns you have, even if they seem minor. Small observations often point to bigger weaknesses.
Turning recommendations into a budget
Recommendations are only useful if they are funded. Group actions into three categories: low-cost changes to procedures and routines, moderate investments such as lighting and locks, and larger projects such as CCTV upgrades or perimeter work. Many organisations fund the first two immediately and plan the third over the next budget cycle, which spreads cost while quickly reducing the highest risks.
Frequently asked questions
What is a security risk assessment?
A structured review of a property or organisation that identifies threats, weaknesses and impacts, and recommends proportionate security measures.
Who needs an assessment?
Any business, institution, estate or high-value home that wants to spend on security wisely, especially after incidents or changes.
How long does an assessment take?
A small site may take a few hours on site plus report writing; larger or multi-site organisations take longer.
What should the report include?
A summary, findings, risk ratings, prioritised recommendations and an action plan.
How often should we reassess?
At least every one to two years, and after major changes or serious incidents.
Does an assessment include CCTV and alarms?
Yes. A good assessment reviews technology alongside people and procedures.
Can a security risk assessment reduce costs?
Often yes, by focusing spending on real risks and identifying unnecessary measures.
Is an assessment confidential?
It should be. Reports describe your weaknesses in detail, so share them only with people who need them and keep copies secure.
How do I book an assessment with Bestcare Security?
Call 0709 004 600 to arrange a security risk assessment.
Related reading
- Office Security Checklist for Kenyan Businesses: 35 Points to Review
- Shoplifting Prevention in Kenya: Practical Steps for Shops and Supermarkets
- Cargo Theft Prevention for Warehouses and Depots in Kenya
Explore our corporate security services or see all our security services in Kenya.
Want a professional security risk assessment? Call us to book one
Speak to our team today for honest advice and a free, no-obligation site assessment anywhere in Nairobi.
