End-to-End Risk and Vulnerability Assessments, From Preparation to Final Risk Decision
Spectrum Protection Group prepares your organization before the assessment, conducts it to a standard above the minimum, and stays with you after the out-brief until every risk is Accepted, Mitigated, or Transferred. One accountable team, start to finish.
- End-to-end support: pre-assessment preparation, the assessment itself, and every post-assessment action
- Assessments built to meet and go beyond ISC Risk Management Process and Department of War (DoW) antiterrorism standards
- We prepare you for Higher Headquarters (HHQ) or Corporate Headquarters (CHQ) assessments, or serve as your point of contact
Founded by a retired U.S. Marine Corps Master Sergeant and disabled veteran. Based in Fredericksburg, Virginia, serving Northern Virginia, the National Capital Region, and clients within our authorized service capabilities. Spectrum Protection Group carries Professional Liability Insurance. Certificate of Insurance (COI) available upon request.
Tell Us Where You Are. We Will Take It From There.
Preparing for an HHQ or CHQ Assessment
We review your program and records before the assessors arrive, close gaps early, and can serve as your point of contact during the visit.
Talk to SPGNeed a Risk or Vulnerability Assessment
We conduct the full assessment, from the FSL Determination and Baseline LOP to prioritized countermeasures and signed products.
Talk to SPGHave Findings That Will Not Close
We take over post-assessment actions: Corrective Action Plan (CAP) tracking, Risk Acceptance, Mitigation, and Transfer of Risk.
Talk to SPGNeed ISC Compliance or an FSC That Works
We build or repair your Facility Security Committee: Organizational Structure, Charters, Meeting Minutes, and ISC procedures.
Talk to SPGAssessments, Compliance, and Readiness Services
Risk Assessment
A standards-based, prioritized basis for risk decisions and resource requests.
Learn moreAll-Hazards Threat Assessment
A current, location-specific threat picture for planning and preparedness.
Learn moreAntiterrorism Program Review
Documented program readiness and a clear corrective path before a higher-headquarters assessment.
Learn moreFacility Security Committee Consulting Services
A functioning FSC with defensible decision records.
Learn moreAlso available: Special Event and Residential Assessments, Physical Security Planning, Emergency Preparedness, Plans and Exercises, Administrative Management, and Strategic Planning.
What Sets Spectrum Protection Group Apart
31 Years of Protection Experience
Military law enforcement, antiterrorism, physical security, and risk management experience, applied by the founder to every engagement.
End-to-End, Pre to Post
One team prepares you, conducts the assessment, and carries every post-assessment action to a final risk decision.
Above the Minimum Standard
Assessments are built to meet the ISC Risk Management Process and Department of War (DoW) antiterrorism requirements, then go further in documentation, prioritization, and follow-through.
Extensive ISC and DoW Knowledge
ISC Risk Management Process certified founder holding the SPēD Antiterrorism Credential (ATC); member of ASIS International. Federal facilities follow the ISC RMP; DoW activities follow DoDI 2000.12; government facilities follow the UFC. Standards updates are tracked continuously.
Ready for HHQ and CHQ Review
We prepare you for Higher Headquarters or Corporate Headquarters assessments, or serve as your point of contact.
Insured and Accountable
Spectrum Protection Group carries Professional Liability Insurance. Certificate of Insurance (COI) available upon request.
A Purpose-Built Platform
Layered Protection, SPG's proprietary Risk and Vulnerability Assessment Platform, keeps every engagement controlled, signed, and tracked.
How We Think About Your Risk
- Start with the mission: what must keep operating, and what would a loss cost?
- Set the standard first: the FSL Determination comes first for federal facilities, then the Baseline LOP.
- Measure against credible, current threats, not generic checklists.
- Rank by consequence, so resources go where they reduce the most risk.
- Recommend what is achievable, with interim measures where full implementation must wait.
- Document every decision, so it holds up to HHQ, CHQ, and audit review.
- Stay engaged until every action is resolved, not just reported.
One Team, Start to Finish
- Request and Pre-AssessmentYou submit a Requested Assessment. SPG confirms scope, schedule, and fee in writing, requests documents, and helps you prepare, including for HHQ or CHQ assessments.
- In-BriefBefore the assessment begins, SPG meets with your leadership to confirm scope, points of contact, and logistics.
- AssessmentSPG conducts the site visit, interviews, and evaluation according to the agreed scope and applicable standard.
- Out-BriefAt the end of the assessment, SPG briefs leadership on preliminary observations and next steps.
- Signed ProductsFinal products are signed by the required officials and released as locked PDF files to your organization.
- Post-Assessment ActionsSPG tracks the Corrective Action Plan (CAP) and prepares Risk Acceptance, Mitigation, and Transfer of Risk documentation until each item is resolved.
- Close-Out and AARSPG closes the engagement and completes an After Action Report (AAR) to improve the next one.
The Out-Brief Is Not the End of Our Work
Many assessments end with a report. Ours continue through every post-assessment action until each risk is Accepted, Mitigated, or Transferred. You receive:
- Corrective Action Plan (CAP) with an owner, target date, and status for every action
- Risk Acceptance packages, including the Risk Acceptance Justification Form (RAJF), prepared for the approving official
- Mitigation planning with interim and long-term countermeasures
- Transfer of Risk documented with the receiving organization and authority
- Status updates your leadership can forward to HHQ or CHQ
- Verification that completed actions actually closed the gap
Organizations that want continued support can retain SPG for further consulting services, such as ISC Compliance or Facility Security Committee consulting.
Layered Protection
Every SPG engagement is managed in Layered Protection, SPG's proprietary assessment management platform. It keeps your assessment on one controlled, standards-based workflow, so nothing is lost between the site visit and resolution.
- One controlled workflow from Requested Assessment and in-brief through the out-brief, signed products, and Corrective Action Plan (CAP) tracking.
- Standards-based: federal facilities follow the ISC Risk Management Process; DoW activities follow DoDI 2000.12 and the DoD Antiterrorism Officer Guide.
- Field-ready: assessors can record observations on site, even without connectivity.
- Signed and locked: final products carry required signatures and are released as locked PDF files.
- Controlled release: the Authorized Official notifies your organization by email when products are released. Products are for your organization and its higher headquarters only.
- Read-only client access: you view your released products and CAP status. SPG internal tools and data are never exposed.
Final products are signed, locked PDF files released only to your organization and its HHQ or CHQ.
We review each inquiry for service alignment, applicable requirements, qualifications, and available capacity.
Current Threat Awareness
Follow the current National Terrorism Advisory System (NTAS) status and public alerts and advisories from DHS, CISA, the FBI, the Department of State, and regional fusion centers, all from open sources.
How Can We Help Your Organization?
Whether you are preparing for an HHQ or CHQ assessment, need a Risk or Vulnerability Assessment, or have findings that need to be closed out, tell us where you are and we will recommend an appropriate scope of services.