What does a school security assessment cover?
A thorough assessment examines the full system, not just the hardware. Our school assessments encompass school operations; security and emergency infrastructure (public address and mass notification capability, panic and special alert systems, intrusion detection, CCTV, radio communications, electronic access control, and SRO or security officer operations); policies and procedures, including access control, visitor management, and threat assessment plans; school climate and culture, including faculty knowledge and suspicious-activity procedures; grounds and facilities — outdoor barrier design and egress, concealment and obscuration issues, building façade, entrance, and lobby design, safe classroom design, and egress obstructions; and emergency response preparations, from response team structure to the comprehensiveness and safety of the emergency response plan itself. The breadth is the point: most schools’ vulnerabilities live in the seams between these categories, which is precisely where single-vendor evaluations never look.
How long does a school security assessment take?
The on-site portion depends on the size and complexity of the campus — a single-campus school and a multi-building institution are different undertakings. A typical single-campus assessment involves 1-3 days on-site, including observation of normal school operations, facility inspection, and interviews with key personnel. Following the site visit, findings are compiled, the report is drafted, and it moves through our internal review before delivery — typically 3-5 weeks after the visit.
What do we receive at the end of the assessment?
A documented report of findings that specifies issues of concern and options for remedy — written in a manner designed to support your decisions while mitigating potential liability, because an assessment report is a discoverable document and should be prepared by someone who understands what that means. The report is not the end of the engagement: based on the school’s decisions, our consultant works collaboratively with your team to develop an improvement strategy that maximizes risk reduction while attending to the school’s branding, culture, operations, geography, and budget. The distinction matters — a list of deficiencies helps no one; a prioritized, defensible strategy the school can actually execute over realistic budget cycles is the deliverable.
Will the assessment disrupt the school day?
No — and observing the school operating normally is part of the methodology. Arrival and dismissal, class transitions, lunch periods, and visitor handling are among the most security-relevant moments of a school day, and they can only be evaluated while they happen. Facility inspection and infrastructure review are conducted unobtrusively; interviews with administrators and key staff are scheduled around teaching responsibilities; and unless response evaluation is specified, nothing about the assessment requires drills or lockdowns. Many school communities are entirely unaware an assessment is underway. Where a school prefers to inform faculty or families, we assist with framing that communication.
How do assessments differ for K-12 schools versus colleges and universities?
The principles are constant; the risk architecture differs. K-12 campuses are typically contained environments with controlled perimeters, a known population, and centralized authority — the assessment emphasizes access control, classroom security, and faculty-driven emergency response. Colleges and universities are open by design: distributed buildings, residential facilities, adult students who come and go freely, and governance spread across departments — the assessment emphasizes layered protection of individual facilities, mass notification across a dispersed population, and coordination among campus security, administration, and local response agencies. CIS has assessed both, from preparatory schools to universities, and the assessment scope is fitted to the institution’s actual structure rather than forced through a K-12 template.
Does the assessment address state-mandated school safety requirements?
For Florida schools, our consultants are familiar with the state’s school safety framework, including its mandated assessment and reporting requirements, and can align our work with those obligations so the school’s independent assessment and its statutory compliance reinforce rather than duplicate one another. For schools in other states, we account for applicable state requirements during scoping. An independent assessment serves a different purpose than a compliance checklist — it evaluates what actually protects the school, not merely what satisfies a form — but the two should be coordinated, and we structure our engagement accordingly. If requested, our consultants can also benchmark the school’s compliance with third-party standards such as PASS and ASIS International’s School Security Standard.
How often should a school reassess its security?
Security conditions drift faster than most schools expect: construction changes sightlines and access paths, staff turnover erodes procedural knowledge, technology ages, and the threat environment evolves. As a working practice, a school should reassess after any major campus construction or renovation, after a serious incident, after significant leadership or security staffing changes, and otherwise on a periodic cycle of no more than three years. Between formal assessments, the school’s own annual review of emergency plans and security procedures — ideally exercised, not just read — maintains the program’s currency. A school that has not been independently assessed in a decade is not operating the program it thinks it is; it is operating the program that drift has left behind.
