Xander Security Solutions
A security consultant with a tablet assessing the camera and card reader at a building entrance at dusk
§ XSS-01Security Consulting

Know what you're protecting, what threatens it, and what to fix first.

Independent, senior-led security consulting for organizations that need a clear, defensible picture of their risk. Every engagement is run by a practitioner with more than 25 years in Canadian and international federal security, not handed to a junior analyst.

§ AWhat's included
XSS-01.01

Threat and Risk Assessments

Structured TRAs using recognized methodologies, including the Harmonized TRA (HTRA). We identify assets, threats and vulnerabilities, rate residual risk, and give you prioritized recommendations you can act on and defend.

XSS-01.02

Physical Security Reviews

Site walk-throughs of perimeters, access control, lighting, CCTV coverage and guard posts, with findings tied to real-world threats rather than a generic checklist.

XSS-01.03

Security Policy & Standards

Policies, procedures and standards written to fit how your organization actually operates, so they get followed rather than filed.

XSS-01.04

Security Program Design

A roadmap from where your security program is today to where it needs to be, with phases, owners and costs.

XSS-01.05

Investigations Support

Experienced support for internal investigations and incident reviews, from scoping to a clear written account of what happened. See Investigations & Screening for our software-backed services.

Not sure where to start?

Tell us the problem. We'll scope the work.

Get in touch →
§ A.1Threat & risk assessment

From a list of worries to a ranked plan.

Each threat is rated by likelihood and impact against your current safeguards. The result is a clear picture of which risks need action now, which can wait, and which you can accept.

We work with recognized methodologies, including the Harmonized Threat and Risk Assessment (HTRA), and match the approach to your organization and its stakeholders.

Risk register · illustrativeAssessing
T-01T-02T-03T-041122334455IMPACT →LIKELIHOOD →
  1. T-0112
    Tailgating at staff entrance
  2. T-0212
    Unmonitored loading dock
  3. T-0310
    Insider data removal
  4. T-0420
    After-hours intrusion
§ BHow an engagement runs
  1. STEP 01

    Scope

    Agree on the assets, sites and questions that matter, and what a useful result looks like.

  2. STEP 02

    Assess

    Interviews, document review and site visits to understand threats, vulnerabilities and existing controls.

  3. STEP 03

    Analyse

    Rate each risk by likelihood and impact, and test current safeguards against it.

  4. STEP 04

    Recommend

    A prioritized, costed plan, presented to the people who need to act on it.

§ CWho it's for
  • Organizations without an in-house security team
  • Property and facility operators
  • Boards and executives who need an independent view
  • Security teams that need a second set of eyes
§ DRelated services
§ 00Next step

Start with a confidential conversation.

Tell us what you're protecting and what's worrying you. You'll speak directly with the founder, not a sales team.