ASIS Board-Certified PSP Principal
Independent Physical Security & Risk Advisory
Identify the risk. Design the response. Verify the outcome.
C3 Risk & Security Consulting gives leaders a clear, defensible view of their security exposure and a practical plan to close the gaps — without a product to sell.
100% Vendor-Neutral & Product-Independent.We never sell hardware, software, or guard labor.
Christian Colburn, PSP
Principal
Independent & Vendor-Neutral
100% Independent Security Advisors.
We do not sell hardware, represent integrators, or provide guard force labor. Our only agenda is your organization’s protection.
Services
Security consulting across the full lifecycle
Three pillars, eight disciplines, one vendor-neutral principal. Start where your risk is.
What a deliverable looks like
Findings leaders can act on — and defend.
Every assessment ends in a prioritized register: asset characterization, threat scenario, vulnerability, consequence and defensibility — and the countermeasure we recommend. No product placement.
Security Risk AssessmentChemical Storage Bay
Unauthorized Forced Entry
- Inherent
- Severe
- Applied
- Biometric 2-Factor + Anti-Tailgating
- Residual
- Low
Regional Distribution Facility
Forced Entry via Loading Dock
- Inherent
- High
- Applied
- Dock Door Contacts + Video Verification
- Residual
- Moderate
Corporate HQ Lobby
Tailgating at Turnstiles
- Inherent
- High
- Applied
- Optical Turnstiles + Anti-Passback
- Residual
- Low
Illustrative example — fictional facility and findings. Not derived from a client engagement. Countermeasure selection informed by the ASIS General Security Risk Assessment Guideline and NFPA 730.
1 · Identify
1. Assess & Mitigate
Find the exposure before an incident does, then set a prioritized mitigation plan.
- Physical Security Risk Assessment & Mitigation
Chemical Storage Bay
Unauthorized Forced Entry
- Inherent
- Severe
- Applied
- Biometric 2-Factor + Anti-Tailgating
- Residual
- Low
Regional Distribution Facility
Forced Entry via Loading Dock
- Inherent
- High
- Applied
- Dock Door Contacts + Video Verification
- Residual
- Moderate
Illustrative example — fictional facility and findings. Not derived from a client engagement. Countermeasure selection informed by the ASIS General Security Risk Assessment Guideline and NFPA 730.
2 · Design & Verify
2. Design & Specify
Specify only what the risk requires, then prove it was delivered.
- System Design
- Specifications & RFP
- Commissioning & Acceptance Testing
- Vendor-Neutral Security System Design
- Security Specifications & RFP Package Development
- Security Systems Commissioning & Acceptance Testing
3 · Ongoing Resilience
3. Lead & Protect
Senior ownership of the program, and people ready to act.
- Fractional Security Director
- Program Development & SOPs
- Workplace Violence Prevention & Training
- Compliance Readiness
14
Open findings
9
Closed this qtr
3.1 / 5
Program maturity
- Fractional Security Director (FSD)
- Security Program Development & SOPs
- Workplace Violence Prevention & Staff Security Training
- Regulatory Compliance Readiness
Independent & product-neutral
We don’t sell hardware, software, or guard services.
Our only loyalty is your organization’s safety.
- No equipment, software, or monitoring sales
- No guard-services contracts
- Specifications written to be competitively bid
When to call us
Most organizations have a security program. The question is whether it still fits.
- 01
After an incident or near miss
A serious event, close call, or new threat raises the question of whether today’s measures are enough.
- 02
When operations change
New sites, renovations, shifts in how space is used, or new processes change your risk profile.
- 03
During growth
Acquisitions, consolidation, and multi-site expansion expose inconsistent standards.
- 04
When expectations rise
Boards, regulators, insurers, and customers are asking harder questions about security.
- 05
When the program has drifted
Controls designed years ago may no longer match the threats or the business.
Why C3RS
Advice you can defend in the boardroom
Vendor-neutral
We do not sell or install equipment. Recommendations are driven by risk, not margin.
Evidence-based
Findings tie threats, vulnerabilities, and consequences to specific, prioritized actions.
Built for the real world
We look at how your sites actually operate, not just how the policy binder says they do.
Decision-ready
Clear reporting that executives can act on and budget against.
Industries we serve