
Physical Security
Security Concepts
Risk-based security concepts that align protection goals with structural, technical and organizational measures into a coherent whole.
Overview
A sound security concept does not start with technology, but with the protection goal. Before a single camera or detector is planned, we clarify what needs protecting, against which threats and to what degree. Assets, people, operational processes and plausible loss scenarios are captured systematically — because only a concept that asks the right questions at the outset avoids costly misinvestment in the end.
Methodically, we draw on established standards. The risk assessment follows the principles of ISO 31000 (risk management), the security planning the VdS security guidelines. For structural measures we apply the resistance classes (RC) per DIN EN 1627, which define how long a component withstands a burglary attempt. This creates a traceable thread from threat through protection goal to the concrete measure.
Substantively, our concepts build on the proven triad of structural-mechanical, electronic and organizational measures. Mechanical protection forms the foundation — it buys the time that electronic detection and organizational intervention need to take effect. Only the interplay of mechanics, detection technology and defined response procedures delivers genuine protection; a single component remains piecemeal.
A security concept is not a static document but must fit and evolve with real operations. We account for operating hours, visitor and delivery traffic, interfaces with IT security and fire protection, and the question of who does what in an emergency. Where regulatory requirements apply — such as critical-infrastructure obligations or the duties arising from NIS2 — we dovetail the physical concept with the overarching compliance requirements.
The result is a documented, audit-ready concept that holds up before insurers, authorities and auditors — and serves as the shared basis for all downstream trades: technical planning, video surveillance, access control, intrusion detection, perimeter protection and the security control room.
Standards & norms
- ISO 31000
- VdS 3143
- DIN EN 1627 (Widerstandsklassen RC)
Frequently asked questions
When do I need a professional security concept?
At the latest when regulatory requirements (e.g. critical-infrastructure rules, NIS2) apply, an insurer requires evidence, or multiple sites and trades need coordinated protection. New builds, conversions or the aftermath of an incident are also good moments for a structured concept before investing in individual technologies.
What is the risk analysis based on?
We use recognized methods such as ISO 31000 and the VdS security guidelines to systematically assess protection goals, probabilities and impact. From this we derive the required security grade — instead of over- or under-dimensioning across the board.
How does physical security relate to IT security and compliance?
Very closely. Anyone gaining physical access to servers, network equipment or workstations often bypasses the best IT controls. Frameworks such as ISO/IEC 27001 or NIS2 therefore explicitly require physical safeguards. We think both worlds together.

