Sample survey report
See how each scored finding becomes a decision with a named role and a closeout record.
This is the fictional assessment issued 27 September 2026, adapted for the web. No actual inspection, device check or photograph took place.
Explore the sample planThe sample has 13 findings, 7 of them in Protect. The review covers device access and physical conditions together.
Top three priorities
Ranked by sample score. Ties go to the lower finding number.
- F07 · Recorder uses the installer default admin accountSample score 25
- F01 · North pedestrian gate does not latchSample score 20
- F09 · Recorder remote access is internet reachableSample score 20
F11 also scores 20. The decision sequence groups related work and starts urgent repair requests in parallel.
Sample property plan
Tap or tab to a numbered pin to read the observation, action and closeout check. Every finding is also listed below.
Pin colors show the sample score: amber for 20 or 25, blue for 16, pale for 8 to 12.
3P provides consulting. The owner, manager, owner IT and the responsible provider carry out the actions. The owner hires any licensed provider needed for the work.
Security layer map
This map puts each finding on the layer it belongs to, from the front gate to the records you'd need after an incident, so the owner can see where each problem sits. The numbers on the rings match the key. F numbers match the findings on this page, and Q pins are questions for the owner.
How the scores compare
For this sample, score = likelihood x consequence. Ratings are comparative judgments, not probabilities. The multiplication rule and definitions are sample choices, not a published 3P scoring standard.
L means likelihood. C means consequence.
| ID | L | C | Score |
|---|---|---|---|
| F07 | 5 | 5 | 25 |
| F01 | 5 | 4 | 20 |
| F09 | 4 | 5 | 20 |
| F11 | 4 | 5 | 20 |
| F02 | 4 | 4 | 16 |
| F04 | 4 | 4 | 16 |
| F08 | 4 | 4 | 16 |
| F05 | 3 | 4 | 12 |
| F06 | 3 | 4 | 12 |
| F10 | 3 | 4 | 12 |
| F12 | 3 | 4 | 12 |
| F03 | 3 | 3 | 9 |
| F13 | 4 | 2 | 8 |
Prevent, Protect, Preserve
One register covers physical access, device controls and the records needed afterward.
In this sample, the layer counts describe the findings. They do not measure the property's protection or establish a result.
Prevent: F01, F02, F03, F05.
Protect: F04, F07, F08, F09, F10, F11, F13.
Preserve: F06, F12.
Planning bands by finding
- Under $500: 8 sample findings
- $500 to $5,000: 4 sample findings
- $5,000 to $25,000: 1 sample finding
These are planning bands for the actions, not consultant prices or vendor quotations. Dependencies can change a band. The low band does not promise free device labor.
Device review and open items
The sample includes a security systems review. Owner records support the findings; unverified connections, versions and account ownership stay open.
| Equipment and physical exposure | Records reviewed | Who must confirm the gap |
|---|---|---|
| Recorder: leasing office closet, unlocked in owner record | E07, E09 to E12; account, remote path, firmware and audit records | Manager: closet control. Owner IT: supported version, recovery owner and audit capability. |
| About 38 cameras: exterior routes and common areas, owner count | E08 segment record; full camera inventory absent | Owner IT and a licensed provider: reconcile locations, camera accounts, shared credentials, firmware and physical reach. |
| Supporting switch: office closet, owner location record | E08 port configuration; firmware version absent | Owner IT: switch version against manufacturer releases, cabinet access and isolation design. |
| Amenity fob panels: amenity equipment area, owner location record | Connections, cabinet locks, accounts and firmware unverified | Manager and a licensed provider: panel location, physical exposure, credentials, admin count and firmware records. |
The owner and its providers retain device control and perform changes. 3P does not log into devices, reconfigure equipment or carry out remediation.
Alarm records and fees
The fee ladder is public information. The property history alongside it is fictional.
| False burglar alarm in 12 months | Fee for each event |
|---|---|
| 1 to 3 | $0 |
| 4 to 6 | $50 |
| 7 to 8 | $75 |
| 9 to later | $100 |
Dallas Police Department fee source. Checked 18 October 2026. The ordinance library records its earlier check as 14 September 2026. Ordinances change. Confirm anything you are about to act on with the city.
Sample property history
The illustrative provider history lists eight false burglar alarms inside the rolling twelve-month window. Five occurred during opening. The sample provider note links those five to an obsolete opening contact on the call list.
The fictional permit copy is marked current. City permit status is unverified. The other events remain unresolved; the manager asks a licensed provider to confirm their cause.
F13 records the proposed action and the evidence needed to close it. Reconcile event dates with city records before calculating a rolling count.
Open the false alarm cost calculatorThis is general information about how the ordinance works, not legal advice. Your counsel gets the last word on it.
Decision sequence
The sample groups the work by approval type: decisions first, then purchase orders, then a capital request. The manager starts urgent repair requests at the same time.
Decision · F07, F09, F11
Assign owner IT today. Approve individual access, necessary remote access and account removal; a licensed provider handles required device work.
Sample band: Under $500 each. High scores with low bands; no new equipment presumed.
Decision · F05, F06, F12, F13
Manager adopts the draft procedure; owner IT confirms log capability. Obtain provider acknowledgment of the alarm contact change.
Sample band: Under $500 each. Stops record gaps while technical proposals are prepared.
Purchase order · F03
Clear the sight line at the next grounds visit. Manager accepts the same-view record.
Sample band: Under $500. Small, observable change using existing grounds work.
Purchase order · F07, F09
licensed provider account, closet or remote-path work, if owner IT scopes it
Sample band: planning band unchanged until a scope exists. Conditional work after owner IT confirms scope.
Purchase order · F01, F02, F04
Request a licensed provider for the gate and lighting and a fencing contractor for the fence now; gate first, then lighting and fence. Accept the physical result and dated record.
Sample band: $500 to $5,000 each. Restores existing controls. Do not wait for the capital design.
Purchase order · F10
Owner IT confirms support and dependencies; a licensed provider supplies the staged work plan where needed.
Sample band: $500 to $5,000. Confirm compatibility and a recovery path before changes.
Capital request · F08
Owner IT and a licensed provider scope separation, controlled crossings, acceptance checks and rollback.
Sample band: $5,000 to $25,000. Higher planning band and dependencies justify staged design.
Before approving spend, the owner obtains written scope, exclusions, dependencies and completion evidence. The manager closes each item only when its stated acceptance evidence is supplied.
Read every sample finding
Open any finding for its source record, responsible role and acceptance check. Every observation below is fictional.
F07 · Recorder uses the installer default admin accountSample score 25
- Observed
- In the sample installer statement, the default administrative account remains in use. The manager also reports that the recorder closet is kept unlocked during office hours.
- Sample evidence
- E07: illustrative installer confirmation and owner equipment-location record, 2026-09-24 at 17:15. No password was supplied; Photo 07 is a drawn placeholder.
- Action for the owner or manager
- Have owner IT and a licensed provider replace default access with individual approved accounts and secure physical access. Approve the account owner and recovery process first.
- Who acts
- Owner IT, property manager and a licensed provider
- Close when
- Owner-supplied confirmation of changed access, an approved account list and a manager record that the closet is secured. We do not test a login.
F01 · North pedestrian gate does not latchSample score 20
- Observed
- The leaf closes, but the latch misses the keeper on three illustrative checks. The opening gives direct access to Lot A.
- Sample evidence
- E01: illustrative walk notes, 2026-09-24 at 21:42; Photo 01 is a drawn placeholder.
- Action for the owner or manager
- Ask a licensed provider to adjust or repair the latch and check closing operation. The manager records the condition each shift until the repair is accepted.
- Who acts
- Property manager and a licensed provider
- Close when
- Three consecutive close-and-latch checks witnessed by the manager, with a dated completion record.
F09 · Recorder remote access is internet reachableSample score 20
- Observed
- The sample external reachability check run by owner IT returned a recorder remote-access service. It establishes reachability only, not successful authentication or compromise. The likelihood rating is 4 because the exposed service fronts the same recorder that F07 shows still uses the installer's default admin account, and it drops once F07 is closed.
- Sample evidence
- E09: illustrative owner IT check result requested within the agreed scope, 2026-09-24 at 17:35. We ran no scan and attempted no login; Photo 09 is a drawn placeholder.
- Action for the owner or manager
- Ask owner IT to review and remove unnecessary exposure, with a licensed provider involved where required. Confirm the required remote workflow and record an approved access method.
- Who acts
- Owner IT and a licensed provider
- Close when
- Owner IT repeats its agreed check and records the result and the approved remote access path.
F11 · Former staff retain administrative accountsSample score 20
- Observed
- The sample account export from the manager lists six recorder admin accounts. Two role entries match departed staff in the owner-supplied status list. Camera and access panel account ownership is unverified.
- Sample evidence
- E11: illustrative manager-exported account list and owner staff-status comparison, 2026-09-24 at 17:55. The sample uses no names; Photo 11 is a drawn placeholder.
- Action for the owner or manager
- Have owner IT remove unneeded privileges after ownership review. Confirm a recovery owner, then reconcile recorder, camera and access panel accounts with current authorized roles.
- Who acts
- Owner IT and property manager
- Close when
- A role-based account reconciliation with no unexplained administrators; owner IT confirms removal and recovery access.
F02 · Lot A has a lighting gapSample score 16
- Observed
- Three fixtures along the east parking row are dark in the sample night walk. The route from Building 3 to the gate is difficult to see. No light meter readings were taken.
- Sample evidence
- E02: illustrative night walk notes, 2026-09-24 at 21:48; Photo 02 is a drawn placeholder.
- Action for the owner or manager
- Have a licensed provider restore the failed fixtures, then review the route after dark. Request a lighting assessment only if the restored fixtures leave gaps.
- Who acts
- Property manager and a licensed provider
- Close when
- Dated night review of the route after repairs; record remaining gaps before proposing new equipment.
F04 · Fence gap opens onto the easementSample score 16
- Observed
- A separated fence panel leaves a walk-through gap at the east perimeter. The sample path connects the easement to Lot C.
- Sample evidence
- E04: illustrative daytime walk notes, 2026-09-24 at 16:28; Photo 04 is a drawn placeholder.
- Action for the owner or manager
- Have a fencing contractor repair the panel and its attachment. The manager checks the adjacent run and records any additional openings before accepting the work.
- Who acts
- Property manager and a fencing contractor
- Close when
- A dated repair record and a continuous fence line at the affected run.
F08 · Cameras share the office networkSample score 16
- Observed
- The sample switch configuration supplied by owner IT places the camera ports, recorder port and office PC ports on the same network segment. Amenity access panel connections are not established.
- Sample evidence
- E08: illustrative owner IT switch configuration export and annotated port list, 2026-09-24 at 17:25; Photo 08 is a drawn placeholder.
- Action for the owner or manager
- Ask owner IT and a licensed provider for a staged isolation design, controlled crossings and a rollback plan. Confirm recording and authorized access after their changes.
- Who acts
- Owner IT and a licensed provider
- Close when
- Owner IT supplies an updated diagram and its own acceptance results. Unverified panel connections are resolved before implementation.
F05 · Master keys have no custody recordSample score 12
- Observed
- The sample key cabinet contains master keys with no issue or return log. The manager cannot reconcile the keys on hand to an authorized role list.
- Sample evidence
- E05: illustrative manager demonstration of the cabinet and owner records, 2026-09-24 at 16:45; Photo 05 is a drawn placeholder.
- Action for the owner or manager
- Reconcile the keys, approve a holder list and start an issue and return log under the draft procedure. If a key remains unaccounted for, request a separate assessment from a licensed provider.
- Who acts
- Property manager
- Close when
- Every master key has a custody entry or an unresolved exception assigned to the manager. Any lock work needs a separate scope.
F06 · Incident records leave unexplained gapsSample score 12
- Observed
- The illustrative incident file skips two reported gate complaints and has no closure note for the fence opening. Blank periods are not distinguished from periods with no reported events.
- Sample evidence
- E06: illustrative owner incident file and manager statement, 2026-09-24 at 17:00; Photo 06 is a drawn placeholder.
- Action for the owner or manager
- Use one event record with date, time, location, source, action, footage reference and closure. Mark missing history as unknown; do not reconstruct it as confirmed fact.
- Who acts
- Property manager
- Close when
- The two complaints and fence item have labeled retrospective entries with their source and uncertainty, plus assigned follow-up.
F10 · Recorder firmware is behind supplied release recordsSample score 12
- Observed
- The manager-displayed system screen shows a 2022 recorder build in this example. An owner-supplied manufacturer release summary lists a 2026 build. Compatibility and camera and switch versions remain unverified.
- Sample evidence
- E10: illustrative owner system-information capture and owner-supplied release summary, 2026-09-24 at 17:45. The manager retained control; Photo 10 is a drawn placeholder.
- Action for the owner or manager
- Have owner IT and a licensed provider confirm model, supported version, dependencies, backup and rollback steps before scheduling any update. Obtain camera and switch versions as well.
- Who acts
- Owner IT and a licensed provider
- Close when
- Owner-supplied version and compatibility records, followed by recording and playback acceptance results after any approved change.
F12 · No retained administrative audit recordSample score 12
- Observed
- The sample owner records show no retained administrative audit-log exports and no assigned reviewer. Whether the recorder can generate and retain a usable audit log is unverified.
- Sample evidence
- E12: illustrative owner records inventory and owner IT statement, 2026-09-24 at 18:05; Photo 12 is a drawn placeholder.
- Action for the owner or manager
- Assign a reviewer and have owner IT confirm log capability and export options. Approve a retention period and record location. If unsupported, request a separately scoped option from a licensed provider.
- Who acts
- Property manager, owner IT and a licensed provider
- Close when
- Owner IT provides a sample log or documents the capability gap; the manager signs the first review record.
F03 · Shrubs block the approach to Building 4Sample score 9
- Observed
- Shrubs interrupt the view between the common path and the west approach to Building 4. The sample view is blocked at pedestrian height.
- Sample evidence
- E03: illustrative daytime walk notes, 2026-09-24 at 16:10; Photo 03 is a drawn placeholder.
- Action for the owner or manager
- Direct the landscape provider to restore the view from the common path. Photograph the same view afterward and add the location to the grounds checklist.
- Who acts
- Property manager and landscape provider
- Close when
- A clear view of the approach from the same photo position, accepted by the manager.
F13 · Repeated false burglar alarms at the officeSample score 8
- Observed
- The illustrative provider history lists eight false burglar alarms inside the rolling twelve-month window. Five occurred during opening. The sample provider note links those five to an obsolete opening contact on the call list.
- Sample evidence
- E13: illustrative owner alarm history, permit copy, contract extract, call list and provider statement, 2026-09-24 at 18:15; Photo 13 is a drawn placeholder.
- Action for the owner or manager
- Approve the revised role-based call order and verification instructions in the draft procedure. Ask a licensed provider to confirm receipt and review the panel timing. Reconcile the count against city records.
- Who acts
- Property manager and a licensed provider
- Close when
- A current permit record, provider acknowledgment, corrected call list and reviewed cause record for each subsequent activation.
What you get
A real survey delivers the items below. This sample uses a schematic and placeholder evidence where a real report has property records and photographs.
- An executive summary with the priority order at the top.
- The findings register, each item scored, with the countermeasure and a cost band against it.
- A marked site plan and dated photographs of the findings.
- A sequence grouped by decisions, purchase orders and capital requests.
- Draft procedure where a finding concerns procedure.
Discuss your property
A first conversation costs nothing, and the fee for anything past that is fixed and written into the scope of work before any work starts.
Consulting only. The owner chooses the providers and approves the work. Texas DPS describes the licensed activities. Texas DPS records the consulting change.
See a sample church grant assessment
See a sample monthly owner check
See a sample cyber risk assessment