BBRIMSTONESECURITY OPERATIONS

MN-1 PROFESSIONAL SECURITY ASSESSMENT

Know your risks.
Know your next move.

Practical security assessments. Documented findings. Clear next steps.

A considered look at your facility, its procedures, and the gaps that matter—turned into priorities you can act on.

Request an AssessmentSee the process
Physical security & proceduresScope agreed before workSalt Lake County travel included

WHY BRIMSTONE

Practical experience.
Careful judgment.

About BSO

Brimstone Security Operations LLC is a Utah-based security assessment and advisory business led by Michael A. Codispoti. Michael's background includes security work across corporate, government, industrial, and public-facing environments.

That experience informs a straightforward approach: understand how a site operates, document supported concerns, and recommend improvements that fit the client's priorities.

What you can expect

A defined scope, evidence-supported findings, clearly stated limitations, and recommendations you can discuss and track. BSO distinguishes observed conditions from unverified concerns and puts practical decisions at the center of the report.

MN-1 PROFESSIONAL SECURITY ASSESSMENT

A professional review of physical security.

A human-led physical-security assessment supported by BSO's MN-1 workflow. Technology supports the assessor's professional judgment. It does not independently determine whether a facility is secure, manufacture findings, or replace human review. Observations and evidence inform the findings, and reports receive human review before release. It examines agreed areas such as access control, camera coverage, perimeter conditions, visitor procedures, and relevant policies through authorized observation and review.

Within agreed scope

Walkthroughs, client-approved interviews, selected document review, and expressly permitted evidence collection. Findings describe conditions observed during the assessment and the limits of the review.

Service boundaries

This service does not include guard coverage, continuous monitoring, penetration testing, active scanning, exploitation, social engineering, physical bypass, covert surveillance, emergency response, remediation implementation, or engineering or code certification.

An assessment is not a guarantee of security, prevention of loss, or discovery of every weakness.

CONFIDENTIALITY & EVIDENCE

Collect deliberately.
Handle with care.

Security observations can reveal sensitive details about a facility. The MN-1 workflow is offline-first, with evidence captured and handled locally during the assessment and released through a controlled delivery process.

LIMITED COLLECTION

Only what the scope needs

Collection follows written authorization and approved methods. Unnecessary personal information is avoided, and unrelated sensitive details are redacted where practicable.

CONTROLLED HANDLING

Protected evidence records

Assessment evidence is kept in encrypted local storage with restricted access. Handling records and integrity verification help identify changes and support traceability. These checks do not promise forensic admissibility or immunity from compromise.

CONTROLLED DELIVERY

Reviewed before release

Reports undergo quality and integrity checks before delivery to agreed recipients through the agreed secure channel. Raw evidence is supplied only as expressly agreed. External cloud or AI processing of client evidence requires prior written approval.

Evidence methods, recipients, delivery arrangements, and retention requirements are established for the engagement. Sensitive assessment evidence belongs in the subsequently agreed secure channel.

BRIMSTONE EXTERNAL THREAT INDEX (BETI) / PRE-VISIT CONTEXT REVIEW

Understand the site.
Understand its surroundings.

The Brimstone External Threat Index (BETI) brings relevant surrounding threat and crime context into assessment planning alongside the facility's operating conditions and concerns.

Sources with context

Relevant authoritative sources—such as official law-enforcement crime statistics, public agency advisories, and government incident information—are reviewed with their dates, geographic coverage, and limitations in mind. Availability and reporting quality vary by area.

Context is not a finding

Area crime data alone does not establish a weakness at your facility. A facility finding requires site-specific support within the agreed scope. Broader context helps frame questions and priorities; it does not label a business, neighborhood, or individual as unsafe.

THE APPROACH

A clear process.
A useful deliverable.

Each engagement begins with defined boundaries and ends with findings reviewed for clarity and practical use.

01 / DEFINE

Scope & authorization

Intake, pre-visit review, and a signed agreement establish the site, activities, and assessment window.

02 / ASSESS

Observe & document

Review the agreed areas onsite. Collect approved photographs and evidence relevant to the assessment.

03 / PRIORITIZE

Findings & action plan

Receive documented findings, priorities, a 30/60/90-day plan, and a briefing. Reports undergo quality checks before secure delivery.

ONE-TIME ASSESSMENTS

The right scope for your site.

Size is a starting point. Site complexity and your objectives determine eligibility, confirmed during scope review.

01 / ESSENTIAL

A focused starting point.

$1,500one-time

  • One straightforward site up to 10,000 sq. ft.
  • Up to 3 onsite hours
  • Walkthrough and approved photographs
  • Prioritized findings and 30/60/90-day plan
  • 30-minute briefing

03 / ADVANCED

Built around complexity.

$4,500starting at · one-time

  • Larger or more complex facilities
  • Detailed scope agreed before work
  • Fixed written quote
  • Multiple sites quoted individually

Every assessment includes intake, evidence review, report quality checks, and secure delivery. Comprehensive replaces Essential's onsite and briefing limits. Assessments do not guarantee protection or exhaustive discovery.

ONGOING SUPPORT

Keep your priorities moving.

Scheduled onsite security reviews and ongoing advisory support. Each plan covers one previously assessed site and follows a separately purchased baseline assessment.

Advisory

$500 / month

Monthly progress call, action-tracker update, and up to 2 total remote service hours.

Site Review

$1,000 / month

One monthly onsite follow-up up to 2 hours, progress summary, and up to 2 remote service hours.

Security Partner

$1,750 / month

One monthly onsite follow-up up to 4 hours, progress summary, selected procedure review, and up to 4 remote service hours.

Remote hours include meetings, review, and correspondence; unused hours expire monthly. Full reassessments are quoted separately. These plans provide scheduled support, without continuous monitoring, guard coverage, or emergency response.

PLANNING DETAILS

Clear terms before the visit.

Additional services

Standalone follow-up: $450 for up to 2 onsite hours and a short written update. Additional consulting: $175/hour, approved in writing. Additional sites, full reassessments, and additional policy review require a written quote.

Payment & travel

Assessments: 50% deposit, with the balance due within 15 days of final delivery. Salt Lake County travel is included; travel elsewhere is quoted beforehand.

Monthly plans are paid in advance and allow cancellation on 15 days' written notice, with earned fees and refunds handled under the agreement.

SAMPLE DELIVERABLE

See what actionable looks like.

A fictional MN-1 Professional Security Assessment report excerpt. Every site, observation, evidence reference, and risk rating below is invented for illustration. It is not a customer report.

ILLUSTRATIVE / FICTIONALSAMPLE-001 · MN-1 Professional Security Assessment

Example Operations Center

Fictional single-site facility · Selected visitor procedures · Illustrative report excerpt

Executive summary

The fictional review identified an inconsistency in visitor record completion. The priority is to clarify the existing procedure, assign responsibility, and verify that it is followed during normal operations. This limited example does not assess the facility's overall security.

F-001 / VISITOR RECORD COMPLETENESS

Incomplete visitor checkout records

Observed condition
In a fictional sample of ten visitor records, four lacked a departure time. The procedure reviewed did not identify who was responsible for completing checkout.
Evidence references
E-001: fictional, redacted visitor-log excerpt. E-002: fictional procedure excerpt. E-003: fictional client-approved interview note. No real records or identities are included.
Risk priority
Moderate — illustrative likelihood: possible; impact: moderate. Incomplete records may reduce accountability for visitor presence. This is not evidence of an intrusion or a prediction of harm.
Recommendation
Assign checkout responsibility, clarify the departure-record step, train relevant personnel, and sample completed records to confirm consistent use.
Limits
Small selected sample; no testing of access controls, emergency procedures, or system integrations. The rating applies only to this fictional finding.

30 / 60 / 90-day action plan

BY DAY 30

Site manager assigns a procedure owner and approves the revised checkout step. Completion evidence: approved procedure and named owner.

BY DAY 60

Procedure owner briefs relevant personnel and samples records weekly. Completion evidence: briefing record and documented checks.

BY DAY 90

Site manager reviews consistency and resolves recurring gaps. Completion evidence: review summary and any corrective actions.

Actual reports reflect the agreed scope and supported evidence and include an executive summary, findings, evidence index, priorities, limitations, recommendations, and a briefing.

WHAT HAPPENS NEXT?

From your request to clear priorities.

The service journey after a request is received. Intake expresses interest; written scope and authorization come before assessment activity.

  1. Request / Intake

    Describe your site and assessment preferences.

  2. BSO scope review

    Confirm objectives, site complexity, boundaries, and package eligibility.

  3. Written quote

    Review pricing, deliverables, and any quoted extras or travel.

  4. Agreement & authorization

    Sign the MSA and SOW and document permitted activities and required consents.

  5. BETI Context Review

    Review pre-visit information and relevant authoritative surrounding context.

  6. Scheduling

    Agree the visit window, access arrangements, and delivery schedule.

  7. MN-1 Assessment

    Complete the authorized onsite observations and evidence collection.

  8. Report & action plan

    Receive the reviewed findings and 30/60/90-day recommendations through the agreed channel.

  9. Briefing

    Discuss priorities, report limitations, and practical next steps.

START WITH YOUR SITE

Request an Assessment.

Build a request draft for scope review. Your selections express preferences; the signed agreement establishes the final price, scope, and authorization.

Assessment package
Ongoing support
Optional services

Areas of concern
Site details

Contact & authority

Please do not upload passwords, access codes, security plans, or sensitive incident records through this form.

Official BSO business contact: pending configuration. Direct request delivery is not yet connected. This form creates a draft on your device. It does not send a request, collect payment, or authorize assessment activities.

Read our Privacy notice and Website terms before entering information.

STAGE 1 / REQUEST REVIEW

Assessment Request / Authority-to-Request

Review your information before preparing an acknowledgment. This request is separate from the quote, agreement, and authorization that follow BSO scope review.

Complete review and consent to prepare for signing.

Request submission remains disabled while the intake connection is prepared. Your request draft stays on your device.

Digital signing and request delivery are not connected. No signature is executed here and BSO has not received your request. Nothing on this page authorizes assessment work.

Stage 2: BSO scope review → written quote → signed MSA/SOW and explicit authorization. The intake acknowledgment does not replace these documents.