Security Assessment Checklist Ideas For Healthcare Facilities

Last updated: May 1, 2026

A hospital can be an emotionally charged place. Most times, patients are not happy to be there. Their family may disagree with the patient’s care, causing tension. This tension can lead to aggression.

Violence in hospitals is an epidemic. No healthcare worker should be assaulted while trying to perform their job. So it is critical for your security department to conduct an outside security assessment with a certified healthcare security professional. With the help of an outside expert, your hospital security department can determine the correct procedures and train all staff on how to react, no matter the situation.

Security assessments are a holistic look into the overall physical security of a building or facility. It involves a walkthrough of the facility with evaluations of security tools and their functionality. They may spend thousands of dollars on physical security controls, but don’t know whether they are the correct tools and if those tools were implemented correctly. A security assessment can take an objective look at the tools in place, identify where security is strong, and make recommendations on areas that need improvement.

A security assessment for a healthcare facility starts with defining objectives. These can be simple goals such as “maintain hospital operations,” “critical asset protection,” and “patient and staff safety.” Your objectives should take into consideration any disruption to the functions outlined, which could result in significant destruction of the healthcare facility or involve injuries to people.

Each objective has multiple functions that need to be assessed for hazards and susceptibilities. These functions are static, for the most part, regarding the Risk Management Framework Directive. According to the Computer Security Resource Center’s “NIST Risk Management Framework” (2/10/2026), the Risk Management Framework provides a process that integrates security, privacy, and cyber supply chain risk management activities into the system development life cycle (Source: https://csrc.nist.gov/projects/risk-management/about-rmf). These functions of the plan must be followed:

Identify the risks
Protect the assets and services
Detect what is happening, when it is happening, and where it is happening
Respond with the appropriate level of resources
Recover from the event to keep the essential services operational (Continuity of Operations Plan or COOP) for the public good

A successful security assessment of a healthcare facility should include these three components (in collaboration with your security team):

1. Definition of the objectives and what you need to keep safe
If the objective is “personnel safety,” identify the types of people in the building and where they congregate, for example, smoking areas, break rooms, and/or parking lots. Defining objectives cannot be overlooked or blended into other phases. It’s critical that security teams and management work together to clearly identify objectives.

2. Identification of the threats, vulnerabilities, and risks
Threats are defined as an event that would significantly reduce or destroy the functionality of a healthcare facility. These could be naturally occurring or happen because of people’s actions. Vulnerabilities include where and what would be attacked and how to prevent it. Risks are identified as what an attack would do to operations and what is likely or unlikely.

In this step, you identify the types of dangers to personnel. Their likelihood should be listed and given a “rating” as to their probability. The rating system is determined by the security team, but it must make sense and be scaled.

The Department of Homeland Security lists the following as the most likely threats to a healthcare facility:

Active shooters
Disgruntled or violent persons
Bomb detonation
Arson
Criminal violence
Proximity to neighborhood violence
Dangerously-close proximity of the hospital to other high value targets such as military bases, power stations, and government buildings.

3. Application of risk mitigation techniques
At this step in the planning, a meticulous review of resource allocation is required to include the “rating” designators discussed in step 2 to rate the likelihood of one event and its impact versus another. The team should take into account the single-loss expectancy and consider that against the annual rate of occurrence to compute a loss expectancy over a year’s time. Once the decision is agreed upon, it’s time to decide on the types of solutions to implement at your facility.

Solutions

There are numerous possible areas to protect and account for in a healthcare facility. Security integrators can provide guidance to not only select the correct product(s), but also to properly deploy the solutions and give your facility a plan for what success will look like. Here is a sample of the types of solutions available that can help healthcare facilities protect their patients, employees, and facilities.

Access control systems
Visitor management software
Perimeter detection systems and alarms
Intelligent lighting systems
Sensors on doors and windows
Surveillance cameras
Barriers

One of the solutions mentioned above is using visitor management software. eVisitor Software is a stand-along visitor management systems that can affordably increase your facility security and help you always know who is in your building. eVisitor makes it easy for facilities to log, identify, track, and run reports on visitors. Watch this video to learn more, then request a free demo today!

Schedule a demo of eVisitor Software for Visitor Management

##Sources:
– Computer Security Resource Center. “NIST Risk Management Framework”. February 10, 2026. https://csrc.nist.gov/projects/risk-management/about-rmf

Back to Blog Listing

Paul Kazlauskas

Paul joined Threshold in 2001 after graduating from Bryant University. After a few years in the Sales Department, Paul transitioned to the Marketing Team in 2005. Over the years, Paul has worked on developing & launching new products, been the designer of customer communication emails, and launched numerous web sites for the Threshold product line. Since 2011, Paul Kazlauskas has been deeply involved in the security and visitor management industry, writing extensively about emerging technologies, market trends, and best practices that shape the field. In addition to his editorial experience, he actively represents his organization at major security trade shows and in-person events, where he connects with industry leaders, explores innovative solutions, and strengthens relationships with customers. His work reflects a hands-on understanding of both the business and technical sides of the industry, earned through years of direct engagement and thought leadership within the security community. A native of Connecticut, Paul enjoys outdoor activities like kayaking, golfing & hiking, as well as spending time with his son and coaching his soccer and baseball teams.

Security Assessment Checklist Ideas For Healthcare Facilities

A successful security assessment of a healthcare facility should include these three components (in collaboration with your security team):

Solutions

Paul Kazlauskas

Paul Kazlauskas

Subscribe to THRESHOLD Updates

Sheryl Kantor

Stacy Keefer

Aris DiGiulio

Noel Turner

Suzanne Corcoran

10% off your first order of Parking Decals and Hang Tags

SIMPLE SOLUTIONS FOR PARKING IDENTIFICATION

Special New Feature: Red Flag, No Badge