External and physical
Where access becomes risk.
Perimeter and cameras, access control and biometrics, guard patrols, visitor control and evidence retention. Sets whether an event can be evidenced and a claim defended.
YAVA / Risk Intelligence
From declared risk to observed risk.
Most assets look secure on paper. The Risk Intelligence Platform, known as RIP, sends engineers to the asset to check what is really in place across physical security, technology and staff procedures, scores it, and sets out what to fix. Where remediation is needed, the same team can deliver it.
The principle
What is declared is reviewed remotely. What is actually in place is verified at the asset.
Most risk assessments depend on documents, questionnaires and remote checks. These show what should be in place. They do not always show what is working.
Our engineers visit the asset to test the controls, inspect the equipment, speak to staff and understand how a failure could happen.
Why it matters
Every assessment produces a RIP Score Report out of 100, the evidence behind it, how a loss could occur and a prioritised plan. We can then deliver the improvements.
The three layers
Three layers, one score.
Each layer is scored, and the three combine into one figure out of 100 your underwriter can rely on and you can track at every review.
Internal technology
Where systems become loss.
Network design and segmentation, identity and privileged access, core systems, operational technology and cloud, and backup and recovery.
People and procedures
Where behaviour breaks control.
Credential handling, multi factor sign in, incident response and escalation, and threat awareness. Decides whether good systems hold up under pressure.
Explore by environment
Select an asset to see what we assess.
Choose an environment to see the systems YAVA can assess and integrate, and the risks we examine on site. The mix is always tuned to the specific asset.
Environment
Airport
An airport is many operators sharing one site, where revenue, safety and security all depend on systems agreeing.
Systems YAVA assesses and integrates
- Revenue, billing and reconciliation
- Access control, ANPR and vehicle management
- CCTV and video management
- Perimeter detection
- Airside and landside networks
- Operational and resource systems
- Control room and command environment
Risks we examine
- Revenue leaking between systems that do not reconcile
- Access to restricted airside zones
- Blind spots in surveillance coverage
- Operational and business networks not properly separated
- Single points of failure in 24 hour systems
Environment
Hotel or resort
A hotel runs property, payment, guest network, surveillance and access systems, usually bought separately and never joined up.
Systems YAVA assesses and integrates
- Property management system
- Payment estate and segmentation
- Guest and staff networks
- CCTV and video management
- Access control
- Booking and channel integration
Risks we examine
- Guest and payment data exposure
- Guest network not separated from operations
- Gaps in surveillance and access coverage
- Incidents that cannot be evidenced afterwards
- A weak position at insurance renewal
Environment
Port or terminal
A port runs automation and control systems next to business networks, over a large site, without room to stop throughput.
Systems YAVA assesses and integrates
- Terminal and yard workflow
- Control and automation systems
- Surveillance, ANPR and access
- Site-wide networks
- Customs and documentation integration
Risks we examine
- Control networks joined directly to business IT
- Losses at the gate and in the yard
- Surveillance gaps across a large site
- Downtime that stops throughput
- An unclear boundary between OT and IT
Environment
Industrial site
Energy and industrial assets are often remote, spread out, and running ageing control systems never meant to be connected.
Systems YAVA assesses and integrates
- Operational technology and control systems
- Asset monitoring and telemetry
- Perimeter, CCTV and access
- Secure communications
- Remote monitoring and support
Risks we examine
- Ageing control systems exposed once connected
- Remote sites with no local technical support
- Physical security spread thin over a large area
- Safety and environmental consequence of failure
- No monitoring until something has already broken
Environment
Government building
A public building combines access, identity, records and building systems, often owned by no single team.
Systems YAVA assesses and integrates
- Access control and identity
- CCTV and video management
- Visitor and records systems
- Networks and infrastructure
- Service desk and support
Risks we examine
- Access and identity weaknesses
- Records and data exposure
- Systems no single team fully owns
- Continuity and recovery that has never been tested
- A security position assumed rather than evidenced
What we assess
The three layers of an assessment.
Every Risk Intelligence assessment looks across three layers, from the outside in, so declared risk becomes observed risk.
L1External
Where access becomes risk.
L2Internal
Where systems become loss.
L3Training
Where behaviour breaks control.
Output → RIP Score Report · External / Internal / Training scored on a 100-point scale · each finding weighed on likelihood × impact × exposure · prioritised loss pathways · remediation roadmap ranked by risk reduction per £ spent.
How the process works
Six steps from scope to remediation.
01 / Scope
Scope
We agree the asset, the boundaries of the assessment and the timing.
02 / Remote review
Remote review
We review policies, documents and system information before we travel.
03 / On site
On site
Engineers inspect the asset, test controls, examine equipment and speak to staff.
04 / Score
Score
Each layer is scored and combined into one figure out of 100.
05 / Report and brief
Report and brief
You receive the report, the evidence and an insurer brief where required.
06 / Remediate
Remediate
Optional. Our engineers deliver the improvements and the asset is rescored.
What you receive
The report, and what it is for.
After the assessment you receive a written report covering all three layers, with each layer scored, the evidence behind it, and what to do next.
RIP Score Report
Each layer scored out of 100, combined into one composite figure, with the evidence behind every score.
Loss pathway map
How an incident would actually travel through the site, from first access to financial loss.
Prioritised action plan
What to fix first, in order of impact and cost, so budget goes where it reduces risk most.
Insurer ready brief
A summary written for underwriters, evidencing what is in place at the asset.
At renewal
Give your insurer real evidence to price against, supporting better terms and wider cover.
In the boardroom
Show the risk position of an asset in one number, and justify spend with a costed plan.
On the ground
A clear work list for your site teams, and the basis for the repairs we carry out.
Over time
Rescored at each reassessment, so progress is easy to see and easy to prove.
Who uses the output
One report several people can work from.
Insurers and MGAs
Evidence based pricing and renewal support.
Asset owners
An honest map of what works and what to fix first.
Operators
Prioritised remediation against real failure paths.
Brokers
A technical partner to refer in without ceding the client.
Investors
Operational diligence at entry and through the hold.
Lenders
Verified operational risk before commitment.
Assessment and remediation from one team
We fix what we find.
RIP is an extension of YAVA's engineering. Because the same firm can find the issues and fix them, you buy risk reduction rather than risk identification. This is a service designed to prevent incidents.
01
Pilot assessment
One complex or high value site, fully assessed, with a report you can act on.
02
Portfolio review
We screen part of your portfolio and show where the largest, most cost effective gains sit.
03
Full programme
Ongoing assessment, repair and monitoring across a defined set of sites.
Risk Intelligence FAQ
Common questions about RIP.
What is included in a Risk Intelligence assessment?
A RIP assessment runs across three layers: external and physical, internal technology, and people and procedures. Each layer is inspected on site, scored, and combined into one figure out of 100. You receive a RIP Score Report with the evidence, a loss pathway map, a prioritised action plan and an insurer ready brief where required.
Why is an on-site engineering assessment necessary?
Documents and remote checks show what should be in place. They do not always show what is working. Engineers on site test the controls, inspect the equipment, speak to staff and see how a failure could actually happen, which is what changes the score.
Can YAVA implement the improvements it recommends?
Yes. Because the same firm can find the issues and fix them, the asset is remediated and rescored, so you buy risk reduction rather than risk identification.
How does YAVA work with insurers?
The insurer ready brief evidences what is in place at the asset, supporting pricing at renewal and a defensible file at claim stage. Reassessment shows a measurable change in the risk between renewals.
Contact
Tell us what needs to work.
Whether you need advice on what to build, a system delivered and deployed, or an asset assessed and put right, a short conversation will tell you whether we fit the problem.