Built Environment & Infrastructure in Kingdom of Saudi Arabia

A Royal Commission project required comprehensive security support across all stages of design and delivery.

A holistic framework

Control Risks deployed experienced consultants to work with the client’s team. We supported operations through risk assessment, strategic planning, technical systems design, procurement oversight, construction supervision and operational governance, applying CPTED principles and RIBA competencies.

Our team delivered briefings tailored to the specific exposure, established a comprehensive security program aligned with the client’s footprint in the country and conducted security risk assessments of existing field sites. To proactively identify and manage risks, we also proposed project locations.

Certainty through strategic solutions

Control Risks’ involvement provided more than a set of recommendations. We created a compliant security framework, allowing the client to operate at the highest level with confidence.

The development of a unique luxury destination which included a wellness resort, residential units, an airport and yacht marina presented security challenges and required a review of the client’s existing security strategy.

Safeguarding high-profile clientele

The client’s clientele of ultra-high net-worth individuals (UHNWI) in the Kingdom of Saudi Arabia required an uncompromised environment.

Control Risks conducted a peer review of the client’s existing security strategy to meet regional and international regulatory standards. Our comprehensive assessment identified gaps and enabled the development of an updated regional security risk approach. The review rationalised costs, improved integration of security measures and enhanced planning for external stakeholder facilities.

We also provided ongoing risk management, strategy advisory, and design support to integrate security planning and design into masterplans and plot-level developments.

Setting a new standard

Control Risks helped the client redefine their security approach, shifting from isolated protection to collective security for the entire luxury resort destination. This established a more effective and integrated security framework.

Facing allegations of labour rights violations at construction sites in Saudi Arabia, a global company required urgent investigation and remediation strategies to address reputational risk and align operations with international welfare standards.

Rapid response delivering a remediation roadmap

Control Risks deployed a rapid-response team of nine experts within two weeks. We conducted 450 worker interviews, 34 company audits and 7 accommodation assessments. The client was provided with detailed reports and a remediation roadmap, including a worker-paid fee the repayment process.

Rights of thousands safeguarded

Our intervention enabled immediate corrective actions and established a comprehensive remediation strategy. Thousands of workers will receive compensation through the repayment process. Control Risks also oversaw remediation of other abuses and proposed preventative measures to ensure future compliance.

Our client’s vision for a global entertainment, sports and culture destination required a multi-layered, scalable security and resilience framework, aligned with national mandates and international standards.

Wide-ranging support

Control Risks designed and implemented a multi-layered framework covering physical, digital and organisational domains. Ensuring alignment with national regulatory mandates and international standards, including ISO 22301, ISO/IEC 27001, our support spanned security master planning and design to mobility and infrastructure, operational security capability development, data, technology and digital risk consulting, construction security consulting and fire life safety advisory.

A robust foundation

Aligned to our threat and risk assessments, the client implemented a comprehensive security framework, including policy, strategy and resilience guidance. They now have refined, risk-based processes for security master planning and an established governance framework for incident and security management, enabling a more resilient approach to construction and operations.

An airport developer required a robust, integrated security strategy and pre-concept design to support its masterplan, covering terminal and airfield assets.

World-class aviation security

The client required a robust security strategy and pre-concept design but lacked detailed, integrated guidance for airside and terminal security. Control Risks conducted a tailored threat and risk assessment and developed a security strategy and pre-concept design that aligned spatial, procedural and system requirements with international standards.

We established a comprehensive and scalable framework, mapping critical assets and operational areas with tailored security controls to ensure resilience against terrorism, criminal activity, sabotage and other security threats.

Our proposed security architecture facilitated future integration under a Physical Security Information Management (PSIM) approach, enabling centralised monitoring and incident response across terminal, airfield and critical asset layers.

Embedding operational resilience

By embedding forward-compatible systems and governance principles, the security framework supports the client's long-term vision of world-class aviation security, providing seamless, risk-informed protection for passengers, crew and airport operations while ensuring compliance with ICAO, GACA and project standards.

Control Risks supported a leading Saudi engineering consultancy to design security for an international airport’s major assets across terminals, runways and control facilities.

A scalable, compliant approach

The client needed a scalable, compliant security framework for complex, multi-asset development. Control Risks led as security advisor, embedding security design into all project phases, covering terminals, airside/landside zones, access control and surveillance.

For primary facilities, security requirements were integrated from initial concept through technical design, coordinated with architects and engineers using the RIBA Plan of Work. For other components, deliverables were provided at key milestones (30%, 60%, 95%, IFC), maintaining technical standards and risk mitigation. This flexible, methodical approach enabled proportionate security design for each asset type.

Our recommendations supported operational efficiency, compliance with ICAO, IATA, and GACA standards, and long-term resilience.

Sustaining operational security

The early integration of security principles ensured that infrastructure is prepared to address evolving threats while maintaining passenger experience and cost-effectiveness, exemplifying best practice in mega airport program delivery.

The client required a current state assessment of its operational security capability to define a formal strategy and implementation roadmap for a Giga project. Throughout the lifecycle of development, the client identified that security threats and design considerations were inconsistently addressed.

From fragmentation to fortification

Control Risks assessed the current state, finding fragmented security governance and capability across departments.

Our security strategy and governance structure, supported by the target operating model, established a comprehensive and scalable framework for the client. Layered security measures including perimeter protection, identity and access management controls and restrictions based on land use and adjacency, were combined with operational procedures to support situational awareness and coordinated response. Scalable operational security capability was designed based on the criticality of assets and threats associated with the operational environment, whilst maintaining the requirement for security to maintain front of house presence as customer service ambassadors.

We also proposed the security SOC architecture to facilitate future integration under a Physical Security Information Management (PSIM) approach, enabling centralised monitoring and incident response across all districts in the development.

A blueprint for effective security

Following acceptance of the security strategy and target operating model, Control Risks worked with the client to create fit for purpose SOPs and assisted in stakeholder engagement and implementation support. This established a clear approach for the transition of assets and long-term security delivery.

A developer required an independent peer review of security strategies and solutions across its portfolio and assistance with remediation or rectification advisory services.

Risk mitigation and regulatory compliance

As a result of suspected issues with the client’s development and potentially higher than desired vulnerability and risk exposure, the client sought security advisory and design peer review services. We reviewed current risk assessments, security strategies, security designs and regulatory compliance. We also have assessed the designs of several time-sensitive projects nearing completion and identified areas that required improvement.

Timely risk reduction

The client found Control Risks’ independent reviews valuable. By adopting our recommendations, they achieved higher levels of risk assurance and regulatory compliance.