Choosing help to prioritise fixes on a real budget

When money is tight, a risk assessment consultant who helps you spend on the right fixes first makes the difference between actually getting safer and overspending on the wrong things. The real skill is ruthless prioritisation within your constraints, not a perfect-world shopping list.

The consultant who knows your sector's real weak points

Your business isn't generic, and neither are the threats that matter most. A consultant who understands your industry—retail security, office work, warehousing, hospitality, manufacturing—already knows which vulnerabilities show up again and again and which risks are overblown for your sector. They don't waste time sending you to fix things that don't apply to you. Someone new to your industry will often recommend a standard package that works somewhere but not for you, which is costly dead weight on a tight budget. Ask how many assessments they've done in your field. Ask what they see as the three biggest vulnerabilities they typically find in businesses like yours, then listen for answers that feel earned, not generic. A consultant who's done the homework will save you thousands by steering you away from unnecessary fixes.

Proof they've seen fixes actually work on real sites

A consultant who can walk you through a case—not naming the client, but describing the actual problem, the fix they recommended, the budget constraint, and what happened—is someone who understands what sticks and what doesn't in practice. Budget pressure is real everywhere; a good consultant has learned which measures give you the most safety payback for the rand spent, and which are nice-to-haves that you can shelve for later. Red flags are consultants who give you a long list without ranking it, or who treat all risks as equally urgent. The best ones will tell you candidly what matters now on your budget and what to add when you can. They've also seen when a cheap fix (better signage, a simple procedure change, staff retraining) saves you from spending thousands on hardware. That experience is gold when you're rationing your spend.

How they handle the tension between thorough and honest

There's a subtle trap here: a consultant paid by the job has an incentive to find lots of problems and recommend lots of fixes. A consultant who is genuinely clear about what you *must* fix first versus what's optional is being honest about your budget reality, not undermining their own value. The ones worth hiring will say things like, "You need this now; that can wait six months; this is optional if your cash flow improves." They'll also tell you if a recommendation is because it's essential to safety or because it's best practice—the distinction matters when money is scarce. A consultant who resists ranking their own recommendations, or who makes everything sound equally critical, is protecting themselves rather than helping you. You want someone confident enough to take a stand on what's first, second, third and much later.

When you're comparing candidates, ask each one to give you a rough priority order for a fictional scenario: "Say a small office has a security incident, budget is tight, staff turnover is high, and CCTV is old. Walk me through what you'd tackle first." The answers will tell you everything about whether they think strategically under constraint or just hand you a buffet.

A consultant like this often costs the same as a generic one but saves you multiples of that fee by keeping you focused on what actually matters. Look for someone with sector experience, a portfolio of fixes that worked in practice, and the spine to rank recommendations honestly. Strove hosts verified risk assessment consultants; you can filter for those with specific sector knowledge and read what past clients say about how actionable their advice turned out to be.