Threat Risk Assessment for Campuses, Hospitals and Public Institutions
Jim Pattison Medical Campus

Threat Risk Assessment for Campuses, Hospitals and Public Institutions

3Si Analyst Team in Canada
Sep 29, 2026 Threat Risk Assessment

Some organizations cannot simply lock the doors. Hospitals, universities, courthouses and cultural institutions have to remain open, welcoming and accessible to the public as a condition of doing their core work, while still being genuinely safe for the patients, students, staff and visitors inside them. A threat risk assessment is how an open-access organization resolves that tension deliberately, instead of discovering the trade-offs by accident.

Healthcare is a clear example. A major hospital redevelopment, such as the kind of large-scale healthcare construction 3Si has supported, has to weave threat and vulnerability review into the design from the outset, balancing patient and visitor flow, emergency vehicle and ambulance access, sensitive clinical areas, and continuous twenty-four-hour operation, all inside a facility whose primary purpose requires it to stay open to the public.

Higher education faces a parallel challenge. Campuses host large, transient populations that include international and first-year students unfamiliar with the local environment, and they see their risk profile shift with events as ordinary as a new residence opening or an academic term beginning. Each of those shifts is exactly the kind of trigger that calls for a fresh look at an organization's threat risk profile, not a one-time assessment filed away and forgotten.

For healthcare specifically, the assessment obligation is not only good practice; in Ontario, for example, healthcare employers are legally required under the Occupational Health and Safety Act to assess the risk of violence and build a program of controls around it. That baseline exists before an organization even begins to consider everyday open-access concerns such as after-hours access, wandering or at-risk individuals, protests, or high-profile visitors and events.

Open-access institutions that get this right rarely feel like fortresses. A well-executed threat risk assessment lets security measures recede into the background of daily life precisely because they were placed exactly where the assessment showed they were actually needed.