Frequently Asked Questions

We work with organisations that manage people, property and assets but do not have in-house security and risk capability. Our clients include local and state government, aged care and health providers, universities, utilities, critical infrastructure operators and commercial property groups. We are best suited to multi-site organisations where security complexity is high and the cost of getting it wrong is significant.

We have deep experience across local and state government, aged care, health, education, utilities, critical infrastructure, commercial property and retail. We have conducted security assessments across more than 850 sites including over 100 major shopping centres. That breadth means we bring genuine sector knowledge to each engagement rather than applying a generic approach.

We work across both. While many of our engagements involve multi-site programs, we also work with single-site organisations where the complexity or consequence of risk warrants specialist advice. The right fit is less about size and more about whether independent, expert input will materially improve the outcome. If you are unsure, a conversation costs nothing.

Yes. We operate nationally and have delivered engagements across every state and territory. While our offices are in Melbourne and Sydney, our consultants travel to client sites as required. Location is not a constraint for most engagements.

We are independent consultants. We do not sell products, install systems or supply guards. That means our advice is driven entirely by your risk profile, not by what we have a commercial interest in recommending. We also take a whole-of-program view covering risk, design, procurement and operational governance rather than addressing one element in isolation.

Our consultants hold certifications including Certified Counter Terrorism Practitioner and membership of the International CPTED Association. Matryx is a member of the Australian Security Industry Association Limited and an approved supplier to both the Victorian and New South Wales governments. We operate under ISO 31000 risk management frameworks and carry professional indemnity insurance.

It depends on the scope, complexity and number of sites involved. A single-site security risk assessment for a straightforward environment sits at a different scale to a multi-site program or a major technology design project. We provide a clear scope and fee proposal before any work begins so there are no surprises.

A single-site security risk assessment typically takes two to four weeks from site visit to final report. More complex engagements involving multiple sites, procurement management or security design take longer and are scoped accordingly. We agree timeframes upfront and structure engagements so clients receive actionable outputs at each stage rather than waiting until the end.

Contact us by phone or email to discuss your situation. We will ask a few targeted questions to understand your environment, what is driving the need and what outcomes you are looking for. From there we provide a scope and fee proposal. There is no obligation at that stage and no cost for the initial conversation.

Common triggers include a recent incident, a new or refurbished facility, an upcoming security contract renewal, a compliance requirement or simply not having reviewed security arrangements in several years. If you are making significant decisions about security technology, guarding contracts or risk management without independent advice, a consultant adds the objectivity and specialist knowledge most internal teams do not have.

A security manager is an employee responsible for delivering and overseeing security operations within an organisation. A security consultant is an independent specialist engaged to provide objective advice, assessment or design that the organisation does not have the internal capability to produce. Consultants are typically engaged for specific projects, reviews or programs and bring cross-sector experience that an internal manager focused on one organisation rarely accumulates.

A security management plan is a formal document that defines how security will be delivered, measured and governed across your organisation. It sets objectives, assigns responsibility, establishes standards and provides a framework for ongoing review. Organisations managing multiple sites, public-facing environments or higher-risk operations benefit most. Without one, security tends to be reactive, inconsistent and difficult to audit or improve systematically.

Duty of care requires organisations to take reasonable steps to protect the people in their environment. What is reasonable depends on the nature of the environment, the people it serves and the risks present. Independent security consulting establishes what those risks are, what measures are proportionate and whether current arrangements are adequate. It also creates a documented record that the organisation has actively assessed and addressed its obligations.

Governance determines who is responsible for security, how decisions are made and how performance is measured and reported. Without it, security operates without accountability. Equipment gets installed, contracts get renewed and incidents get recorded, but nobody is systematically asking whether the program is working or improving. Good governance connects security activity to organisational risk appetite, assigns clear ownership and ensures that investment in security produces measurable outcomes.