Skip to content
Home » Security & Risk Advisory

Security & Risk Advisory

Joshua J Heeley | Security & Risk Advisory
Joshua J Heeley Security & Risk Advisory • AI & Synthetic Data
Independent, practical second opinions for leaders under pressure

Security that works in the real world, not just on paper.

I help organisations in South Africa identify why security systems fail quietly, where predictability has crept in, and what to change so decisions are faster, calmer, and more defensible.

  • Reality Check ReviewsPinpoint gaps in design, escalation, and routine that create exposure.
  • Decision & Incident SupportHelp leadership choose what to do when information is incomplete.
  • Risk + AI, without hypePractical guidance on where AI helps, where it misleads, and how to avoid overreliance.
Book a short call See offers hello@zalingo.africa

“Good security is rarely visible. When it works, nothing happens.”

Security advisory promotional graphic 1
Security & Risk Advisory Independent • Practical
Security advisory promotional graphic 2
Decision-Making Under Pressure Leadership focus
Security advisory promotional graphic 3
Calm, Clear, Actionable No hype

What I do

I sit above installers, guarding, and vendor proposals. My job is to stress-test whether the security system makes sense in the environment it operates in.

Independent second opinion No product agenda. No commission bias. Just clear judgement.
System design clarity Escalation, routine, authority, coverage, and decision friction.
Practical AI reality checks Where automation helps, where it misleads, and how to avoid overreliance.

Common problems I help solve

“We have a lot in place, but it still doesn’t feel safe.” System coherence

We identify contradictions between policy, expectation, and what staff can actually do under pressure.

  • Where routines have become predictable
  • Where escalation is slow or unclear
  • Where coverage exists on paper but not in reality
“Incidents keep repeating, just with different details.” Pattern disruption

We look for repeating conditions, not one-off events, and design controlled variation that stays operationally stable.

  • Patrol timing and route predictability
  • Access shortcuts and informal permissions
  • Blind spots created by assumptions
“We want AI, but we don’t want hype.” AI without illusions

We map where AI adds value, where it introduces automation bias, and how to keep humans accountable.

  • Alert design and verification workflow
  • False positives, fatigue, and missed anomalies
  • Integration with real response capability

“The greatest security weakness is predictability.”

Principle used throughout my advisory work

Offers

Start small. Get clarity fast. Scale only if it’s genuinely useful.

We can do this remotely, on-site, or hybrid depending on context.

1) Advisory Call 60–90 minutes

A focused call to clarify what’s happening, what matters most, and what to do next.

  • Ideal for leaders who want a second opinion before spending more
  • Clear next steps and decision options
  • No slide decks, no fluff
2) Security Reality Check Fast review + written summary

A practical review of your security system’s logic, routines, escalation, and exposure points.

  • Identify predictable patterns and decision friction
  • Highlight high-leverage changes that don’t require major spend
  • Short written summary with priority actions
3) Incident & Decision Support As-needed

Support when decisions are high-stakes and information is incomplete.

  • Scenario framing and decision options
  • Escalation and communication structure
  • After-action learning loop that improves the system

Who it’s for

People responsible for outcomes, not optics.

Executives & Ops Leaders When security must support operations, not fight them.
Estate & Property Managers Complex environments with predictable routines.
Industrial & Logistics Perimeter, access, and response timing under real constraints.

Good fit if you’re thinking:

“We need clarity before we spend more.”

We identify what is actually driving exposure, then decide what is worth improving and what is not.

“We want a system that endures, not a system that looks impressive.”

We focus on decision speed, controlled variation, escalation clarity, and recovery design.

“We want to modernise, but we don’t want illusions.”

We integrate technology where it helps, and keep humans accountable where it matters.

“Good security is rarely visible. When it works, nothing happens.”

That is the goal, and the test.

Want a second opinion on your security system?

Email a brief overview of your context and what you want to achieve. I’ll reply with the best next step, whether that’s a short call, a quick review, or a simple change you can make immediately.

© Joshua J Heeley • Zalingo • hello@zalingo.africa