Frequently asked questions

Yes. An Individual or Team licence grants the right to use IPSRM™ in professional practice and to describe your assessments as IPSRM™-based in proposals, engagement letters and client-facing outputs.

Yes, with attribution. Your name, your firm's details and your firm's logo appear on the Executive Report cover, so the report your client receives carries your professional branding as the delivering consultant.

IPSRM™ is identified as the governing methodology within the report, as a brief methodology statement rather than a prominent disclosure. You cannot present IPSRM™ as your own methodology or remove the trademark. Your professional brand is yours; the methodology brand is ours.

An Individual licence is for one named user, on up to two devices: for example, a phone or tablet on site and a laptop at the desk. A Team licence gives each named user their own licence key, for two to five users. Licence keys are personal to the named user and are not to be shared.

Organisational licensing above five named users is arranged directly. Contact us with your team size and we'll tailor a licence to suit your organisation.

Martyn's Law, the Terrorism (Protection of Premises) Act 2025, requires Enhanced tier premises to conduct a terrorism protection assessment and produce a documented security plan. IPSRM™ provides the structured methodology within which that requirement can be met and documented in governance-ready form.

Domain 1 (Strategic Threat Context) establishes the credible threat profile Martyn's Law requires; the remaining five domains evaluate physical and operational controls against it. IPSRM™ is a broad physical security methodology, not a Martyn's Law-specific compliance tool, so practitioners should ensure their Domain 1 assessment specifically addresses the terrorism threat drivers relevant to the venue in question.

The IPSRM™ Practitioner System: the Practitioner Handbook, which sets out the methodology in full, and IPSRM Field, the app in which you record findings on site, calibrate them and produce the Executive Report and Risk Register. The complete Ardmore Logistics assessment is included in IPSRM Field as a permanent worked reference.

Individual covers a single named user; Team covers two to five named users. Current terms are on the Licensing page.

IPSRM Field runs in a current web browser (Safari, Chrome or Edge) on a laptop, tablet or phone, with nothing to install and no account to create. You can add it to your home screen so it opens like any other app. If a browser is too old, IPSRM Field says so rather than failing silently.

The Executive Report is produced as a Word document and the Risk Register as an Excel workbook, ready to finalise and issue in the usual way.

On your own device. There is no IPSRM server holding your assessments, and we cannot see them. The only information IPSRM Field sends anywhere is your licence key, which is checked with our sales platform, Gumroad, when you enter it and about once a week afterwards. No assessment data is ever sent.

Because your work stays on your device, keeping backups is your responsibility: IPSRM Field makes a backup file from Settings for you to keep somewhere safe. Full details are on the Security and data page.

Yes. Once IPSRM Field has been opened on a device, it works without a connection, so a basement plant room or a remote site is no obstacle. Entering your licence key needs a connection, once.

Your work is held on the device itself, so make regular backups and keep them somewhere other than the device. On a new device, restore your latest backup and enter your licence key. If the key isn't accepted, email support@ipsrm.org and we'll reset it.

The demo is a complete IPSRM™ assessment of a fictional company, Ardmore Logistics Ltd, inside IPSRM Field. It's free and needs no account. You can explore every finding, edit it, run the pre-report check and make the Executive Report and Risk Register. A licence lets you carry out your own assessments.

No. The demo is for evaluation only, and every report or register made in it is marked as a demonstration.

There's no need. IPSRM Field is built for on-site use on a phone or tablet: you capture photos and findings during the site walk, then calibrate them and produce the report at the desk. Calibration and tier determination are built in.

We don't support moving the methodology onto third-party inspection platforms. IPSRM™ is a methodology, not a checklist, and a generic platform would reduce a professional assessment to a checklist exercise, which is not what IPSRM™ produces.

A separate programme for organisations assessing more than one site, adding the methodology and instruments for consistent multi-site deployment. It is priced and licensed independently, and can be taken alongside an Individual or Team licence.

Try it first. The demo and the free Handbook excerpt let you evaluate both the app and the methodology before you buy. Founder Practitioner licences also carry a 60-day guarantee. Full terms are in our Terms of Sale.

IPSRM™ is a practitioner-level methodology. It assumes familiarity with physical security assessment practice and is designed to structure and elevate existing professional competence rather than replace it; it isn't a training programme. The demo shows a complete assessment in practice and is a useful starting point.

Yes. IPSRM™ was designed for three contexts: independent consultants seeking a rigorous, structured methodology; in-house security leaders producing evidenced assessment outputs for boards and audit committees; and governance and assurance professionals who commission or oversee physical security assessment work. Both licence tiers serve all three.

IPSRM™ is jurisdiction-neutral in its methodology and domain architecture. Where specific compliance obligations are relevant, such as licensing requirements, regulatory frameworks or statutory duties, the methodology requires practitioners to assess against the applicable framework for their jurisdiction. IPSRM™ provides the structural architecture; the practitioner provides the jurisdictional knowledge.

It doesn't replace it; it feeds it, on the physical security side. ISO 31000 calls for risk assessment that is structured, repeatable and transparent. IPSRM™ is how that is applied consistently at the physical security assessment layer, rather than left to individual judgement from one site or one assessor to the next. The Executive Report is designed to sit alongside your existing governance reporting, not to duplicate or compete with it.

IPSRM™ is an independent practitioner methodology, not currently accredited or endorsed by a professional body, standards organisation or regulatory authority. It is designed to complement existing professional standards rather than replace them: practitioners holding qualifications such as ASIS certifications or Association of Security Consultants membership will find that IPSRM™ provides the operational architecture those frameworks don't prescribe.

Founding Practitioner Programme licences are invoiced directly by Vertex Method Ltd. Once payment is confirmed, your licence key arrives by email, together with the Practitioner Handbook, a getting-started guide and your Founding Practitioner Certificate.

To activate it, open IPSRM Field and choose Have a licence key? Enter it here on the opening screen. Your licence is governed by our Terms of Sale. If you need a formal Licence Confirmation for your records, naming you, your licence tier and a licence reference, just ask.

Email support@ipsrm.org or use the Contact page, for questions about the methodology, IPSRM Field or your licence. We aim to reply within two working days. If something isn't working, a screenshot helps us resolve it quickly.