Protective design is one of the few areas of building engineering where the consequences of getting it wrong are measured in lives, and where most owners have no basis for judging quality. A glazing retrofit, safe room or facility siting study is only as good as the people who assess the risk, design the measures and verify the installation. This buyer's guide explains who does what on a protective design project, which credentials matter, what to ask in interviews, and the red flags that should end a conversation.

Who does what on a protective design project

Larger projects usually involve a small team. Knowing the roles helps you ask the right firm the right questions.

Credentials that matter

Professional licensure

Engineering design for buildings must be sealed by a professional engineer licensed in the state where the project is built. Licensing exams for the Professional Engineer (PE) and Structural Engineer (SE) credentials are developed by NCEES, while each state's licensing board issues and disciplines licenses. Some states, such as Illinois, require a separate structural engineering license for certain structures. Verify any license directly on the state board's online lookup.

Security certifications

For risk assessment and security planning roles, ASIS International offers the Physical Security Professional (PSP) and Certified Protection Professional (CPP) certifications. These are not engineering licenses, but they indicate recognized knowledge of physical security assessment and practice.

Relevant experience

Credentials establish a baseline; experience with your specific framework is what separates firms. A federal civilian project needs familiarity with the ISC standards; a DoD project needs UFC experience; a refinery needs API RP 752/753 experience; a school safe room needs ICC 500 and FEMA P-361 experience. Our guide to protective design standards explains each framework so you can match it to the firm's track record.

A selection process that works

1. Define the need. Write a one-page description of the building, occupancy, the concern (for example glazing hazards, siting, safe room, natural hazards) and any required standard. Do not include sensitive vulnerability details at this stage.
2. Build a shortlist. Ask peers in your sector, your insurer and industry associations for referrals. Look for firms that publish technical papers or present at professional conferences on protective design.
3. Request statements of qualifications. Ask for relevant projects, the specific people who would work on yours, their licenses and their roles on past projects.
4. Interview. Meet the actual project engineer, not just a business development lead. Use the questions below.
5. Select on qualifications. Federal agencies select architects and engineers on qualifications under the Brooks Act before negotiating fees, and many states follow similar rules. Private owners benefit from the same approach.
6. Agree on scope and deliverables. Define the assessment, design, specifications, submittal review and construction-phase services in writing.
7. Set information-handling rules. Agree how sensitive reports and drawings will be marked, stored and shared.

Questions to ask in an interview

Scoping common project types

Glazing retrofit

Scope should include a survey of existing glass, frames and anchorage; selection of an appropriate retrofit system; specifications that reference tested configurations; review of installer submittals; and inspection of installed attachment details. Our retrofit options comparison explains the systems you may be choosing between.

Storm safe room

For community safe rooms, the design professional should prepare documents to ICC 500 and, where FEMA funding or FEMA criteria apply, FEMA P-361, including the required special inspection program. For homes, a contractor following FEMA P-320 prescriptive plans or installing a verified prefabricated unit may be sufficient. See our safe room guide.

Industrial building siting

Expect a process safety specialist to develop hazard scenarios and a structural engineer to evaluate building response, with clear documentation of criteria and assumptions. Ask how the study will be updated through management of change.

Natural hazard resilience

Scope often combines structural evaluation (for example ASCE 41 for seismic), nonstructural anchorage, envelope and roof upgrades and backup power, as outlined in our critical infrastructure guide.

Protecting the information you generate

Risk assessments and protective design drawings describe how a building could be harmed and how it is protected. Treat them as sensitive. Limit distribution to people who need them, include confidentiality terms in contracts, mark documents clearly, and keep detailed findings out of public bid packages where possible by sharing them only with prequalified bidders. Federal projects have specific handling requirements, such as those for Controlled Unclassified Information.