Security Risk Templates · by SRMBOK
Practical security risk guides
Start with the problem in front of you. Find a clear explanation, a worked example and a relevant SRMBOK template, guide or tool.
Explore the Risk Management Body of Knowledge and the Security Risk Management Body of Knowledge.
Start here: responsibility → scope → assessment → register. The first four guides follow that sequence.
Where Do I Start When I Am Given Security Risk Responsibility?
Take on security risk responsibility with a practical first-week sequence. Separate urgent fixes from formal assessment and start one working record.
How Do I Set the Scope of a Security Risk Assessment?
Agree scope, exclusions and approval before fieldwork. Includes a worked example and free Word security risk assessment scoping templates.
How Do I Carry Out a Security Risk Assessment?
Carry out a security risk assessment in nine practical steps. Agree scope, test evidence and record decisions, with a free Excel process-flow template.
How Do I Build My First Risk Register?
Build a first risk register with clear scenarios, owners and due dates. Compare the Starter Pack with the fuller Word Security Risk Register Template.
How Do I Turn a Risk Register into Better Decisions?
Turn a stale risk register row into a decision. Rewrite the scenario, test controls and assign treatment owners and dates with a worked example.
How Do I Write a Security Risk Management Policy?
Write a concise security risk policy with clear authority, responsibilities and review. Includes a seven-line example and free one-page Word template.
How Do I Assess Our Essential Eight Maturity?
Assess Essential Eight maturity using evidence and current ASD requirements. Identify gaps and use the free SRMBOK Excel assessment tool.
How Do I Set Security Rules for Our Suppliers?
Set proportionate supplier security rules, screening and decision authority. Includes a worked example and free Word and PDF policy documents.
Who Can I Share TLP-Marked Information With?
Check who can receive TLP-marked information, including AMBER+STRICT. Use workplace examples and the free TLP charts and practitioner guide.
How Do I Find Gaps in Our Insider Threat Controls?
Use ten diagnostic questions to test insider threat controls. Map gaps to risk entries with a hospital example and a free PDF evaluation tool.
How Do I Check Whether Information Is Safe to Paste into AI?
Check service approval and run four questions before pasting information into AI. Includes worked examples and the free SRMBOK AI Line PDF.
How Do I Make Cybersecurity Reminders Useful to Staff?
Make staff cybersecurity reminders specific and useful. Connect a poster to invoice-fraud controls and download free PNG, PDF and Word files.