Security Risk Templates · by SRMBOK
All security risk guides
Browse the latest articles or search for the problem in front of you. Each guide connects practical advice to a relevant SRMBOK tool.
New to the role? Start with the foundational guides.
-
How Do I Find Gaps in Our Insider Threat Controls?
Use ten diagnostic questions to test insider threat controls. Map gaps to risk entries with a hospital example and a free PDF evaluation tool.
-
How Do I Write a Security Risk Management Policy?
Write a concise security risk policy with clear authority, responsibilities and review. Includes a seven-line example and free one-page Word template.
-
How Do I Turn a Risk Register into Better Decisions?
Turn a stale risk register row into a decision. Rewrite the scenario, test controls and assign treatment owners and dates with a worked example.
-
How Do I Check Whether Information Is Safe to Paste into AI?
Check service approval and run four questions before pasting information into AI. Includes worked examples and the free SRMBOK AI Line PDF.
-
How Do I Make Cybersecurity Reminders Useful to Staff?
Make staff cybersecurity reminders specific and useful. Connect a poster to invoice-fraud controls and download free PNG, PDF and Word files.
-
Where Do I Start When I Am Given Security Risk Responsibility?
Take on security risk responsibility with a practical first-week sequence. Separate urgent fixes from formal assessment and start one working record.
-
How Do I Carry Out a Security Risk Assessment?
Carry out a security risk assessment in nine practical steps. Agree scope, test evidence and record decisions, with a free Excel process-flow template.
-
How Do I Record Security Risks So Someone Can Act on Them?
A free security risk register template with the fields that matter most: risk ID, consequence, likelihood, control evaluation and prioritisation.
-
Do We Need OSCAL for Our Security Compliance Work?
What is OSCAL? A plain-English explanation of the NIST control documentation standard and how to decide if your organisation needs it yet.
-
How Do I Decide Which Information Needs the Most Protection?
See a fully worked information classification example across five systems and four labels, with the written reasoning behind every rating explained.
-
How Do I Prepare a Safety Plan for a Business Trip?
A free business travel safety plan template and the method behind it: risk tiers, emergency contacts, digital footprint and no-internet backups explained.
-
How Do I Use Bow-Tie Analysis to Understand a Security Risk?
Bow-tie analysis explained simply: focal events, causes, consequences and controls, with a worked example, in about the time it takes to read this.