Security Risk Templates · by SRMBOK
All security risk guides
Browse the latest articles or search for the problem in front of you. Each guide connects practical advice to a relevant SRMBOK tool.
New to the role? Start with the foundational guides.
-
How Can I Use AI to Help Draft Security Risk Work?
Thirty ChatGPT prompts for risk practitioners, plus clear rules for what to paste into a prompt and what to always keep out.
-
How Do I Help Staff Recognise a Targeted Phishing Email?
Spearphishing vs phishing: the practical differences staff need to recognise, since the generic red flags in most training don’t catch a targeted attack.
-
How Do I Learn the Bow-Tie Method and Apply It at Work?
This free risk bow-tie method course covers threats, top events, consequences and controls, plus a companion free eBook.
-
How Do I Apply ISO 31000 Without Adding Unnecessary Paperwork?
ISO 31000 explained in plain language: the principles, framework and full process, from setting the context through to risk treatment and review.
-
How Do I Compare Risk Before and After a Treatment?
Recording pre and post mitigation risk as separate, dated fields lets you verify whether a treatment actually worked, not just claim it did.
-
What Cybersecurity Questions Should I Ask at a Board Meeting?
Five cybersecurity questions for boards to ask management, moving past ‘are we secure’ to ones with evidence-based answers behind them.
-
How Do I Explain Network Segmentation to Our Board?
A method for explaining segmentation to a board using an enclave model, a reach matrix and gates, instead of a technical topology diagram.
-
How Do I Run a Bow-Tie Workshop That Produces Useful Actions?
Twelve specific bow-tie workshop mistakes, from vague focal events to unchallenged barriers, with fixes and a facilitator’s review checklist.
-
How Do I Keep a Security Risk Assessment Team Working to the Same Process?
A free security risk management wall chart set to keep your project room aligned on what stage the work is at, who leads it, and what happens next.
-
How Do I Turn Risk Treatments into an Accountable Schedule?
A free risk treatment schedule template covering treatment options, cost-benefit, ownership, timeline and the accept/reject decision, in one document.
-
How Do I Make a Risk Spreadsheet Easier to Use?
What makes a risk spreadsheet confusing to everyone who opens it, and the colour and layout conventions that fix it, plus a free style guide.
-
How Can Practitioners Assess Danger While Accounts Are Disputed?
How practitioners can organise uncertainty, record safety actions and seek specialist input while disputed accounts remain unresolved. A supplementary risk lens.