Security Risk Templates · by SRMBOK
All security risk guides
Browse the latest articles or search for the problem in front of you. Each guide connects practical advice to a relevant SRMBOK tool.
New to the role? Start with the foundational guides.
-
How Do I Make a Risk Treatment Plan People Will Keep Updated?
A simple six-column risk treatment plan template people actually keep updated, replacing the complex schedule everyone quietly stops maintaining.
-
How Do I Write a Security Plan People Can Implement?
How to write a security plan using an eight-section structure, from statement of purpose through SMART objectives to residual risk and timetable.
-
How Do I Stop a Security Risk Assessment Growing Beyond Its Scope?
Five scoping statement clauses that stop security risk assessment scope creep before it starts, with a worked before-and-after example and template.
-
Which Fields Do I Actually Need in a Risk Register?
The minimum risk register fields that actually work in practice, why more columns usually make a register worse, and a simple starter set to copy.
-
Which Essential Eight Maturity Level Should We Aim For?
An essential eight maturity level comparison for level 1 vs 2 vs 3, so you can pick a realistic target instead of guessing at compliance language.
-
How Do I Check Whether a Supplier’s Ownership Creates Security Risk?
How to screen suppliers for foreign ownership control or influence, and why procurement teams outside defence now need to ask these questions.
-
How Do I Help a Security Operations Team Apply TLP Consistently?
A free TLP wall chart for your security operations centre, covering markings, label selection and the common mistakes teams make when applying them.
-
How Do I Review Our Insider Threat Program as a Senior Manager?
A free insider threat self-assessment checklist for senior managers who need to know whether their organisation’s real controls actually still work.
-
How Do I Shorten a Risk Policy Without Losing What Matters?
Why a one page risk policy gets read and used, while a twenty-page version usually sits unread on a shared drive somewhere nobody opens it.
-
How Do I Explain Risk Management to Colleagues Who See Only Paperwork?
Risk management is not paperwork: how to explain that to sceptical colleagues using clear risk statements and bow-tie thinking instead of forms.
-
How Do I Remove Sensitive Details from an AI Prompt Without Losing Its Meaning?
Remove or generalise identifying details in an AI prompt while retaining useful structure. Check re-identification risk, service approval and the resulting output.