How Do I Run a Bow-Tie Workshop That Produces Useful Actions?
Twelve specific bow-tie workshop mistakes, from vague focal events to unchallenged barriers, with fixes and a facilitator’s review checklist.
How Do I Keep a Security Risk Assessment Team Working to the Same Process?
A free security risk management wall chart set to keep your project room aligned on what stage the work is at, who leads it, and what happens next.
How Do I Turn Risk Treatments into an Accountable Schedule?
A free risk treatment schedule template covering treatment options, cost-benefit, ownership, timeline and the accept/reject decision, in one document.
How Do I Make a Risk Spreadsheet Easier to Use?
What makes a risk spreadsheet confusing to everyone who opens it, and the colour and layout conventions that fix it, plus a free style guide.
How Can Practitioners Assess Danger While Accounts Are Disputed?
How practitioners can organise uncertainty, record safety actions and seek specialist input while disputed accounts remain unresolved. A supplementary risk lens.
How Do I Make a Risk Treatment Plan People Will Keep Updated?
A simple six-column risk treatment plan template people actually keep updated, replacing the complex schedule everyone quietly stops maintaining.
How Do I Write a Security Plan People Can Implement?
How to write a security plan using an eight-section structure, from statement of purpose through SMART objectives to residual risk and timetable.
How Do I Stop a Security Risk Assessment Growing Beyond Its Scope?
Five scoping statement clauses that stop security risk assessment scope creep before it starts, with a worked before-and-after example and template.
Which Fields Do I Actually Need in a Risk Register?
The minimum risk register fields that actually work in practice, why more columns usually make a register worse, and a simple starter set to copy.
Which Essential Eight Maturity Level Should We Aim For?
An essential eight maturity level comparison for level 1 vs 2 vs 3, so you can pick a realistic target instead of guessing at compliance language.
How Do I Check Whether a Supplier’s Ownership Creates Security Risk?
How to screen suppliers for foreign ownership control or influence, and why procurement teams outside defence now need to ask these questions.
How Do I Help a Security Operations Team Apply TLP Consistently?
A free TLP wall chart for your security operations centre, covering markings, label selection and the common mistakes teams make when applying them.