Skip to content
Security Risk Templates by SRMBOK

Practical security risk guidance, worked examples and templates.

  • All guides
  • SRMBOK
  • RMBOK
  • All guides
  • SRMBOK
  • RMBOK

Category: Assess & prioritise

What security checks should I make before leasing a new office?

Security checks before leasing: define essential needs, assess property evidence, resolve conditions and costs, then verify readiness.

Assess premises against the work you need to perform before committing to a lease or relying on promised improvements.

How do I check whether our CCTV can provide useful evidence?

A CCTV evidence test covers recording, retrieval, export and replay rather than checking the live image alone.

Check the whole route from a staged activity to a usable authorised export, rather than judging only the live picture.

Which security controls should I test first?

Three security control testing priorities: consequence of failure, dependencies on the control and the evidence still missing.

Choose the control-performance questions that most need evidence, then turn each into a bounded assurance activity.

How do I find out whether a security control actually works?

Security control effectiveness test linking a stated claim to evidence, a judgement against requirements, and correction with retesting.

Define the claim, agree the evidence and compare observed operation with the requirement before calling a security control effective.

How Do I Set the Scope of a Security Risk Assessment?

Set the boundary before you assess: Agree the objective; Define what is in scope; Record exclusions and limits.

Agree scope, exclusions and approval before fieldwork. Includes a worked example and free Word security risk assessment scoping templates.

How Do I Turn a Risk Register into Better Decisions?

Turn a risk entry into a decision: Describe the scenario; Test the controls; Choose and own the action.

Turn a stale risk register row into a decision. Rewrite the scenario, test controls and assign treatment owners and dates with a worked example.

How Do I Carry Out a Security Risk Assessment?

Move from purpose to practical action: Set scope and context; Assess the risks; Treat, monitor and review.

Carry out a security risk assessment in nine practical steps. Agree scope, test evidence and record decisions, with a free Excel process-flow template.

How Do I Use Bow-Tie Analysis to Understand a Security Risk?

Trace the path from cause to harm: Threats; Top event; Consequences.

Bow-tie analysis explained simply: focal events, causes, consequences and controls, with a worked example, in about the time it takes to read this.

How Do I Apply ISO 31000 Without Adding Unnecessary Paperwork?

Make the risk process support decisions: Clarify context and criteria; Assess and treat risk; Monitor, review and communicate.

ISO 31000 explained in plain language: the principles, framework and full process, from setting the context through to risk treatment and review.

How Do I Run a Bow-Tie Workshop That Produces Useful Actions?

End the workshop with owned actions: Agree a precise top event; Test the control logic; Assign actions and reviews.

Twelve specific bow-tie workshop mistakes, from vague focal events to unchallenged barriers, with fixes and a facilitator’s review checklist.

How Do I Keep a Security Risk Assessment Team Working to the Same Process?

Keep the team on the same process: Make the current stage visible; Show the next decision; Revisit earlier assumptions.

A free security risk management wall chart set to keep your project room aligned on what stage the work is at, who leads it, and what happens next.

How Can Practitioners Assess Danger While Accounts Are Disputed?

Keep danger, evidence and action visible: Use the specialist framework; Record facts and uncertainty; Follow required response pathways.

How practitioners can organise uncertainty, record safety actions and seek specialist input while disputed accounts remain unresolved. A supplementary risk lens.

← Previous
Next →
Security Risk Templates by SRMBOK

Practical security risk guidance, worked examples and templates.

  • About
  • Privacy

All rights reserved