What’s in a Good Security Risk Assessment?

On 04/07/2019

If you’ve ever undertaken a security risk assessment (SRA) yourself, you may have wondered whether it was as comprehensive as it could be and if could it withstand serious scrutiny. Part of the notion of completing a diligent risk assessment is to first understand where the rest of the industry is at, so that we […]

Risk Assessment Matrix

On 01/07/2019

What Is a Risk Assessment Matrix? A risk assessment matrix is the basis for measuring potential risks based on two intersecting factors: the likelihood (or probability) of a security risk-based event occurring, and the consequence (or impact) of its impact to an entity if it did. A risk assessment matrix completes the risk assessment template […]

Risk Management Frameworks

On 27/06/2019

This is a generic (i.e. not security risk-specific) article and is included for its close links to security risk governance. Section 4 of ISO31000 opens with the simple statement that “The success of risk management will depend on the effectiveness of the management framework providing the foundations and arrangements that will embed it throughout the organization […]

Risk Assessment Templates

On 27/06/2019

What is a Risk Assessment Template? A risk assessment template is a tool that is used to document the systematic analysis of types of security risks that exist within the scope/area of an assessment, the likelihood and consequence of those risks being realised, and the recommended control measures to reduce risk to acceptable levels. A […]

The Health of NSW Hospital Security

On 20/03/2019

Commenced in mid-November 2018, NSW Health recently released an interim report prepared by ex-NSW Police Officer and Minister, Peter Anderson, titled “Improvements to security in hospitals”. Containing 48 recommendations, this report follows several major security initiatives within the sector in recent years, many of which were triggered by the 2016 shooting of a police officer […]

Top 10 Security Risk and Governance Recommendations

On 15/08/2018

Top 10 Security Risk Recommendations for Enterprise and Government Entities We’ve consulted with innumerable enterprises and Government entities over the years, and several common themes continue to arise in relation to both cybersecurity and protective security risk assessments (SRAs). Straight to it…here are the top 10 security risk and governance-related issues that we have found, […]

Risk Management and the 2018 PSPF

On 08/05/2018

When the PSPF was launched in 2010, it was a significant reform that sought to adopt a more risk-based approach to protective security than did its predecessor (the Protective Security Manual). It achieved its immediate aims and Government practitioners, and those who supported them, started talking (and doing) more about security risk management. Notwithstanding this, […]

Musings on security risk assessments

On 06/05/2018

Taking into consideration 400-odd Government Departments, Agencies and Commissions, and that there were (conservatively) upwards of 4,000 companies employing more than 200 people in early 2017 [1], plus security consultants, then there is a fair base of security risk practitioners across Australian sectors. It is admittedly a conservatively educated guess, but let’s suggest that each […]