What’s in a Good Security Risk Assessment?

Posted by Konrad Buczynski
On 04/07/2019

If you’ve ever undertaken a security risk assessment (SRA) yourself, you may have wondered whether it was as comprehensive as it could be and if could it withstand serious scrutiny. Part of the notion of completing a diligent risk assessment is to first understand where the rest of the industry is at, so that we […]

Risk Assessment Matrix

Posted by Konrad Buczynski
On 01/07/2019

What Is a Risk Assessment Matrix? A risk assessment matrix is the basis for measuring potential risks based on two intersecting factors: the likelihood (or probability) of a security risk-based event occurring, and the consequence (or impact) of its impact to an entity if it did. A risk assessment matrix completes the risk assessment template […]

Risk Management Frameworks

Posted by Konrad Buczynski
On 27/06/2019

This is a generic (i.e. not security risk-specific) article and is included for its close links to security risk governance. Section 4 of ISO31000 opens with the simple statement that “The success of risk management will depend on the effectiveness of the management framework providing the foundations and arrangements that will embed it throughout the organization […]

Risk Assessment Templates

Posted by Konrad Buczynski
On 27/06/2019

What is a Risk Assessment Template? A risk assessment template is a tool that is used to document the systematic analysis of types of security risks that exist within the scope/area of an assessment, the likelihood and consequence of those risks being realised, and the recommended control measures to reduce risk to acceptable levels. A […]

The Health of NSW Hospital Security

Posted by Konrad Buczynski
On 20/03/2019

Commenced in mid-November 2018, NSW Health recently released an interim report prepared by ex-NSW Police Officer and Minister, Peter Anderson, titled “Improvements to security in hospitals”. Containing 48 recommendations, this report follows several major security initiatives within the sector in recent years, many of which were triggered by the 2016 shooting of a police officer […]

Top 10 Security Risk and Governance Recommendations

Posted by Konrad Buczynski
On 15/08/2018

Top 10 Security Risk Recommendations for Enterprise and Government Entities We’ve consulted with innumerable enterprises and Government entities over the years, and several common themes continue to arise in relation to both cybersecurity and protective security risk assessments (SRAs). Straight to it…here are the top 10 security risk and governance-related issues that we have found, […]