A practical way into
the SRMBOK life cycle.
Find useful security and risk management resources, whether you know your life cycle stage, the task in front of you, or simply the kind of help you need.
Free to browse, without a login
The navigator and all sixteen stage guides are public and free. You do not need an account or a newsletter subscription to search or read them.
Four ways to find a resource
Choose a life cycle stage, what you want to do, the kind of resource you need, or its topic. Start with any dropdown and leave the others open. Keyword search and the free-resources filter help narrow the results further.
A resource can support several stages and purposes. A template helps you produce work; a verification checklist helps you check it. The navigator matches these uses together, so a resource is suggested only where the selected combination makes sense. “Why this matches” explains each association. General references are labelled “Across the life cycle”.
Downloads and newsletter preferences
Resource links open the SRMBOK shop, where free and paid products are labelled. To download a resource, add it to your cart and check out, even if its price is $0. Checkout collects your email address and includes a newsletter preference that you can opt out of.
You can also join through the newsletter links. Browsing the navigator or following a product link does not subscribe you. This navigator does not collect or store your email address.
The source material
The sixteen-stage structure, five acts, twelve gates and six return paths follow the supplied SRMBOK navigator concept. Stage explanations, questions and examples are concise editorial guidance developed for this edition. They are not quotations from the full methodology.
- Security Risk Management Life Cycle Wall Charts ↗ — free companion reference.
- Guide to the Security Risk Management Life Cycle ↗ — the published method and supporting guidance.
Use the published guide and charts as the reference for operational decisions. Suggested resource associations do not certify compliance with a standard or replace an organisation’s risk criteria.
Keeping the resources current
The resource collection is checked against the public SRMBOK shop. The product page remains the current source for availability, terms and price. New resources can appear in the library before all their stage and purpose associations have been reviewed.
Edition history
16 September 2026 · Edition 1.4. Refreshed eight product listings and added supported NIST planning and review uses, plus worked-example matches for NIST, the risk assessment template and ISVA. Checked all 75 shop listings; 70 practitioner products remain available.
15 September 2026 · Edition 1.3. Added the free Guide to the Risk Management Body of Knowledge, with general guidance and suggested uses in risk assessment, treatment planning and control review. The navigator now includes 70 practitioner products.
15 September 2026 · Edition 1.2. Added the Secure ICT Enclaves poster, Physical Security Risk Assessment Tool and Guide to DISP, with reviewed stage, purpose, resource-type and topic matches. Updated the expanded 30-Day Risk Assessment Delivery Kit. Checked all 74 shop listings; the navigator now includes 69 practitioner products alongside its sixteen stage guides and newsletter.
9 September 2026 · Edition 1.1. Added four independent resource filters, shared filter links, explanations of resource matches, and catalogue refresh support. The navigator is free to browse without a login.
9 September 2026 · Edition 1.0. Introduced sixteen stage guides, the life cycle map, seven situation entry points and suggested resources.
Keep exploring
Find a resource, browse all sixteen stages or explore the SRMBOK library.