What to do at this stage
- 01
Describe the facility, project or operation and the decision the assessment needs to support.
- 02
Agree the assessment boundaries, resources and level of effort with the sponsor.
- 03
Name the risk owner and record who can approve the scope and subsequent decisions.
Questions to work through
- What decision will this work inform?
- Who owns the risk and who approves the scope?
- What information, time and access will the team need?
For a proposed distribution centre, agree whether the assessment covers site selection, the building, transport interfaces and staff safety before commissioning the work.
A common trap
Starting a detailed assessment before agreeing the scope can produce a technically sound report that answers the wrong question.
Suggested resources
Selected for their likely use at this stage. Resource associations are guidance, not a compliance crosswalk.
Security Risk Assessment Scoping Statement Template
Agree the boundaries of an assessment before the work begins.
View in the SRMBOK shopSecurity Risk Assessment Process Flow Template
An editable Excel flowchart covering nine risk-management steps, with responsibilities, a legend and adaptable scope, context and criteria.
View in the SRMBOK shopSRMBOK Guide to the Risk Management Process
A 16-page guide and one-page diagram explaining risk-management actions, inherent, current and residual risk, layered controls and proportionate assessments.
View in the SRMBOK shopSRMBOK SRM Framework Project Plan Template
An editable project plan for initiating and managing the development of a security risk management framework.
View in the SRMBOK shopSRMBOK 30-Day Risk Assessment Delivery Kit
Six files to plan, run and document an assessment: a Start Here guide, assessment guidance, editable Word templates, workshop slides and a findings-handover presentation.
View in the SRMBOK shopKeep the whole life cycle in view
Security Risk Management Life Cycle Wall Charts
Keep the whole life cycle in view, from initiation to change and disposal.
View in the SRMBOK shopGuide to the Security Risk Management Life Cycle
The full 16-stage SRMBOK life cycle guide, with decision gates, return paths, checklists, worked examples and a diagnostic worksheet.
View in the SRMBOK shopThese practical prompts are editorial guidance for the navigator. Consult the published SRMBOK life cycle guide and charts for the full method. About this edition and its sources.