What to do at this stage
- 01
Describe the facility, project or operation and the decision the assessment needs to support.
- 02
Agree the assessment boundaries, resources and level of effort with the sponsor.
- 03
Name the risk owner and record who can approve the scope and subsequent decisions.
Questions to work through
- What decision will this work inform?
- Who owns the risk and who approves the scope?
- What information, time and access will the team need?
For a proposed distribution centre, agree whether the assessment covers site selection, the building, transport interfaces and staff safety before commissioning the work.
A common trap
Starting a detailed assessment before agreeing the scope can produce a technically sound report that answers the wrong question.
Suggested resources
Selected for their likely use at this stage. Resource associations are guidance, not a compliance crosswalk.
Security Risk Assessment Scoping Statement Template
Agree the boundaries of an assessment before the work begins.
View in the SRMBOK shopSecurity Risk Assessment Process Flow Template
An editable Excel process flow for documenting the security risk assessment procedure.
View in the SRMBOK shopSRMBOK Guide to the Risk Management Process
A printable explanation of the risk management process, distinguishing assessment actions from the supporting activities.
View in the SRMBOK shopSRMBOK SRM Framework Project Plan Template
An editable project plan for initiating and managing the development of a security risk management framework.
View in the SRMBOK shopSRMBOK Guide to the 30 Day Risk Assessment
A structured assessment method with workshop materials, facilitator guidance, checklists and planning templates.
View in the SRMBOK shopKeep the whole life cycle in view
Security Risk Management Life Cycle Wall Charts
Keep the whole life cycle in view, from initiation to change and disposal.
View in the SRMBOK shopGuide to the Security Risk Management Life Cycle
Explore the published SRMBOK guide behind the life cycle.
View in the SRMBOK shopThese practical prompts are editorial guidance for the navigator. Consult the published SRMBOK life cycle guide and charts for the full method. About this edition and its sources.