What to do at this stage
- 01
Build a short list of plausible security scenarios for each main option.
- 02
Compare the indicative risks, existing protections and important uncertainties.
- 03
Record the assumptions that will need testing in the detailed assessment.
Questions to work through
- Which options change the risk most?
- What remains uncertain at this point?
- Could a different concept avoid a costly treatment later?
Compare two potential sites before signing a lease. Access arrangements, neighbouring activities and emergency response may affect the security concept.
A common trap
A preliminary rating is an aid to choosing a direction; it should not silently become the final accepted risk rating.
Suggested resources
Selected for their likely use at this stage. Resource associations are guidance, not a compliance crosswalk.
ISO 31000 Risk Management Process — One-Page Guide
Keep the risk management process in view while structuring your assessment.
View in the SRMBOK shopRisk Register Starter Pack
Start documenting risks and the actions needed to treat them.
View in the SRMBOK shopRisk Thinking for Domestic and Family Violence Practice (an SRMBOK Guide)
Risk thinking for domestic and family violence practitioners, covering uncertainty, controls and defensible decisions. A companion to mandated assessment processes.
View in the SRMBOK shopThe Risk Bow-Tie Method eBook
Learn the bow-tie method through its nine elements, a factory-fire example and a workshop outline.
View in the SRMBOK shopSRMBOK Template 13.2 Risk Register
Record risks, categories, treatment options, risk levels and monitoring comments in an editable Word register.
View in the SRMBOK shopA Guide to the Risk Management Body of Knowledge
A free illustrated RMBOK primer covering risk principles, frameworks and processes, with risk statements, bow-tie analysis, control-review questions and lessons from major events.
View in the SRMBOK shopRisk Assessment Template
An editable Word security risk assessment report template, with guidance and worked examples from scope and context through risk analysis and treatment recommendations.
View in the SRMBOK shopSRMBOK Guide to Red Teaming and Scenario Modelling
Understand scenario modelling and futures analysis as inputs to security risk assessments and changing-threat reviews.
View in the SRMBOK shopSRMBOK Guide to the Risk Management Process
A 16-page guide and one-page diagram explaining risk-management actions, inherent, current and residual risk, layered controls and proportionate assessments.
View in the SRMBOK shopControl Effectiveness Assessment - PDF A4 Organisational Licence
Learn a control-effectiveness method using design, capability, feedback and evidence, with worked cases and calibration exercises.
View in the SRMBOK shopSRMBOK ISO27000 Cybersecurity Review Tool
An editable Excel review tool combining a cyber control checklist, scorecard and control-effectiveness assessment.
View in the SRMBOK shopSRMBOK Risk Assessment Spreadsheet
An Excel risk register calculating inherent, current and residual risk, with a heat map, barrier map, treatment tracking, review dates and a one-page board pack.
View in the SRMBOK shopEnterprise Security Risk Assessment Template
Adapt a fully worked enterprise security risk assessment using a fictional corporation, with editable examples and treatment content.
View in the SRMBOK shopSRMBOK Physical Security Risk Assessment Tool
An Excel workbook with a worked physical security assessment, live risk matrix, treatment options, residual-risk targets and a reporting dashboard.
View in the SRMBOK shopKeep the whole life cycle in view
Security Risk Management Life Cycle Wall Charts
Keep the whole life cycle in view, from initiation to change and disposal.
View in the SRMBOK shopGuide to the Security Risk Management Life Cycle
The full 16-stage SRMBOK life cycle guide, with decision gates, return paths, checklists, worked examples and a diagnostic worksheet.
View in the SRMBOK shopThese practical prompts are editorial guidance for the navigator. Consult the published SRMBOK life cycle guide and charts for the full method. About this edition and its sources.