What to do at this stage
- 01
Trace design decisions and contract requirements back to the security requirements.
- 02
Review proposed substitutions, interfaces and supplier assurance arrangements.
- 03
Reassess risk where a deviation or value engineering proposal changes protection.
Questions to work through
- Where is each requirement realised in the design?
- What evidence must the supplier provide?
- Does a cost reduction change the forecast residual risk?
A substitute door assembly may look equivalent but alter delay, emergency egress or integration with alarms. Review those consequences before accepting the change.
A common trap
A technically compliant component can still fail the overall protection concept if interfaces are overlooked.
When the work needs to return
Suggested resources
Selected for their likely use at this stage. Resource associations are guidance, not a compliance crosswalk.
Procurement and Secure Supply Chain Policy and Procedure
Free Word and PDF policy and procedure templates for supplier tiering, screening, approvals, contract requirements and ongoing monitoring.
View in the SRMBOK shopSRMBOK Guide to OSCAL
Understand OSCAL, its control models, limitations and questions to ask before investing in compliance automation.
View in the SRMBOK shopSRMBOK Guide to Secure ICT Enclaves — free A3 poster
A free A3 poster explaining four security environments, device access and information-release gates. A conceptual reference for discussions and design, with colour and monochrome editions.
View in the SRMBOK shopGuide to Physical Security Specifications
A guide to consistent physical security specifications, covering threat postures, access, barriers, locks, alarms and secure containers across multiple sites.
View in the SRMBOK shopGuide to Risk-Based Supplier Assurance
A supplier-assurance workpack with a guide, basic and enhanced questionnaires, assessor scoring worksheets, and policy and procedure templates for recording supplier decisions.
View in the SRMBOK shopSRMBOK Template 13.7 Property Selection and Security Planning Checklist
An editable property selection checklist covering the site, building, access, security systems and emergency provisions.
View in the SRMBOK shopSRMBOK Guide to DISP
An independent planning guide for the Australian Defence Industry Security Program (DISP), covering governance, personnel, premises, ICT architecture and acceptance tests. Not an official approval or application pack.
View in the SRMBOK shopKeep the whole life cycle in view
Security Risk Management Life Cycle Wall Charts
Keep the whole life cycle in view, from initiation to change and disposal.
View in the SRMBOK shopGuide to the Security Risk Management Life Cycle
The full 16-stage SRMBOK life cycle guide, with decision gates, return paths, checklists, worked examples and a diagnostic worksheet.
View in the SRMBOK shopThese practical prompts are editorial guidance for the navigator. Consult the published SRMBOK life cycle guide and charts for the full method. About this edition and its sources.