What to do at this stage
- 01
Assign an operational owner to every control and confirm that they understand the responsibility.
- 02
Transfer records, test evidence, maintenance requirements and unresolved issues.
- 03
Record the acceptance decision and the conditions attached to any outstanding action.
Questions to work through
- Has each control been accepted by its operating owner?
- Can the operator find the information needed to maintain it?
- Who has accepted the residual risk?
A handover pack should let the facilities team find the alarm test records, maintenance arrangements, escalation contacts and known limitations without relying on the departing project team.
A common trap
Transferring a folder is not the same as transferring understanding, authority and accountability.
Suggested resources
Selected for their likely use at this stage. Resource associations are guidance, not a compliance crosswalk.
Outline Security Plan — Template 13.5
Use an outline to organise the content of a security plan.
View in the SRMBOK shopSRMBOK Guide to Training
Guidance on training staff to recognise security concerns, follow procedures and contribute to security awareness.
View in the SRMBOK shopKeep the whole life cycle in view
Security Risk Management Life Cycle Wall Charts
Keep the whole life cycle in view, from initiation to change and disposal.
View in the SRMBOK shopGuide to the Security Risk Management Life Cycle
Explore the published SRMBOK guide behind the life cycle.
View in the SRMBOK shopThese practical prompts are editorial guidance for the navigator. Consult the published SRMBOK life cycle guide and charts for the full method. About this edition and its sources.