What to do at this stage
- 01
Run the agreed controls and maintain the registers needed for operational accountability.
- 02
Record incidents, exceptions, maintenance and changes that may affect protection.
- 03
Escalate emerging weaknesses or changes through the agreed review process.
Questions to work through
- Are the controls being operated as intended?
- What do recent incidents and exceptions reveal?
- Are records current enough to support a decision?
Regularly reconcile access permissions with current roles and departures, and record exceptions so recurring weaknesses can be investigated.
A common trap
An unchanged risk register can conceal an operation whose people, assets or controls have changed substantially.
Suggested resources
Selected for their likely use at this stage. Resource associations are guidance, not a compliance crosswalk.
Insider Threat Management Evaluation Tool
Examine the effectiveness of an existing insider threat programme.
View in the SRMBOK shopTraffic Light Protocol (TLP) Toolkit
Support clear expectations for sharing information.
View in the SRMBOK shopSpearphishing Tipsheet
A staff awareness tipsheet explaining impersonation, investment and marketplace scams and precautions to take.
View in the SRMBOK shopSRMBOK Template 13.3 Risk Treatment Schedule
Document risk treatment actions, responsibilities and timescales in an editable Word schedule.
View in the SRMBOK shopSRMBOK Personal Travel Safety Plan Template
Prepare a two-page travel safety plan with a pre-travel checklist, emergency contacts and essential information.
View in the SRMBOK shopCore Four Cybersecurity Awareness Tips
Concise cyber awareness materials supplied as PNG, PDF and editable Word files for staff communications.
View in the SRMBOK shopSRMBOK Procedure Template
Document consistent operational procedures, responsibilities and step-by-step instructions in an editable template.
View in the SRMBOK shopSRMBOK Guide to Management Systems
Guidance on designing, implementing and maintaining a security risk management system.
View in the SRMBOK shopSRMBOK Security Plan Templates
Adapt three editable security and risk treatment plans, with worked examples for enterprise and operational planning.
View in the SRMBOK shopSRMBOK Process Flow One-Page Template
Create an editable one-page process flow in Excel, using swimlanes to show actions and accountabilities.
View in the SRMBOK shopSRMBOK Guide to Managing Explosives Threats
Understand explosives threats and an integrated approach to assessing, mitigating and managing related incidents.
View in the SRMBOK shopTraffic Light Protocol and Controlled Information Sharing
A handbook on controlled information sharing, including sharing decisions, policy language and handling violations.
View in the SRMBOK shopIncident Response & Disaster Recovery Template
Prepare an editable incident response and disaster recovery plan, with step-by-step guidance for response and recovery.
View in the SRMBOK shopSRMBOK Security Postures Template
Adapt worked examples of security postures that change operational precautions as threat levels change.
View in the SRMBOK shopSRMBOK Template 13.6 Operational Governance Registers
Sixteen editable operational records covering inspections, incidents, access, keys, security clearances and training.
View in the SRMBOK shopSRMBOK Guide to Insider Threat Management Programs
Guidance on establishing an insider threat programme, from assessment and policies to awareness, detection and response.
View in the SRMBOK shopSRMBOK Guide to Training
Guidance on training staff to recognise security concerns, follow procedures and contribute to security awareness.
View in the SRMBOK shopKeep the whole life cycle in view
Security Risk Management Life Cycle Wall Charts
Keep the whole life cycle in view, from initiation to change and disposal.
View in the SRMBOK shopGuide to the Security Risk Management Life Cycle
Explore the published SRMBOK guide behind the life cycle.
View in the SRMBOK shopThese practical prompts are editorial guidance for the navigator. Consult the published SRMBOK life cycle guide and charts for the full method. About this edition and its sources.