Asset Protection and Security Management Training Course

Duration 5 days 10 modules · 33 contact hours
Level Intermediate Certificate on completion
Who attends Security Managers, Facilities Managers and others
Fee from USD 1,100 KSh 95,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-SM-033

Before you join: Participants should have workplace experience in security, facilities, health and safety, operations, risk, compliance or business continuity.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Workplace security failures can result in theft, violence, unauthorised access, information loss, operational disruption and harm to employees or visitors. Security managers must protect assets while maintaining lawful, proportionate controls that do not obstruct legitimate business activity. This requires more than guards and cameras: it requires clear governance, credible risk assessment, layered controls, incident discipline and evidence-based improvement.

This course equips participants to design, operate and review a workplace security management system. Participants assess threats and vulnerabilities, develop security risk registers, select physical and procedural controls, manage access and visitors, supervise security service providers, respond to incidents and support business continuity arrangements. The course addresses protection of people, premises, information, equipment, records and critical operations, with attention to privacy, duty of care and legal boundaries.

Teaching combines focused instructor briefings with cases drawn from offices, industrial sites, financial institutions, public facilities and distributed workplaces. Participants analyse incident scenarios, test security decisions through group simulations, review sample plans and prepare application actions for their own responsibilities. They leave with a reusable security management toolkit, including risk assessment, incident reporting, audit and action-planning materials, plus a certificate of completion. The course is delivered over five days, from 08:30 to 16:30, in classrooms in more than 50 cities or through live online delivery.

The course suits professionals responsible for workplace protection who need a structured method for improving security controls, coordinating stakeholders and demonstrating that security spending addresses material risks.

What you will be able to do

  • Assess workplace security risks using threat, vulnerability, consequence and control analysis
  • Design layered physical security controls using protection-in-depth and CPTED principles
  • Develop security risk registers with treatment actions, owners and residual ratings
  • Implement access, visitor, contractor and credential management procedures
  • Manage security incidents through reporting, escalation, evidence preservation and investigation
  • Prepare emergency and business continuity arrangements for security-related disruption
  • Conduct security audits using control testing, inspection evidence and corrective actions
  • Produce a prioritised security improvement plan with costs, milestones and accountabilities

Benefits of attending

For you

  • Apply a consistent method for identifying and prioritising workplace security risks
  • Write clearer security procedures, post orders and incident reports
  • Make defensible recommendations for access, surveillance and protective control investments
  • Coordinate more effectively with facilities, HR, IT, operations and security providers
  • Build evidence for progression into security, resilience or risk management roles

For your organisation

  • Reduced exposure to theft, unauthorised access, vandalism and workplace violence
  • Better alignment between security expenditure and documented risk priorities
  • Clearer incident escalation, evidence handling and post-incident corrective action
  • More consistent control of visitors, contractors, credentials and sensitive assets
  • Stronger assurance evidence for management reviews, audits and insurer discussions

Course modules

10 modules over 5 days

Participants can define security governance, protected assets and control responsibilities.

  • Security governance roles, accountabilities and reporting lines under ISO 18788
  • Asset registers classify people, property, information and critical operational dependencies
  • Security policy hierarchy: policy, standards, procedures, post orders and instructions
  • Applying the protection-in-depth principle to layered workplace safeguards
  • Risk appetite statements translated into security objectives and control priorities
  • Legal duties, duty of care, privacy and proportionality boundaries

Participants can assess security risks and prepare proportionate treatment actions.

  • Threat identification using asset, threat source, vulnerability and consequence categories
  • Scenario-based risk statements linking a credible event to business impact
  • Likelihood and consequence scoring calibrated through a defined risk matrix
  • Bow-tie analysis connecting preventive controls, escalation factors and recovery barriers
  • Risk treatment selection: avoid, reduce, transfer, accept or monitor
  • Security risk register entries with owners, dates and residual ratings
  • Prioritising treatments through risk appetite, control effectiveness and implementation feasibility

Participants can specify layered physical security controls for workplace premises.

  • CPTED principles applied to entrances, parking, reception and public areas
  • Perimeter protection selection: fencing, gates, lighting, signage and detection
  • Access control design using zones, credentials, authentication and anti-tailgating measures
  • Camera coverage plans addressing purpose, fields of view and retention
  • Intrusion detection and alarm response workflows linked to escalation procedures
  • Key and lock control registers, issue protocols and periodic reconciliation
  • Protective design reviews for reception areas, loading bays and server rooms

Participants can manage people-related security controls throughout the access lifecycle.

  • Pre-employment screening boundaries, consent requirements and documented risk decisions
  • Credential lifecycle controls from issue and activation through suspension and return
  • Visitor management procedures covering pre-registration, identification, escorting and record retention
  • Contractor access arrangements tied to work permits and supervision levels
  • Insider threat indicators assessed without profiling, discrimination or unsupported assumptions
  • Segregation of duties reducing opportunities for theft, fraud and sabotage
  • Periodic access reviews matching permissions to current roles and locations

Participants can apply practical controls to protect sensitive workplace assets and information.

  • Information asset classification linked to handling, storage and disposal requirements
  • Clean desk and clear screen controls for shared workplaces
  • Secure handling procedures for records, portable media and confidential waste
  • Suspicious package recognition, isolation distances and emergency notification protocols
  • Social engineering warning signs and verification steps for unusual requests
  • Cybersecurity incident handoffs between physical security, IT and business owners
  • Security awareness messages tailored to staff, visitors and contractors

Participants can coordinate incident response, preserve evidence and document findings.

  • Incident classification criteria distinguishing security events, incidents and crises
  • Initial response priorities: life safety, scene control, notification and preservation
  • Incident command roles, decision logs and escalation thresholds
  • Evidence handling procedures preserving chain of custody and admissibility
  • Interview planning using PEACE principles and factual questioning techniques
  • Root cause analysis using five whys and barrier failure review
  • Post-incident reports documenting facts, impacts, actions and recommendations

Participants can connect security response arrangements with continuity and recovery plans.

  • Business impact analysis identifies critical activities, dependencies and maximum tolerable downtime
  • Emergency response plans define command, communications, evacuation and accountability
  • Active threat response protocols aligned with local law enforcement guidance
  • Evacuation warden duties, assembly management and accountability reconciliation
  • ISO 22301 recovery strategies for alternate sites, staff and suppliers
  • Tabletop exercises test decision-making, communications and plan assumptions
  • After-action reviews convert drill findings into tracked improvements

Participants can manage daily security operations and outsourced security services.

  • Guard force deployment based on risk, post purpose and service levels
  • Post orders specify duties, boundaries, patrol routes and escalation
  • Patrol design combines deterrence, inspection points, timing and reporting
  • Control room procedures manage alarms, cameras, communications and dispatch
  • Security service contracts define scope, competencies, KPIs and audit rights
  • Vendor due diligence examines licensing, insurance, training and performance history
  • Shift handovers capture outstanding risks, equipment status and required actions

Participants can test security controls and report improvement priorities to management.

  • Security audits test policy compliance, control design and operating effectiveness
  • Inspection checklists document observations, nonconformities, evidence and responsible owners
  • Key performance indicators measure losses, response times, incidents and training
  • Loss data analysis identifies patterns by location, asset, time and method
  • Corrective action plans assign root causes, actions, deadlines and verification
  • Management reports present risk trends, control status and decision requests
  • ISO 31000 monitoring principles support review of changing risk conditions

Participants can prepare a structured plan for implementing security improvements.

  • Risk treatment plans sequence controls by priority, cost, owner and deadline
  • Stakeholder mapping identifies decision-makers, affected groups, champions and resisters
  • Security budget cases distinguish capital costs, operating costs and avoided losses
  • Implementation roadmaps set milestones, dependencies, governance reviews and acceptance criteria
  • Change communications explain new controls, expected behaviours and reporting channels
  • Action plans specify first ninety-day priorities and measurable success indicators
  • Personal application commitments connect course methods to current workplace risks

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Workplace security risk assessment template
  2. Security risk register and treatment plan
  3. Physical security control design checklist
  4. Access, visitor and contractor management procedure
  5. Security incident report and investigation pack
  6. Ninety-day security improvement action plan

Who should attend

  • Security Managers — responsible for establishing and improving workplace protection controls
  • Facilities Managers — oversee premises, access systems, contractors and building operations
  • Health and Safety Managers — coordinate security risks affecting employee and visitor safety
  • Business Continuity Managers — prepare response and recovery arrangements for disruptive incidents
  • Operations Managers — manage assets, staff and critical activities exposed to security threats
  • Risk and Compliance Officers — require evidence that security controls address documented risks

Skills and tools covered

Security risk assessmentPhysical security designAccess control managementIncident investigationBusiness continuity planningSecurity assurance reporting

Tools and standards

ISO 31000, ISO 22301, ISO 18788, Crime Prevention Through Environmental Design (CPTED)

How the course runs

Training methodology

The course uses short instructor briefings to introduce standards, methods and control options, followed by facilitated case work based on realistic workplace security problems. Participants assess threat scenarios, compare control designs, examine incident evidence, practise escalation decisions and review sample security documentation. Group exercises address access failures, contractor risks, suspicious packages, theft and disruptive incidents. Simulations test communication, incident command and recovery choices. Each participant prepares an application plan linking course methods to current workplace priorities.

Requirements and prerequisites

Participants should have workplace experience in security, facilities, health and safety, operations, risk, compliance or business continuity. Familiarity with their organisation's premises, asset types, incident reporting routes and contractor arrangements will help participants apply course methods quickly. No previous security qualification is required. The course does not assume technical expertise in CCTV engineering, cybersecurity administration, law enforcement or close protection. Participants do not need prior experience of formal risk assessment, although basic confidence reading workplace policies and operational reports is useful.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

The course assumes general workplace experience in a related function such as security, facilities, operations, health and safety, risk or compliance. No prior security qualification or technical engineering background is required.

Bring examples of non-confidential security concerns, incident types or premises challenges you want to address. If permitted by your employer, a current security policy, risk register or incident form can help you tailor the course materials.

It is designed for professionals with responsibilities for workplace security, facilities, safety, continuity, operations or risk. It is particularly useful for staff moving into a security management role or formalising an existing responsibility.

This course focuses on workplace asset protection, physical security, access control, incident management and security governance. It addresses coordination with IT security where incidents overlap, but it does not teach network defence, personal protection or technical CCTV installation.

Participants use reusable templates to assess risks, review controls, improve procedures and present priorities to management. The final application plan identifies actions that can be started during the first ninety days after the course.

Each training day runs from 08:30 to 16:30 and provides approximately 6.5 contact hours. Time is allocated across instructor briefings, cases, group exercises, simulations, documentation reviews and application planning.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.