Defence and Security Management Training Course

Participants can map governance responsibilities, authorities and oversight requirements for a security function.

• Governance structures: policy owner, accountable executive and operational lead
• Delegations of authority documented for routine and emergency decisions
• Legal powers, human rights and privacy constraints examined
• Rules of engagement and use-of-force policy boundaries identified
• Oversight bodies, audit trails and records-retention requirements mapped
• Security policies converted into accountable control ownership

Participants can produce a prioritised security risk assessment using likelihood and consequence criteria.

• ISO 31000 risk process applied to security threats
• Threat sources, targets, capabilities, intent and opportunity assessed
• Likelihood and consequence scales calibrated against operational tolerances
• Risk matrix limitations addressed through narrative risk statements
• Inherent, residual and target risk recorded consistently
• Risk appetite and escalation thresholds agreed with decision-makers

Participants can define intelligence requirements and assess information for security decision-making.

• Intelligence cycle: direction, collection, processing, analysis and dissemination
• Priority intelligence requirements linked to security decisions
• Source reliability and information credibility assessed using Admiralty Code
• Indicators and warnings developed for emerging security threats
• Collection plans assign sources, deadlines and reporting formats
• Intelligence products separate facts, assumptions, judgements and confidence

Participants can build a security risk register with proportionate treatment actions and ownership.

• Risk statements written using cause, event and consequence logic
• Treatment options: avoid, reduce, transfer, accept or prepare
• Control owners, due dates and assurance evidence assigned
• Bow-tie analysis connects preventive controls with recovery measures
• Residual risk decisions recorded with accountable approval
• Review triggers set for incidents, intelligence changes and audits

Participants can select layered protective controls for people, facilities, information and assets.

• Defence in depth combines deterrence, detection, delay and response
• Security zones defined by asset sensitivity and access requirements
• People, process, physical and technical controls integrated
• Control selection considers effectiveness, cost, intrusiveness and legality
• Security-in-depth assumptions tested against credible attack pathways
• Protective security measures documented in a control schedule

Participants can assess facility vulnerabilities and specify proportionate physical security measures.

• Site surveys identify perimeters, approaches, assets and weak points
• Crime Prevention Through Environmental Design principles applied to facilities
• Access control categories: public, controlled, restricted and secure
• CCTV coverage assessed against detection, recognition and identification requirements
• Visitor management, contractor screening and key control procedures specified
• Security post orders define patrols, observations and escalation actions

Participants can design personnel-security measures that address insider threats lawfully and fairly.

• Personnel security lifecycle covers recruitment, employment, transfer and exit
• Insider threat indicators assessed without unsupported profiling
• Vetting, clearance, declarations and access recertification explained
• Segregation of duties reduces fraud, sabotage and information misuse
• Reporting channels protect confidentiality and procedural fairness
• Manager interventions balance welfare, security and employment obligations

Participants can connect information-security governance with wider defence and security management.

• Information asset registers identify owners, classifications and handling requirements
• Confidentiality, integrity and availability assessed for critical information
• NIST Cybersecurity Framework functions mapped to security accountabilities
• Access management applies least privilege and periodic recertification
• Cyber incident reporting linked to operational command arrangements
• Third-party information risks addressed through contractual security requirements

Participants can identify critical-service dependencies and prioritise protection and recovery actions.

• Criticality assessment ranks services by societal and operational consequence
• Dependency mapping traces power, communications, transport and supply links
• Single points of failure identified through service-interruption scenarios
• Protective priorities balance asset value, exposure and recovery time
• Public-private coordination arrangements support infrastructure protection decisions
• Recovery objectives define acceptable service degradation and restoration targets

Participants can prepare continuity arrangements for security disruptions affecting essential functions.

• Business impact analysis identifies time-critical activities and dependencies
• Maximum tolerable period of disruption set for essential services
• Continuity strategies cover alternate sites, personnel and communications
• Crisis-management teams establish roles, authorities and meeting rhythms
• ISO 22301 continuity concepts linked to security planning
• Recovery plans include activation criteria and restoration priorities

Participants can establish command arrangements and coordinate an escalating security incident.

• Incident Command System roles: command, operations, planning, logistics and finance
• Incident objectives set using life safety, incident stabilisation and property preservation
• Common operating picture built from verified incident information
• Command posts, briefing cycles and decision logs established
• Span of control managed through functional and geographic divisions
• Multi-agency coordination resolves authority, resource and communication issues

Participants can prepare response actions and communications for a security-related emergency.

• Emergency action plans specify alarms, evacuation, lockdown and accountability
• Trigger thresholds distinguish routine incidents from declared emergencies
• Crisis communications identify audiences, messages, channels and approval routes
• Initial holding statements avoid speculation and protect investigations
• Media monitoring identifies harmful rumours and information gaps
• After-action reporting captures decisions, impacts and immediate improvements

Participants can convert security priorities into operational tasks, resources and performance measures.

• Security objectives converted into tasks, timelines and responsible officers
• Operational orders use situation, mission, execution, service support and command
• Resource estimates cover personnel, equipment, contracts and contingency reserves
• Patrol patterns selected using risk, visibility and response-time criteria
• Duty rosters address fatigue, competence, supervision and surge capacity
• Performance indicators measure incidents, compliance, response and assurance

Participants can define the operating model, information flows and procedures of a security operations centre.

• Security operations centre functions: monitoring, triage, dispatch and reporting
• Standard operating procedures define alert verification and escalation
• Incident logs capture time, source, action, owner and status
• Shift handovers transfer unresolved risks and operational intelligence
• Alarm prioritisation distinguishes nuisance events from credible threats
• Quality assurance reviews response timeliness, decisions and documentation

Participants can plan coordination arrangements across defence, civilian and private-sector partners.

• Stakeholder mapping identifies mandates, capabilities, interests and constraints
• Memoranda of understanding define information-sharing and support arrangements
• Liaison officers connect command structures during joint operations
• Joint operating pictures reconcile agency reports and terminology
• Mutual-aid requests specify capability, duration, authority and reimbursement
• Coordination protocols protect civilian control and statutory responsibilities

Participants can test security controls, report assurance findings and plan corrective action.

• Assurance plans test design, implementation and operating effectiveness
• Security inspections use evidence-based checklists and sampling methods
• Audit findings distinguish nonconformities, observations and improvement opportunities
• Root cause analysis uses five whys and fishbone diagrams
• Corrective action plans assign owners, dates and verification criteria
• Lessons learned processes track changes through closure and review

Participants can assess security decisions against ethics, rights, legitimacy and community impact.

• Necessity, proportionality, legality and accountability guide security measures
• Human rights impact assessments identify foreseeable adverse effects
• Community engagement identifies security concerns and trust barriers
• Non-discrimination principles inform screening, access and enforcement procedures
• Sensitive information handling protects victims, witnesses and vulnerable groups
• Complaint mechanisms support accountability and early issue detection

Participants can lead security decisions under uncertainty and communicate priorities to senior stakeholders.

• Decision-making under uncertainty separates urgency from available evidence
• OODA loop supports observe, orient, decide and act cycles
• Command intent communicates purpose, priorities, constraints and decision authority
• Risk communication explains uncertainty without creating avoidable alarm
• Senior briefings present options, consequences, resources and recommendations
• Team debriefs reinforce accountability, learning and psychological safety

Participants can build, review and present a complete security and resilience plan for a defined scenario.

• Scenario profile defines mission, assets, stakeholders and operating constraints
• Threat assessment and risk register establish prioritised security exposures
• Protective controls, continuity measures and incident procedures integrated
• Governance model assigns authority, ownership, reporting and assurance
• Resource plan identifies staffing, equipment, contracts and implementation milestones
• Peer review tests proportionality, feasibility, evidence and presentation clarity