Security Surveys and Risk Assessments Training Course

Participants can apply a common risk vocabulary and assessment process to security work.

• ISO 31000 principles applied to security risk assessment activities
• Risk criteria established from organisational objectives, tolerance and legal duties
• Threat, vulnerability, consequence and control distinguished in survey records
• Inherent risk separated from residual risk after existing controls
• Risk appetite statements translated into practical escalation thresholds
• Assessment records link evidence, judgement, owners and treatment decisions

Participants can identify credible threats using internal and external information sources.

• Threat taxonomy covers crime, violence, espionage, sabotage and civil disorder
• Incident data reviewed for patterns, repeat events and emerging methods
• Open-source intelligence assessed for relevance, reliability and corroboration
• Local crime trends compared with site activities and operating hours
• Adversary intent, capability and opportunity assessed using structured judgement
• Threat scenarios framed around realistic attack paths and targets

Participants can identify assets requiring protection and determine their security criticality.

• Critical asset registers capture dependencies, locations, owners and replacement times
• Business impact analysis identifies services affected by asset loss
• Crown-jewel analysis distinguishes critical assets from routine property
• People-at-risk categories include visitors, lone workers and vulnerable groups
• Information assets classified by confidentiality, integrity and availability requirements
• Interdependencies mapped between utilities, suppliers, systems and physical locations

Participants can prepare an efficient fieldwork plan and evidence collection approach.

• Survey plans sequence document review, interviews, inspections and validation
• Evidence matrices connect survey questions with sources and acceptance criteria
• Site plans annotated with boundaries, critical assets and observation routes
• Interview protocols obtain consistent evidence without leading respondents
• Photography, notes and document references managed through evidence logs
• Sampling methods select representative shifts, access points and records

Participants can inspect a site systematically and record observations that support findings.

• Inspection routes examine approaches, boundaries, buildings and critical internal areas
• Observation notes separate facts, interpretations, assumptions and follow-up questions
• Daytime and night-time conditions compared for visibility and supervision
• Security inspection checklists adapted to site-specific threat scenarios
• Photographic evidence records location, direction, date and observed condition
• Nonconformities classified by immediate danger, weakness or improvement opportunity

Participants can assess perimeter measures and environmental factors affecting site protection.

• Perimeter layers assessed from public approach to protected asset
• Fences, gates and barriers inspected for delay, deterrence and bypass points
• CPTED principles applied to natural surveillance, access and territoriality
• Lighting assessments consider illumination, glare, shadowing and maintenance records
• Landscaping reviewed for concealment, climbing aids and sightline obstruction
• Vehicle approaches assessed for hostile vehicle mitigation and delivery control

Participants can evaluate access control arrangements against access-related threat scenarios.

• Access zones defined by asset sensitivity, occupancy and operational need
• Credential issuance, revocation and periodic review tested against personnel changes
• Tailgating controls assessed through layout, procedures and staff behaviour
• Visitor management records reviewed for identity checks, escorts and badges
• Delivery and contractor access examined for screening and supervision gaps
• Emergency egress requirements balanced with unauthorised entry prevention

Participants can assess whether guarding arrangements provide effective protective coverage.

• Guard post orders tested against site risks and required responses
• Patrol routes assessed for frequency, unpredictability and observation coverage
• Staffing levels compared with workload, peak periods and incident demand
• Guard competence checked through training records, licences and briefings
• Control room procedures reviewed for alarms, escalation and incident logging
• Shift handovers tested for unresolved risks, keys and equipment accountability

Participants can assess electronic security systems as part of an integrated control set.

• CCTV coverage assessed for detection, recognition, identification and evidential value
• Camera placement reviewed against lighting, obstructions and target activity
• Intrusion detection zones tested against alarm response and verification procedures
• Access control logs sampled for anomalies, overrides and dormant credentials
• System maintenance records examined for faults, testing and corrective actions
• Technology limitations documented alongside procedural and physical compensating controls

Participants can assess procedural controls and workforce behaviours that affect security performance.

• Security procedures tested against actual work patterns and operational pressures
• Policy-to-practice gaps identified through interviews, observations and record sampling
• Security awareness content assessed for relevance, frequency and behavioural expectations
• Insider threat indicators considered within fair, lawful personnel processes
• Key control registers reviewed for issue, return, duplication and reconciliation
• Challenge culture assessed through reporting confidence and supervisory follow-up

Participants can assess security exposures created by contractors, suppliers and service providers.

• Contractor risk profiles consider access, supervision, capability and criticality
• Prequalification checks review security competence, incident history and references
• Permit-to-work interfaces examined for restricted areas and access coordination
• Supplier delivery processes assessed for inspection, scheduling and receiving controls
• Security clauses specify reporting, training, audits and breach consequences
• Third-party performance monitored through indicators, reviews and corrective actions

Participants can evaluate security incident readiness, response arrangements and learning processes.

• Incident classifications define reporting thresholds, authority and response priorities
• Response plans tested for intrusion, violence, theft and suspicious packages
• Communication trees identify internal leaders, emergency services and external parties
• Evidence preservation procedures protect records, footage and physical materials
• Post-incident reviews distinguish immediate correction from root-cause action
• Lessons-learned registers track actions, owners, due dates and verification

Participants can produce consistent risk ratings from threat, vulnerability and consequence evidence.

• Risk statements express cause, event, consequence and affected objective
• Likelihood scales calibrated using frequency, exposure and control reliability
• Consequence criteria address safety, financial loss, service disruption and reputation
• Risk matrices tested for clarity, discrimination and management decision usefulness
• Uncertainty recorded where evidence is incomplete, conflicting or time-sensitive
• Risk registers capture ratings, rationale, controls, owners and review dates

Participants can map preventive and recovery controls around a priority security event.

• Top events defined as loss-of-control points within threat scenarios
• Threat pathways linked to preventive barriers and barrier performance standards
• Consequences mapped across people, operations, assets and stakeholder confidence
• Recovery controls identify containment, response, continuity and communications actions
• Escalation factors reveal conditions that weaken critical security barriers
• Barrier assurance activities assign tests, frequencies, evidence and owners

Participants can judge control design, implementation and operating effectiveness using evidence.

• Control objectives specify intended protection outcomes before control testing
• Design effectiveness assessed against threat mechanism, coverage and failure modes
• Operating effectiveness tested through records, observation, interviews and sampling
• Preventive, detective, deterrent and corrective controls compared for contribution
• Control gaps distinguished from isolated procedural errors and training needs
• Assurance plans define testing schedules, responsible roles and evidence retention

Participants can select proportionate security treatments and plan their implementation.

• Treatment options compare avoidance, reduction, transfer and risk acceptance
• Control recommendations link directly to assessed causes and consequences
• Cost-benefit reasoning considers exposure reduction, lifecycle cost and residual risk
• Quick wins separated from capital projects and policy changes
• Implementation roadmaps assign sponsors, owners, milestones and dependencies
• Residual risks documented for formal acceptance by accountable management

Participants can write a clear, evidence-based report for operational and senior audiences.

• Executive summaries present material risks, priorities and required management decisions
• Findings structured with condition, evidence, risk and recommendation statements
• Risk heat maps communicate priorities without concealing rating uncertainty
• Photographs, plans and diagrams used to support precise observations
• Recommendations written with ownership, timescale, resource need and success measure
• Report quality checks test traceability, consistency, confidentiality and readability

Participants can communicate findings, manage challenge and obtain agreement on actions.

• Opening meetings establish survey purpose, access arrangements and communication protocols
• Interview questions probe evidence, exceptions, workarounds and unresolved concerns
• Challenge from operational managers handled through evidence and risk criteria
• Closing meetings distinguish confirmed findings from issues needing further validation
• Action owners agree realistic deadlines, dependencies and escalation routes
• Management presentations focus on decisions, resources, residual risk and accountability

Participants can conduct surveys lawfully, ethically and with appropriate information controls.

• Personal data handling follows purpose limitation, access restriction and retention rules
• Confidential survey information classified, stored and shared by need-to-know
• Photographs and recordings managed with consent, notices and security safeguards
• Investigative boundaries recognised when findings indicate misconduct or criminal activity
• Equality considerations prevent discriminatory assumptions in threat and personnel assessments
• Legal advice escalated where surveillance, search or monitoring powers are uncertain

Participants can build, review and present a complete evidence-based security survey and risk assessment pack.

• Survey scope, asset profile and threat context consolidated into assessment brief
• Inspection evidence organised into traceable findings and supporting records
• Priority risks rated using agreed criteria and documented rationale
• Bow-tie analysis prepared for one material security event
• Treatment roadmap assigns actions, owners, timescales and assurance measures
• Peer review tests evidence quality, rating consistency and recommendation feasibility