Security Risk Assessment

Know the real threat before you decide.

The scenario

An organisation opens a site, launches a project or sends people to another country on the basis of news reports, opinions and what it did last time. Security measures are chosen by habit rather than need. Some are excessive and expensive; others are missing exactly where the threat is.

Who it is for

Organisations that are opening, expanding or reviewing sites, projects and operations; that send people to other countries or regions; or that need to justify security decisions to their board, clients, partners or insurers.

What it includes

Analysis of the threat environment of the country and the specific region, rated from 1 to 5, Negligible to Extreme.
Assessment of asset vulnerability: sites, people, property, information, routes and travel.
Assessment of existing response capability: resources, procedures, people and liaison with authorities.
Identification of attack vectors and of the most likely and most dangerous scenarios.
Calculation of initial risk and of residual risk after controls.
Recommendations ranked by priority.

What you receive

Risk assessment report, with risk matrix and scenarios.
Recommended measures, ranked by priority.
Presentation of the findings to senior management.

How it starts

With a conversation to set the scope: what must be protected, where and why. We then send a proposal with method and timeline.