Skip to content
Osford Risk Group ORG emblem

Government & Public-Sector Security · Protective Security

Risk Assessment & Security Planning

A structured method for assessing threat, vulnerability and impact, and converting that assessment into a proportionate, costed and reviewable security plan that leadership can approve and audit.

Advanced 14 hours

Learning objectives

  • Apply a consistent threat, vulnerability and impact method
  • Prioritise treatment options against available resources
  • Write a security plan that can be implemented and audited
  • Establish review triggers and performance measures

Course modules

  1. 01Assessment methodology and terminology
  2. 02Threat characterisation and credible scenarios
  3. 03Vulnerability and impact analysis
  4. 04Treatment options: avoid, reduce, transfer, accept
  5. 05Writing and approving the security plan
  6. 06Review cycles, indicators and assurance

Assessment and certification

Assessed security plan submission.

Certificate of Completion issued on successful assessment.

Related courses

All Government & Public-Sector Security courses

Security Awareness & Professional Conduct

The foundation programme for personnel working in or around public institutions. It establishes what security awareness means in daily work, the standards of conduct expected of officials, and how routine behaviour either strengthens or weakens an institution's protective posture.

View course

Protection of Government Facilities & Controlled Areas

A protective-security programme covering how facilities and controlled areas are organised into security zones, how layered measures work together, and how personnel maintain those measures during normal operations. Content is principle based and describes protective design and management — not methods of defeating controls.

View course

Access-Control Principles & Credential Management

How access rights are granted, verified, reviewed and withdrawn. The programme concentrates on governance and administration of credentials — issuance, lifecycle, audit and revocation — so that access reflects current authorisation rather than historic convenience.

View course