Security Risk Assessment for Transport Operators - Department of ...

More documents

Recommendations

Info

Table 4: Consequence categoriesCategoryFinancialHealth & SafetyOperationalReputationalPeopleLegalEnvironmentalNotesAs the financial position of operators can vary considerably, the levels for each category should be amendedto reflect this. Includes infrastructure replacement costs i.e. physical assets such as buildings and IT networks.Health and safety of staff and customers, where the operator could be held culpable.The ability to deliver key services.Should include political considerations alongside traditional public, media and investor relations issues.Availability of workers (including losses due to strike action, pandemics etc.).Incorporating compliance and other liability considerations.Considering the physical environment, wildlife and pollution.16 Security Risk Assessment Guide
Table 5: Rating consequenceConsequence CategoriesRating Descriptor Financial 1 Health &Safety5 Catastrophic Extremefinancialloss to theorganisatione.g. morethan $2mSingle ormultiple fatalitiesOperationall Reputational People Legal EnvironmentalLoss of abilityto deliver themajority ofservices forover one monthExtremenegative mediacoverage andpublic outcrylasting longerthan a month;negative publiccomments bya ministerAffectsenoughpersonnelto severelyimpact theorganisationSevere breachof contract orlaw resultingin loss ofoperatinglicences; orcriminal liabilitywith extremefineIrreversiblewidespreaddamage4 Major Majorfinancialloss to theorganisatione.g. $501k –$2mSevere injuriesto multiplepersonnelLoss of abilityto deliver themajority ofservices for upto one monthExtensivenegative mediacoveragelasting overa numberof weeks;sustainednegative statelevel politicaldiscussionAffectsenoughpersonnelto severelyimpact adivisionMajor breachof contract orlaw resultingin additionalmonitoring bylicensor; orcriminal liabilitywith major fineMajordamage to theenvironmentrequiring longtermrecovery3 Moderate Moderatefinancialloss to theorganisatione.g. $101k –$500kInjuries requiringhospitalisationLoss of abilityto deliver asignificantlevel of servicesfor up totwo weeksSignificantnegative mediacoveragelasting forseveral days;negative statelevel politicaldiscussionAffects asignificantamount ofpersonnel,requiringcarefulmanagementBreach ofcontract orlaw resultingin closeroversight, asignificant fineor damagesSignificantdamage to theenvironmentrequiringmedium-termrecovery2 Minor Minorfinancialloss to theorganisatione.g. $10k –$100kInjuries requiringattention bya medicalprofessionalSome minorreductions inoperationalservice levelsMinor negativemediacoveragelasting forsingle day;negativelocal councildiscussionAffects a smallnumber ofpersonnel andrequires somemanagementattentionMinor breachof contract orlaw that canbe resolvedwith dialoguebetweenpartiesMinordamage to theenvironmentrequiring shorttermaction1 Insignificant Insignificantfinancialloss to theorganisatione.g. less than$10kInjury requiringonly minorfirst aidNegligibleoperationalimpactInternal issueonly, no scopefor mediainterest;negativecustomerfeedbackAffects a smallnumber ofpersonnel butrequires littlemanagementattentionTechnicalbreach ofcontractor law withno materialconsequenceShort-termimpact requiringnegligible action1 Financial consequence figures should always be amended to reflect an operator’s individual circumstancesSecurity Risk Assessment Guide 17
Page 2 and 3: This publication is copyright. No p
Page 5 and 6: The documentPurposeThere are a wide
Page 8 and 9: Part 1Risk identification8 Security
Page 10 and 11: 1.2.2 MethodologyWhen identifying c
Page 12 and 13: 1.4 Identifying potential areas of
Page 14 and 15: Part 2Risk analysis14 Security Risk
Page 18 and 19: Example 4: Rating consequenceA larg
Page 20 and 21: Example 6: Rating riskA bus company
Page 22 and 23: Part 3Risk evaluation22 Security Ri
Page 24 and 25: 3.3 PrioritisationTo determine with
Page 26 and 27: 26 Security Risk Assessment GuideNe
Page 28 and 29: Table 8: Sample risk registerIdenti
Page 30 and 31: 30 Security Risk Assessment GuideAp
Page 32 and 33: Table 9: Assessing the criticality
Page 34 and 35: Table 11: Example threat matrixInte
Page 36: For further information in yourlang

Security Risk Assessment for Transport Operators - Department of ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?