Security Risk Assessment for Transport Operators - Department of ...

ContentsForeword 4The document 5Purpose 5Key themes 5Reliance and disclaimer 5The risk assessment process 6Glossary of terms 7Part 1 Risk identification 81.1 Introduction to risk identification 91.2 Identifying critical assets 91.3 Identifying sources of risk 101.4 Identifying potential areas of impact 121.5 Identifying the risk 131.6 Part 1 checklist 13Part 2 Risk analysis 142.1 Introduction to risk analysis 152.2 Consequence 152.3 Likelihood 182.4 Rating risk 192.5 Part 2 checklist 20Part 3 Risk evaluation 223.1 Introduction to risk evaluation 233.2 Tolerance 233.3 Prioritisation 243.4 Part 3 checklist 24Next steps 26Considering treatment options 27Monitoring and review 27The risk register 27Appendix A Further techniques 30A.1 Conducting a criticality assessment 31A.2 Conducting a threat assessment 33A.3 Conducting a vulnerability assessment 34Acknowledgements 35Security Risk Assessment Guide 3