Advice on the Security Act
A comprehensive picture of the organisation's security risk
We have extensive experience of mapping fundamental national functions (GNF), infrastructure requiring protection and objects requiring protection. Our advisers combine expertise in corporate governance, analysis, physical security, information security, personnel security and emergency preparedness. This enables us to see functions, assets, deliverables and dependencies in context and to give management a nuanced basis for decisions.
Scope and method are tailored to the organisation's responsibilities, maturity and risk picture. We use recognised standards and forms of analysis suited to the purpose, including NS 5814, the NS 5830 series and ISO/IEC 27005.
The mapping and analysis may include
- mapping of fundamental national functions, critical deliverables and key dependencies
- identification and assessment of infrastructure requiring protection and objects requiring protection
- asset assessment and determination of what the organisation is to protect
- threat assessments, scenario analyses and assessment of relevant hazardous events
- vulnerability analyses of organisational, human, physical and technological factors
- assessment of consequences, interdependencies and possible knock-on effects
- analysis based on recognised methods suited to the purpose, including NS 5814, the NS 5830 series and ISO/IEC 27005
- identification, assessment and prioritisation of risk-reducing measures
What does the organisation receive?
The organisation receives an overall situational and risk picture with prioritised findings and recommendations that can be translated into governance and measures. The assignment can be limited to a specific issue or form part of long-term work on security management and continuous improvement.
← Back to Security Act and Risk Analysis