Risk assessment is the process of evaluating risks to your organisation, its activities and, crucially, your staff in a specific location.
Assessing the security and safety risks in your operating context helps the organisation meet its duty of care obligations and enables you to make more informed decisions about the measures and actions required to manage staff security and safety in your location.
It is important to properly document these risk assessments as a formal record of the risks faced by staff. Documented assessments will also support the rationale for necessary security expenditure on physical security measures, equipment, training or other security approaches.
A structured risk assessment process involves five stages:
- Identify threats – identify all the possible security and safety threats in the location.
- Evaluate threats – evaluate each threat to understand how, when and why it occurs, and the degree to which staff, assets and programmes are vulnerable.
- Determine risk – consider the likelihood and potential impact of the different threats, given the measures and procedures already in place, to ascertain the level of risk involved.
- Mitigate risk – identify additional strategies, measures or actions that could help reduce certain risks to an acceptable level.
- Document assessment – the risk assessment process should be documented, including the key findings and mitigation measures adopted.
Risk assessments should be reviewed and updated on a regular basis to reflect changes in the operating environment, and to ensure that appropriate security measures are in place at all times.
Resources & Tools
- GISF Security to Go - Module 3: Risk assessment tool - pdf0.11 MB
- GISF Security Risk Management: a basic guide for smaller NGOs – Security risk assessments - pdf0.04 MB
- ACT Alliance - Security Risk Assessment Tool - pdf0.56 MB
- Security & Safety Risk Assessment Template - docx0.05 MB
- Security Risk Assessment (SRA) & Compliance Tracker Template - xlsx0.07 MB