What’s a security risk assessment (SRA)?

A security risk assessment identifies the security threats, vulnerabilities and consequences that may affect a building, precinct or organisation.

It considers how people, information, assets and operations could be exposed to security risks and recommends practical measures to reduce those risks. This may include physical security, electronic security, operational procedures, access control, surveillance, hostile vehicle mitigation, cybersecurity interfaces and emergency response planning.

An SRA is often used early in a project to inform the security strategy, design brief and budget. It helps project teams understand what level of protection is needed, where controls should be located and how security can be integrated without compromising the building’s function or user experience.