CHAPTER 3: ASSESS RISK, SELECT RESPONSE OPTIONS AND SEEK SUPPORT

1. Assess level of risk and select response options that avoid use of force where possible in accordance with workplace requirements. This process is part of a thorough security risk assessment and response.
2. Report security risk to relevant persons and request assistance as part of security risk assessment and response procedures.

3.1 Assess the level of risk and select response options that avoid the use of force where possible in accordance with workplace requirements.

• A security risk assessment identifies, evaluates, and implements key application security controls as a central component of any security risk assessment and response strategy.
• It is also concerned with preventing application security defects.
• A risk assessment enables managers to make informed decisions about resource allocation, tooling, and security control implementation.
• As a result, an assessment is essential to an organisation’s risk management process and determining the risk level.

Workplace requirements may include:

• Code of conduct, code of ethics
• Communication and reporting procedures
• Complaint and dispute resolution procedures
• Emergency and evacuation procedures
• Employer and employee rights and responsibilities
• Own role, responsibility and authority
• Personal and professional development
• Privacy and confidentiality of information
• Roles, functions and responsibilities of security personnel
• Client service standards

3.2 Report security risk to relevant persons and request assistance.

• When a relevant incident occurs, a security report should be written. Moreover, security risk assessment and response protocols must be followed.
• Depending on your business, this incident can include theft, a break-in, a fire, employee misappropriation of property, and trespassing.
• A security report does more than just record a noteworthy incident.
• A security report can be given to law enforcement officials during an investigation or used in court if the suspect is charged.

A good security report should include the following information:

• The date and time of the incident.
• The location of the incident, including address.
• The type of incident, and a detailed account of what happened.
• Names of any victims including their injuries.
• Names of any witnesses, along with their accounts of what happened.
• Any property that was stolen or damaged.
• If any arrests were made.