Updated Security Risk Management Guidance from Protect UK
While it’s true you’re very unlikely to be caught up in a terrorist attack, as an employer, you are required by law to protect employees, customers, volunteers and other people visiting your sites, from harm.
If you’re unfortunate enough to be part of an attack, you need to have a system in place to identify and manage the risks. This will help your organisation to keep people safe and give confidence to those working in or visiting your site by showing that you have taken measures to protect them. This will also reduce the financial damage that might result from an attack and help protect your reputation or brand. It might also help you to manage other concerns, such as theft or safety.
Of course, having a system in place will be an important factor in any formal investigation such as an inquest, inquiry, civil claim or criminal prosecution.
Protect UK has updated their Security Risk Management Guidance that provides information to help you take forward a strong risk management system, and better prepare your organisation to cope if you should be caught up in an attack.
Included in the guidance is the Risk Management Model, together with Risk Management templates and examples.
Organisations are strongly recommended to regularly review the Protect UK website for the latest updates and security guidance.