SMS will assist organisations to develop a cost effective, robust security environment with services that include: threat assessments policy reviews; training and development; and training master planning, providing comprehensive security consulting services to enable an enhanced feeling confidence about the actions taken to protect employees, operations, facilities, and assets.
SMS methodology to providing security and risk management services is informed by an ongoing Project Threat and Risk Assessment, primarily focused on the diversity of the operation al environment, but also with attention paid to the project security manual and associated risk assessments, providing the context and rationale for having a dedicated Program Security Architecture. The Threat and Vulnerability Risk Assessment (TVRA) ranks threats and vulnerabilities (the constituent elements of risk) and provides mitigating measures to them to reduce the risk levels to ALARP levels. This is done by considering risk as being ubiquitous and constant and attempting to put as many layers of protection between the organization, its personnel and the threat.
This layered approach to security can be conceptualised as an onion: where project personnel are at the centre and each layer of the onion skin represents a barrier. Each layer attempts to react to the project threats and minimise both likelihood and consequences as follows:
In order to provide a robust Risk Management service, SMS have hand selected project consultants with specific skill sets and have a strong understanding of the specific context.