A complete security risk assessment in MS Word, already written, with worked examples in every section. Replace the examples with your own and you have a finished report.
 
Most risk assessment templates are a blank table with headings. This one is a full report: executive summary, scope, context, assessment criteria, asset criticality, threat and hazard analysis, risk register, treatments and recommendations. Every section is already populated with realistic worked examples, so you can see what a finished assessment looks like before you write a word.
 
What you get
Fully editable MS Word template (.dotx): open it and Word creates a fresh document from it every time, so the master never gets overwritten
Worked examples for every section: executive summary, scope, context, criteria, asset criticality, hazards, risks, controls and treatments
Guidance notes drawn from SRMBOK, ISO 31000:2018 and the Security Risk Management Aide-Mémoire (SRMAM)
A structure that follows the ISO 31000 process, so the report reads the way an auditor, board or client expects
 
Who it is for
Security and risk consultants who write assessments for clients, in-house security managers who need a defensible report without starting from a blank page, and anyone who has been asked to do a risk assessment for the first time.
 
Buy it once and reuse it on every job. Single-organization license. No subscription.
 
Included in the SRMBOK Library at the Complete level. Compare Library plans.