A five-phase council security risk assessment across a large portfolio of monitored sites, including physical assessments of the council’s two highest-criticality facilities, delivered an enterprise risk register aligned to ISO 31000.
THE CHALLENGE
A major metropolitan local government authority in a fast-growing region needed to understand and manage its security risks at an enterprise level. With a large portfolio of alarm-monitored sites and an extensive CCTV network, the council had never conducted a systematic, risk-based assessment of its security posture. The pace of regional growth, combined with increasing community demand and a complex multi-site operating environment, made a rigorous enterprise-level assessment both timely and urgent.
OUR APPROACH
Agilient deployed a structured five-phase methodology aligned to ISO 31000, encompassing context establishment, threat and vulnerability assessment, risk analysis and evaluation, treatment prioritisation, and stakeholder reporting. Physical security assessments were conducted at the council’s two highest-criticality facilities. Stakeholder workshops engaged both executive leadership and operational teams to ensure risk registers reflected real-world operating conditions. Major infrastructure development in the region was incorporated into the assessment as relevant threat context.
THE OUTCOME
- Delivered a comprehensive enterprise risk register and individual site-specific risk registers across the council’s monitored sites
- Produced physical security assessment reports for the two highest-criticality facilities, with prioritised, costed treatment recommendations
- Provided the council with a defensible, ISO 31000-aligned security risk framework ready for integration into enterprise risk management processes
Related services: independent CCTV consultant, protective security and PSPF consulting, security risk assessment consultants. Sector experience: government security consultant. To discuss a similar project, contact Agilient.