Enterprise Security Risk Assessment Readies a Major Western Sydney Council for Airport-Driven Growth

Home » Case Studies » Government » Enterprise Security Risk Assessment Readies a Major Western Sydney Council for Airport-Driven Growth
Location
Penrith, NSW
Services
ISO 31000 STRA

A five-phase enterprise security threat and risk assessment across 160+ monitored sites — including physical assessments of the Civic Centre and Kingswood Depot — delivered an enterprise risk register aligned to ISO 31000.

THE CHALLENGE

A major Western Sydney local government authority — situated in the rapidly developing precinct surrounding the new Western Sydney International Airport — needed to understand and manage its security risks at an enterprise level. With 160+ alarm-monitored sites and an extensive CCTV network, the council had never conducted a systematic, risk-based assessment of its security posture. The pace of regional growth, combined with increasing community demand and a complex multi-site operating environment, made a rigorous enterprise-level assessment both timely and urgent.

OUR APPROACH

Agilient deployed a structured five-phase methodology aligned to ISO 31000, encompassing context establishment, threat and vulnerability assessment, risk analysis and evaluation, treatment prioritisation, and stakeholder reporting. Physical security assessments were conducted at the Civic Centre and Kingswood Depot — the council’s two highest-criticality facilities. Stakeholder workshops engaged both executive leadership and operational teams to ensure risk registers reflected real-world operating conditions. The proximity to Western Sydney International Airport was incorporated into the assessment as a relevant threat context.

THE OUTCOME

  • Delivered a comprehensive enterprise risk register and individual site-specific risk registers across 160+ monitored council sites
  • Produced physical security assessment reports for the Civic Centre and Kingswood Depot with prioritised, costed treatment recommendations
  • Provided the council with a defensible, ISO 31000-aligned security risk framework ready for integration into enterprise risk management processes