Resources
Security, risk and resilience guides
Practical guides and playbooks for the people responsible for security, risk and resilience in Australian organisations.
Agilient publishes free, practical guides for the people responsible for security, risk and resilience in Australian organisations. Each one explains an obligation or a task in plain language, cites the primary sources, and sets out the steps. They cover critical infrastructure and the SOCI Act, security risk assessment and audits, protective security and the PSPF, physical and electronic security, and business continuity.
The guides are written by Agilient consultants and are updated as frameworks and rules change. They are a starting point, not a substitute for advice on a specific site or program; where a guide raises a question for your organisation, a short briefing with Agilient is usually the quickest way to answer it.
Free templates and checklists
Editable Word documents written by Agilient consultants. Tell us a little about your organisation and the download link appears straight away. See all free tools and templates.
Business continuity plan template
A plan structured on ISO 22301, ready to fill in.
Security threat and risk assessment template
Threats, controls, a risk matrix, register and treatment plan.
CIRMP template
For SOCI responsible entities, including the enhanced rules.
Strata building security checklist
For strata committees, owners and building managers.
Place of worship security review
For faith communities, and a starting point for funding applications.
Free infographics
One-page summaries you can print or share, each with a printable A4 PDF and a full guide behind it.
PSPF Release 2026: what has changed infographic
The changes in the 2026 Protective Security Policy Framework. Includes a printable A4 PDF.
Enhanced CIRMP Rules infographic
What critical infrastructure operators must do, and by when. Includes a printable A4 PDF.
DISP membership infographic
What defence suppliers need in place across the four security domains. Includes a printable A4 PDF.
Business continuity plans infographic
What a credible, tested business continuity plan looks like. Includes a printable A4 PDF.
Crisis management infographic
What a capable crisis management team does, before, during and after. Includes a printable A4 PDF.
Security risk assessment process infographic
The eight steps, from context and scope to monitoring and review. Includes a printable A4 PDF.
CPTED principles infographic
The four core principles of designing out crime, and where they matter. Includes a printable A4 PDF.
Free self-assessment tools
Answer a few plain questions and get an instant score, by area, with your priority actions, then email yourself a branded PDF report. Not sure which frameworks apply to you? Start with the security framework finder, or see all self-assessment tools.
CIRMP readiness check
Up to 18 questions against the CIRMP physical security rules.
PSPF self-assessment
20 questions across the six PSPF domains.
Medicinal cannabis security check
Up to 21 questions against the ODC security guideline.
CCTV system health check
Optimise, upgrade in stages or replace?
Security risk maturity check
How mature is your security risk management?
Business continuity readiness check
Impact analysis, plans, exercising and governance.
Critical infrastructure and SOCI
Practical help for responsible entities working through the SOCI Act and the CIRMP Rules.
CIRMP physical security playbook
An eight step method for meeting the baseline and enhanced physical security rules.
CIRMP personnel security playbook
Critical workers, AusCheck background checks and the section 9A suitability rules.
Enhanced CIRMP Rules guide
What the 2026 rules change across all four hazards, and the 2027 and 2028 deadlines.
SOCI Act compliance roadmap
A leader’s roadmap from confirming obligations to board assurance.
SOCI Act and CIRMP explained
The regime, the positive security obligations and the annual report.
Security risk assessment and audits
How to assess and audit security in a way that is consistent, defensible and useful to decision makers.
Security risk assessment process
A step by step guide for Australian organisations.
Security risk assessment template
A free Word template aligned with SA HB 167:2025, and what a good template should include.
Key risk indicators
Early warning measures for security and resilience risks, with examples and thresholds.
Risk mitigation
Treatment options, layered security controls and what goes in a mitigation plan.
Third party risk management
Managing the security risks from suppliers and contractors under the PSPF, CIRMP and CPS 230.
Security audit procedures
How to plan, run and report a security audit.
How to assess building security
A practical walk-through for facility and property managers.
Crowded places and events security risk assessment
Venues, precincts and events under the national crowded places strategy.
Construction sites security risk assessment
The WHS duty to secure a site, and security in design before handover.
Data centres security risk assessment
SOCI Act CIRMP obligations, layered access, insider risk and critical plant.
Strata security
Parcel and mail theft, tailgating, car parks and CCTV rules for owners corporations, with a free checklist.
Residential security assessment
Protecting high-profile homes and the families who live in them.
Protective security and the PSPF
Guidance for Commonwealth entities and their suppliers.
PSPF maturity assessment guide
How to run a PSPF maturity self-assessment and report it.
PSPF explained
The Protective Security Policy Framework, its domains and current release.
How the ISM fits the PSPF
Where the Information Security Manual sits in a protective security posture.
Physical and electronic security
Independent guidance on designing, upgrading and buying security technology.
CCTV upgrade guide
Replacing ageing and analogue CCTV: options, business case, tender and privacy.
Mobile CCTV
When temporary cameras make sense, what to check and the privacy rules.
Council CCTV
Public space cameras, state privacy rules, codes of practice and police access.
Hospital CCTV
AS 4485, health privacy and occupational violence in healthcare.
University CCTV
Campus privacy law, staff notice, residences and facial recognition.
Stadium and venue CCTV
Crowded places duties, liquor licence conditions and control rooms.
Racing CCTV
Integrity evidence, kennel and stable security, and race day crowds.
Childcare CCTV
Child safety reforms, CCTV policy, privacy and supervision in early learning.
School CCTV
State education rules, prohibited areas, retention and access to footage.
Aged care CCTV
Consent, privacy and dignity in residential aged care.
Critical infrastructure CCTV
CIRMP physical hazards, continuous monitoring and grid guidance.
CPTED guide
Crime prevention through environmental design for Australian projects.
Physical and facility security
Defence in depth, standards and how physical security fits the wider program.
Business continuity, crisis and exercising
Plans and exercises that hold up when they are needed.
How to create a business continuity plan
Building a plan that actually works in a disruption.
Business continuity plan template
A free, editable Word template aligned with ISO 22301.
How often to test a business continuity plan
Testing and exercise frequency, and what good looks like.
Exercising and testing
Tabletop and functional exercises, and annual exercise programs.
Tabletop exercise guide
Objectives, scenarios, injects, facilitation and the post-exercise report.
CPS 230 business continuity guide
Critical operations, tolerance levels and the annual exercise for APRA-regulated entities.
Resilience and business continuity frameworks
ISO 22301, crisis and emergency management explained.
Frameworks, case studies and training
Reference material and evidence of how the work is done in practice.
Security and compliance frameworks
The standards and frameworks hub, from PSPF to DISP.
Industry and sector frameworks
Sector obligations for maritime, aviation, health, aged care and schools.
Case studies
De-identified examples of Agilient engagements across sectors.
Training courses
Security, risk and resilience training for staff and managers.
Need help applying a guide to your organisation?
Agilient provides independent security, risk and resilience advice across Sydney, Melbourne, Brisbane, Adelaide, Canberra and regional Australia, and works alongside in-house teams.