Guidance on security threat risk assessment procedures

Version history

December 2023 Rev. 1.2 – No change of content; revision of document layout; document map added

August 2021 Rev. 1.1 – Update and revision

December 2016 Rev. 1 – Update and revision of security risk assessment process

January 2007 – Initial publication

Contents

• Introduction
• Glossary
• Scope
• Responsibility
  • Cyber Security Risk Management
• Security Risk Assessment (SRA) process
  • Preparatory Work
  • Threat Assessment
  • Vulnerability Assessment
  • Residual Risk
  • Mitigation Plan
• Appendix 1 – Example maritime security threats list
• Appendix 2 – Example of port and harbour security vulnerabilities list