Business Category: Safety / Industrial Category: Risk Management & Compliance

Security Risk Assessment Template

Published: Updated:

A security risk assessment. The scope of the assessment included, among others, the following areas: - ACCESS CONTROL SYSTEM - VISITOR AND FIREARMS CONTROL SYSTEM - PERIMETER PROTECTION AND INFRASTRUCTURE - FIRE DETECTION/PROTECTION - SURVEILLANCE SYSTEMS - SUBCONTRACTING/CONTRACTS/SERVICE LEVEL AGREEMENTS - MINIMUM STANDARDS - GENERAL

Use this template with flowdit

  • Customize this template or build your own
  • Complete inspections using the mobile app
  • Get reports and analyze your data

Start inspecting smarter — free for one user.

Use template Preview or Download template as PDF
Security Risk Assessment Template
Based on

How to Use This Checklist

  • Record the date the assessment is carried out, who prepared it, and the location being assessed.
  • Check **yes**, **no**, or **N/A** for each item. Use **N/A** only where the control genuinely does not apply to the area, and note the reason.
  • For every **no**, record what is missing or faulty — for example, a reader that is not functional, a door without a door contact, or a camera not positioned for optimum coverage.
  • Confirm that the control is not only present but working. An installed door contact that is not monitored, or a generator that is locked but never tested, still counts as a failing item.
  • Work through the sections in order and cover every area within the scope before you close the assessment.
  • When an answer depends on a document — access level reviews, key control records, minimum standards, or service level agreements — name the document that supports the answer.
  • Record the results and the date of the review so the next assessment can be compared against it.

Start inspecting smarter — free for one user.

Start Free Book A Personal Demo

What this assessment is

A security risk assessment walks through the physical and procedural security controls in place at a site and records, item by item, whether each control is present and working. You answer each question with yes, no, or N/A, and you record the date the assessment was conducted, who prepared it, and the location assessed. The scope of this template is deliberately broad. It covers access control, staff and cash-in-transit (CIT) access, firearms, armed response, perimeter protection, surveillance systems, alarm systems, infrastructure, security control rooms, power and electricity, minimum standards, and cleanliness and maintenance. > The assessment is only useful if it reflects what you actually found. A control that is installed but not working should be recorded the same as a control that is missing.

Why it matters

Each item in the assessment corresponds to a control that is meant to prevent, detect, or delay an incident. A reader that is not functional, an emergency exit that is not monitored, or a camera that does not cover the area it is meant to cover all leave a gap in that chain. Several items in this template carry a defined threshold. Recordings must be retained for at least 90 days. CCTV must record at a minimum speed of at least 12 frames per second. Your assessment should reflect whether the site meets those thresholds, and where it does not, that is the finding.

Access control

The access control items cover the hardware and the rules that sit behind it: - Whether all access readers are functional. - Whether the anti pass back or interlocking function is operational. - Whether all high-risk areas are equipped with readers. - Whether all access control systems are connected to the uninterruptible power supply. - Whether the servers of all security equipment are hosted in a secure and adequately ventilated area. - Whether all access control doors and emergency exits are monitored by means of door contacts. - Whether all access doors are equipped with emergency override devices. - Whether password controls are in place. - Whether access levels are properly programmed and regularly reviewed. - Whether keys are adequately controlled.

Staff and cash-in-transit access, firearms, and armed response

Visitor and staff access must be strictly controlled, and so must access to the cash-in-transit (CIT) vehicle center. The assessment checks whether all staff and visitors are registered on entering and leaving critical areas, whether unauthorized access through the emergency exit door is prevented, and whether KABA locks are installed on vault doors and functioning. Firearms are covered separately: whether there is adequate firearm control at all centers, and whether there are firearm lockers at all centers. Armed response is checked at two points — whether an armed response exists, and whether the alarm signal is monitored by an external company.

Perimeter protection, surveillance, and alarms

**Perimeter protection.** Assess whether the perimeter protection is adequate, whether CCTV cameras are installed, and whether an electric fence is installed. Record the form of the boundary itself — brick wall or palisade fencing. Check the vehicle and pedestrian entrance, whether any other services operate within the facility, whether there is staff parking within the facility, and whether perimeter lighting is adequate. **Surveillance systems.** Check whether CCTV cameras are installed and whether they meet the stated minimums: at least 12 frames per second, and recordings retained for at least 90 days. Confirm that the CCTV systems are connected to an uninterruptible power supply and that servers and DVRs are secured and adequately ventilated. Camera positioning should be checked against the quality and coverage it delivers, and access to the server room must be controlled. **Alarm systems.** Check whether the alarm system is adequate. All fire, panic, and holdup alarms should be externally monitored by an armed response company. Internal doors, burglary alarms, sprinklers, maintenance alarms, and emergency exits should be connected to the access control system and monitored 24 hours a day. All alarm systems should be installed on tamper-proof panels.

Infrastructure, control rooms, and power

**Infrastructure.** Check that all roller doors are interlocked, that all air conditioning ducts are properly secured, and that all main entrance doors are resistant to AK47 weapons. Where a wall does not extend to the concrete slab above the ceiling, check that a 16 mm round bar has been installed. Confirm that all cash transfer ducts are fully operational and used correctly, and that there is an adequate strong room. **Security control rooms.** Check that all control rooms have access control, that all control room windows are equipped with bullet-resistant glass, and that access to the control room is restricted. **Power and electricity.** Check that all security systems are connected to an uninterruptible power supply (UPS). Confirm that lighting is adequate and that the exterior can be seen clearly. Check that a generator is installed, that it is tested periodically, and that it is locked.

Minimum standards and general condition

Check whether minimum standards exist and are reviewed periodically, whether minimum standards (MSP) are applied, and whether security management visits the site regularly. General condition matters because it reflects how well the site is maintained: whether all electrical fittings are in proper working condition, and whether all lights work with no broken fittings or hanging lamps.

How to carry out the assessment

1. Set the frame: record the date, who prepared the assessment, and the location. 2. Set the scope: work through the areas listed above so that no section is left out. 3. Verify each item on site rather than from documents alone. Confirm that a control is working, not merely installed. 4. Where an item depends on a record — access level reviews, key control, minimum standards, service level agreements — confirm that the record exists and is current. 5. Mark each item yes, no, or N/A on the scale provided. Use N/A only where the item genuinely does not apply, and state why. 6. For each no, note the specific shortfall so it can be acted on. 7. Keep the completed assessment so the next one can be compared against it.

Frequently Asked Questions

A security risk assessment is a structured review of your site's physical and procedural security controls. You walk through each area in turn, confirm whether the required control is in place and working, and record the result. The assessment covers access control, visitor and firearms control, perimeter protection, fire detection, surveillance, alarm systems, infrastructure, control rooms, power supply, minimum standards, and cleanliness and maintenance.

The assessment runs through the areas that determine whether a site can detect, delay, and respond to a security incident. Access control items cover reader functionality, anti pass back or interlocking, coverage of high-risk areas, uninterruptible power supply connections, secure and ventilated server hosting, door contacts on access doors and emergency exits, emergency override devices, password controls, programmed and reviewed access levels, and key control. Staff and cash-in-transit access, visitor registration, KABA locks on vault doors, firearm control and lockers, armed response, and external alarm monitoring are also checked.

Perimeter protection items ask whether perimeter protection is adequate, whether CCTV cameras and an electric fence are installed, what form the boundary takes (brick wall or palisade fencing), whether there is a vehicle or pedestrian entrance, whether other services operate within the facility, whether staff parking is inside the facility, and whether perimeter lighting is adequate.

Surveillance items check whether CCTV cameras are installed, whether recording runs at a minimum of at least 12 frames per second, whether the systems are connected to an uninterruptible power supply, whether servers and DVRs are secured and adequately ventilated, whether cameras are positioned for optimum quality and coverage, whether recordings are retained for at least 90 days, and whether access to the server room is controlled.

Alarm items ask whether the alarm system is adequate, whether fire, panic, and holdup alarms are externally monitored by an armed response company, whether internal doors, burglary alarms, sprinklers, maintenance alarms, and emergency exits are connected to the access control system and monitored 24 hours a day, and whether all alarm systems are installed on tamper-proof panels.

Infrastructure items ask whether roller doors are interlocked, air conditioning ducts are properly secured, main entrance doors are resistant to AK47 weapons, a 16 mm round bar has been installed where a wall does not extend to the concrete slab above the ceiling, cash transfer ducts are fully operational and used correctly, and whether there is an adequate strong room.

Control room items ask whether all control rooms have access control, whether their windows are equipped with bullet-resistant glass, and whether access to the control room is restricted. Power items ask whether all security systems are connected to an uninterruptible power supply, whether lighting is adequate and the exterior can be seen clearly, and whether a generator is installed, tested periodically, and locked.

Minimum standards items ask whether minimum standards exist and are reviewed periodically, whether minimum standards (MSP) are applied, and whether security management visits the site regularly. Cleanliness and maintenance items ask whether all electrical fittings are in proper working condition and whether all lights work, with no broken fittings or hanging lamps.

Answer each applicable item on the Yes, No, or N/A scale, marking N/A only where the control genuinely does not apply to the area being assessed. Work through the sections in order, from access control and staff or cash-in-transit access through to minimum standards and cleanliness and maintenance. The template also records the date the assessment was conducted, who prepared it, and the location.
Arne Reis
Written by
Arne Reis
Founder

Process optimizer with 25 years of expertise, focused on operational excellence in quality, maintenance, EHS, and commissioning. Emphasizes innovative solutions and top-quality standards.

View LinkedIn profile

Still managing operations with paper and Excel?

Digitize inspections, audits, SOPs, and corrective actions.

Book A Personal Demo
flowdit mobile inspection app

Resources Under The Same Category

Fall Prevention Program Checklist
Safety

Fall Prevention Program Checklist

This checklist serves as a comprehensive guide for developing an effective fall ...

View template →
Ladder Inspection Form
Safety

Ladder Inspection Form

Professional ladder safety inspection and compliance assessment conducted in acc...

View template →
Field Safety Walk
Safety

Field Safety Walk

A structured safety walk-through designed to identify, evaluate, and document co...

View template →
OSHA Hand and Power Tools Inspection
Safety

OSHA Hand and Power Tools Inspection

This comprehensive checklist is designed to promote workplace safety by thorough...

View template →
Plocher Heavy Equipment Daily Inspection
Safety

Plocher Heavy Equipment Daily Inspection

This daily heavy equipment inspection form is designed to confirm machine operat...

View template →
Inframax Field Safety Inspection Checklist
Safety

Inframax Field Safety Inspection Checklist

This comprehensive field safety inspection checklist is designed to elevate safe...

View template →

Ready to simplify inspections and get your team moving faster?

Start free today and turn inspections into a clear, consistent digital workflow. Prefer a guided walkthrough? Book a demo and see how flowdit can fit your team.

Start Free Book A Personal Demo