Product Overview

Summary: This Security Management and Threat Assessment SOP provides a structured, defensible approach to identifying, assessing and controlling security risks across Australian workplaces. It helps organisations protect people, information, and assets by embedding clear, repeatable processes for threat identification, escalation, and response in line with WHS obligations and contemporary security best practice.

Australian businesses are increasingly exposed to a wide range of security threats – from unauthorised access and workplace violence to information theft and targeted criminal activity. This Security Management and Threat Assessment Safe Operating Procedure gives your organisation a clear, practical framework for proactively identifying vulnerabilities, assessing threat levels, and putting robust controls in place before an incident occurs. It connects day‑to‑day security tasks with your broader WHS and risk management systems so that security is managed consistently, not reactively.

The SOP guides you through establishing site-specific security baselines, conducting formal threat assessments, and implementing layered controls such as access management, surveillance, visitor management, and incident escalation protocols. It clarifies roles and responsibilities for managers, security personnel and general staff, ensuring everyone understands how to recognise suspicious behaviour, report concerns, and respond appropriately to emerging threats. By adopting this procedure, organisations can demonstrate due diligence under Australian WHS legislation, reduce the likelihood and impact of security incidents, and create a safer, more controlled environment for workers, contractors, and visitors.

Designed for use across a wide range of sectors – including offices, education, healthcare, logistics, local government, and retail – this SOP integrates with existing emergency management and business continuity arrangements. It supports organisations to document decisions, maintain auditable records of threat assessments, and regularly review controls in line with changes to operations, staffing, or the external risk environment.

Key Benefits

• Strengthen protection of workers, visitors and assets through a structured, risk-based security management process.
• Ensure alignment with WHS duties of care by treating security threats as workplace hazards requiring systematic control.
• Reduce the likelihood and impact of security incidents, including unauthorised access, aggression, theft and information loss.
• Standardise how threats are identified, assessed, escalated and documented across sites and teams.
• Support training, onboarding and contractor induction with clear, practical security expectations and response steps.

Who is this for?

• WHS Managers
• Security Managers
• Facilities Managers
• Operations Managers
• Risk and Compliance Managers
• HR Managers
• Site Supervisors
• Campus and Venue Managers
• Corporate Services Managers
• Emergency Management Coordinators

Hazards Addressed

• Workplace violence and aggression from clients, customers or members of the public
• Unauthorised access to restricted or high-risk areas
• Theft, vandalism and deliberate damage to property or critical infrastructure
• Insider threats, including misuse of access privileges or confidential information
• Security breaches involving sensitive information, records or IT assets (in coordination with ICT policies)
• Threats and intimidation (including verbal threats, stalking or harassment on or near the workplace)
• Armed or dangerous persons attending the workplace
• Tailgating and circumvention of access control systems
• After-hours lone work security risks
• Security-related fatigue or stress arising from unmanaged threat environments

Included Sections

• 1.0 Purpose, Scope and Objectives
• 2.0 Definitions and Key Terms (Security and Threat Assessment)
• 3.0 Legal and WHS Obligations for Security Management
• 4.0 Roles, Responsibilities and Authority Levels
• 5.0 Security Risk and Threat Assessment Methodology
• 6.0 Site Security Profiling and Vulnerability Identification
• 7.0 Control Measures – Physical, Procedural and Technological
• 8.0 Access Control, Identification and Visitor Management
• 9.0 Managing Workplace Violence, Aggression and Threats
• 10.0 Incident Reporting, Escalation and Notification Protocols
• 11.0 Coordination with Emergency Management and Evacuation Procedures
• 12.0 Information Security Interface and Confidentiality Considerations
• 13.0 Training, Induction and Security Awareness Programs
• 14.0 Monitoring, Inspections and Security Audits
• 15.0 Review, Continuous Improvement and Recordkeeping Requirements
• 16.0 Appendices – Checklists, Forms and Example Threat Assessment Templates

Legislation & References

• Work Health and Safety Act 2011 (Cth) and equivalent state and territory WHS Acts
• Work Health and Safety Regulations 2011 and equivalent state and territory regulations
• Safe Work Australia – Managing the Risk of Workplace Violence and Aggression in Health Services (guidance, applicable by analogy across sectors)
• Safe Work Australia – How to Manage Work Health and Safety Risks: Code of Practice
• AS ISO 31000:2018 Risk management – Guidelines
• AS 3745:2010 Planning for emergencies in facilities
• AS 4421:2011 Guard and patrol security services
• AS/NZS 4801:2001 Occupational health and safety management systems (superseded but still commonly referenced)
• AS 2201 (series): Intruder alarm systems (where electronic security systems are used)