Conducting Risk Assessments

Chapter 22 provides a structured, qualitative framework for conducting personal security risk assessments using the Analytical Risk Management (ARM) process. It emphasizes that, unlike corporate or industrial risk models, personal security assessments must focus on the individual as the central asset—making the method adaptable to small-scale, high-impact scenarios such as travel, executive protection, or family safety. The process begins by identifying critical assets and analyzing the consequences of their loss, followed by identifying undesirable events that could impact those assets. The chapter introduces qualitative scaling systems and matrices for evaluating impact, threat, vulnerability, and overall risk through a disciplined, iterative process. Subsequent sections guide the reader through categorizing threats by intent, capability, and environmental factors; identifying vulnerabilities in personal behavior, technology, or operational practices; and integrating these assessments into an overall risk profile. The author stresses contextual judgment, avoiding checklist-based or purely formulaic approaches, and grounding analysis in relevant data. The chapter concludes by linking risk levels to mitigation planning—balancing the cost, effectiveness, and practicality of countermeasures. It highlights that many effective risk-reduction strategies derive from procedural discipline rather than expensive technology or manpower. Ultimately, the chapter positions risk assessment as a continuous, methodical process essential to informed decision-making, resource prioritization, and the development of resilient personal security programs.