FAQ - Frequently Asked Questions

What is CPTED and how does it influence safety and security?

CPTED (Crime Prevention Through Environmental Design) is a proactive approach to safety that uses the design and management of spaces to reduce crime and improve people’s sense of security. By shaping how environments are laid out, used and maintained, CPTED helps discourage unwanted behaviour while supporting legitimate activity.

CPTED is based on five core principles:
  • Natural Surveillance – improving visibility so people can see and be seen
  • Natural Access Control – guiding movement and limiting unauthorised access
  • Territorial Reinforcement – clearly defining ownership and use of spaces
  • Maintenance and Management – ensuring areas are well cared for and actively managed
  • Activity Support – encouraging positive use of spaces to increase safety
 
The Proper implementation of CPTED principles allows for a safer environment with a reduced physical security footprint and expenditure. When applied effectively, CPTED reduces risk, strengthens resilience and complements physical security measures, resulting in safer, more functional environments. 
A Business Continuity Plan (BCP) ensures an organisation can continue operating during and after unexpected disruptions such as cyber incidents, system failures, supply chain interruptions, natural hazards, or loss of key personnel.
 
Disruption does not discriminate by size. Small and medium organisations are often more vulnerable because they rely on limited staff, critical systems, or single suppliers. Without a clear plan, even a short interruption can escalate into prolonged downtime, financial loss, reputational damage, or regulatory non‑compliance.
 
A BCP provides clarity on roles, priorities, decision‑making, and recovery steps, enabling faster, more confident responses when incidents occur.
Desktop exercises allow organisations to validate, stress‑test and improve their continuity arrangements in a controlled environment. They:
 
  • Identify weaknesses before a real disruption occurs
  • Improve staff confidence and readiness
  • Strengthen coordination across teams and leadership
  • Reduce response time and recovery impacts
 
Regular testing transforms a BCP from a static document into a practical, reliable capability.
A Business Continuity Plan (BCP) is a core governance and resilience requirement that enables an organisation to retain control during major disruption. Without a clear and tested plan, incidents can rapidly escalate into operational, financial and reputational failure.
For boards, effective business continuity:
 
  • Protects organisational value and reputation
  • Supports informed, timely executive decision‑making under pressure
  • Reduces the risk of prolonged outages and irrecoverable loss
  • Demonstrates due diligence and risk oversight
 
Plans that are not exercised through executive desktop scenarios often fail when required, exposing leadership, governance and recovery gaps at the worst possible time. Robust planning and regular testing ensure the organisation can respond decisively, recover critical operations and sustain confidence among stakeholders.
Yes. A security risk assessment is an essential component of meeting Work Health and Safety (WHS) obligations and maintaining a safe workplace.
 
Under Australian WHS legislation, organisations have a legal duty to identify hazards, assess risks, and implement controls to protect workers, contractors, visitors and others from foreseeable harm. Security‑related threats — such as violence, unauthorised access, theft, aggression, or intrusion — are recognised workplace hazards when they have the potential to cause physical or psychological injury.
 
A security risk assessment enables an organisation to:
 
  • Identify security threats that may impact people, property or operations
  • Assess the likelihood and consequence of security‑related incidents
  • Implement proportionate controls to eliminate or minimise risks so far as is reasonably practicable
  • Demonstrate due diligence and compliance with WHS duties
 
Importantly, WHS obligations extend beyond traditional safety hazards. Exposure to violence, threats, stress or traumatic events arising from poor security can constitute a failure to provide a safe system of work.
Without a structured security risk assessment:
 
  • Hazards may go unrecognised or unmanaged
  • Controls may be inconsistent, reactive or ineffective
  • Organisations may be exposed to WHS breaches, regulatory action, or civil liability
  • Incidents can result in serious injury, psychological harm and operational disruption
 
A documented and regularly reviewed security risk assessment provides clear evidence that the organisation has actively identified and managed security risks in line with WHS requirements.
Instagram Facebook-f Linkedin
(02) 9188-7752