Protective Security

It is imperative that a clear protective security strategy is based on a strong governance framework which fits within the organisation’s overall enterprise risk management structures. We start with  undertaking a thorough analysis to identify protective security legislative and regulatory requirements ranging from government policies such as the Commonwealth Protective Security Policy Framework (PSPF) to provisions in other specific legislative instruments relevant to your organisation. 

Our services in this area cover a range of activities, which include:

• Clarification of organisation’s security objectives based on a holistic and specialised threat and risk analysis. 
• Identification of the organisation’s assets requiring protection.
• Development of a comprehensive protective security management framework including roles and responsibilities and policy and procedural frameworks.
• Assessing the effectiveness of organisation’s security compliance management systems – both from the design and operating effectiveness point of view. 

In our view, legal and regulatory compliance, is however just a start. World class organisations go beyond a basic conformance approach to understand their exposure to risk. This enables an intelligent risk management approach through protection, monitoring and resilience measures. Therefore, Anchoram also have built capability around business continuity planning and disaster recovery services. Whether you already have a business continuity framework in place or want to build it, we have a comprehensive capability to assist you. Our associates are experts in undertaking business impact analyses, risk assessments, plan development including detailed implementation roadmaps, training and exercising. Our services include:

· Assessment of existing business continuity plans and disaster recovery arrangements and procedures

· Assisting with business case for funding to uplift business continuity capability

· Development of artefacts which include the business continuity plan and procedures, ICT disaster recovery plan and procedures, training modules (including e-learning) and related tools and templates

Conducting business continuity, emergency and crisis management and disaster recovery exercises.