Physical security risk assessment and action plan

[Insert name of dental practice]

How to categorise the level of risk

LIKELIHOOD
IMPACT
Probable Possible Unlikely Rare Negligible

Catastrophic HIGH HIGH HIGH MEDIUM LOW

Major HIGH HIGH MEDIUM MEDIUM LOW
Moderate HIGH MEDIUM MEDIUM LOW LOW
Minor MEDIUM MEDIUM LOW LOW LOW
Insignificant LOW LOW LOW LOW LOW

Risk Assessment Descriptors: Use the descriptors below to assess the LIKELIHOOD of a risk occurring
Descriptor Probable Possible Unlikely Rare Negligible
Will only occur in
More likely to occur than Reasonable chance of Will only occur in rare
Unlikely to occur exceptional
not occurring circumstances
Likelihood of circumstances
occurrence
between 0.05% and
greater than 50% chance between 50% and 5% between 5% and 0.5% between 0.5% and 0.05% 0.005%

Risk Impact: Use the descriptors below to assess the IMPACT severity if a risk occurs
Descriptor Catastrophic Major Moderate Minor Insignificant

Some disruption in Interruption in a service

Sustained loss of service service with which does not impact
Permanent loss of core which has serious impact unacceptable impact on Short term disruption to on the delivery of patient
Severity of impact service with minor
service or facility on delivery of patient patient care. Non- care or the ability to
care permanent loss of ability impact on patient care continue to provide a
to provide a service service

Physical security risk assessment 1 03/19/2019

1 Is access to the outside of the building(s) restricted, i.e by perimeter fencing?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

2 Is access to the outside of the building controlled e.g. covered by CCTV?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

3 Does the outside of the building have security lighting, floodlighting or street lighting?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

4 Are there warnings on windows, visible alarms etc that warn potential intruders that there are are physical security measures in place?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

5 Are accessible windows suitably protected with locks?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

6 Do the downstairs windows have security bars?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

7 Are the windows closed and checked every evening?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

Physical security risk assessment 2 03/19/2019

 8 Are blinds closed and checked every evening?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

9 Are skylights suitably protected by bars and locks?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

10 Are external doors suitably protected e.g. by 5 lever locks?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

11 Are all external doors solid e.g. not glass?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

12 Is there a burglar alarm with intruder monitors covering all areas especially those containing IT equipment or records?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

13 Is the alarm system connected to a police station or call response centre?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

14 Are alarm codes changed regularly?

Risk level Action plan / no action taken
Yes No N/A
Physical security risk assessment 3 03/19/2019
 Action plan / no action taken
Yes No N/A
Low Medium High

15 Are there appropriate locks (or keypad access) on all doors containing IT equipment?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

16 If keypads are used are the codes changed regularly?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

17 Do all surgery areas have separate door locks?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

18 Are you able to ensure all keys stored on site are not obvious and any instructions regarding key locations or keypad codes are stored securely?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

19 Are staff aware of the procedure for challenging unidentified visitors in controlled areas?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

20 Is IT equipment situated where it cannot be viewed by visitors or the public from outside the premises?
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

21 Are deliveries to and collections from the practice, supervised?

Physical security risk assessment 4 03/19/2019
 Risk level Action plan / no action taken
Yes No N/A
Low Medium High

22 Are lock down devices used to secure IT equipment?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

23 Is the movement of IT equipment out of the Practice subject to authorisation and control? E.g. laptops and portable equipment used off site
Risk level Action plan / no action taken
Yes No N/A
Low Medium High

24 Are laptops and other portable equipment stored securely overnight?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

25 Is IT equipment asset marked?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

26 Do assets have visible ID markings?

Risk level Action plan / no action taken
Yes No N/A
Low Medium High

Physical security risk assessment 5 03/19/2019