Every Bastion SRA template follows the same three building blocks. They are simple to write, consistent to compare across sites, and defensible in front of auditors and regulators.
An Africa-focused structured risk assessment framework developed by Omega Training Academy and endorsed by ISMI (UK). It frames assessments around designing threat out of the operating environment rather than reacting to it.
Each risk is written as the Action of an Asset by an Adversary. Forces clarity on what is at stake, what could happen to it, and who would do it.
Controls are mapped to Deter, Detect, Delay, Defend, and Deny. Layered defence — no single layer is expected to stop a determined adversary.
Likelihood runs along the horizontal axis; impact along the vertical. Score = L × I. Treatment intensity should correspond to the score, with the residual target set at ALARP — As Low As Reasonably Practicable.
| Impact ↓ / Likelihood → | Very Low | Low | Medium | High | Very High |
|---|---|---|---|---|---|
| Very High | 5 | 10 | 15 | 20 | 25 |
| High | 4 | 8 | 12 | 16 | 20 |
| Medium | 3 | 6 | 9 | 12 | 15 |
| Low | 2 | 4 | 6 | 8 | 10 |
| Very Low | 1 | 2 | 3 | 4 | 5 |
Lighting, signage, visible patrols, hard-target appearance.
Sensors, monitored CCTV, randomised patrol, community intel.
Layered fencing, security film, vaulted doors, cable encasement.
On-site reaction, armed response SLA, SAPS CIP liaison.
Remove the prize: marking, redundancy, value reduction.