This book contains a proven set of best practices for security risk assessment and management, explained in plain English. This guidebook sets forth a systematic, proven set of best practices for security risk assessment and management of buildings and their supporting infrastructures. These practices are all designed to optimize the security of workplace environments for occupants and to protect the interests of owners and other stakeholders. The methods set forth by the authors stem from their research at Sandia National Laboratories and their practical experience working with both government and private facilities. Following the author's step by step methodology for performing a complete risk assessment, you learn to: identify regional and site specific threats that are likely and credible; evaluate the consequences of these threats, including loss of life and property, economic impact, as well as damage to symbolic value and public confidence; and, assess the effectiveness of physical and cyber security systems and determine site specific vulnerabilities in the security system. The authors further provide you with the analytical tools needed to determine whether to accept a calculated estimate of risk or to reduce the estimated risk to a level that meets your particular security needs. You then learn to implement a risk reduction program through proven methods to upgrade security to protect against a malicious act and/or mitigate the consequences of the act. This comprehensive risk assessment and management approach has been used by various organizations, including the U.S. Bureau of Reclamation, the U.S. Army Corps of Engineers, the Bonneville Power Administration, and numerous private corporations, to assess and manage security risk at their national infrastructure facilities. With its plain English presentation coupled with step by step procedures, flowcharts, worksheets, and checklists, you can easily implement the same proven approach and methods for your organization or clients.