This course provides complete instruction on how to conduct an SRA to assess security risks and identify potential countermeasures to reduce vulnerabilities. was the contractor selected to develop the API Security Risk Assessment Standard 780.

After this course, the participants will be able to:

• Identify the main principles of the AIP SRA methodology
• Develop and maintain an effective security plan
• Identify the main five steps of SRA
• Effectively plan and prepare for a SRA
• Identify the required information needed for a SRA
• Conduct an effective SRA for the petroleum and petrochemical industries
• Identify security hazards and apply effective methods of control
• Identify the main components of an integrated layers of security system
• Continually monitoring the performance od the security system for continual improvement

• Safety Managers/Officers
• Security Managers/Officers
• Risk Management Professionals
• Asset Protection Managers
• Security Consultant

Day One

Introduction

• Pre-course Evaluation
• Terms and definitions
• Components of security plan
• National and international codes and regulations for SRA
• Introduction to API SRA approach and concept
• Reasons for having an effective SRA
• The purpose and objectives of API SRA
• Risk-based decision-making
• Workshop: Direct and indirect cost of security incidents

Day Two

SRA planning and preparation

• Introduction to security risk management
• Planning for conducting SRA
• SRA team
• Scope of security for the petroleum and petrochemical industries
• Information Gathering, Review, and Integration
• Sources of Information
• Identifying Information Needs
• Locating Required Information
• Information Collection and Review
• Analyzing Previous Incidents
• Conducting a Site Inspection.
• Workshop: analyzing previous incidents

Day Three

API SRA Methodology

• Steps of the API SRA
• Step 1: Characterization
• Step 2: Threat Assessment
• Step 3: Vulnerability Assessment
• Step 4: Risk Analysis/Ranking
• Step 5: Identify Countermeasures.
• Video: steps of SRA

Day Four

API SRA Methodology (Cont.)

• Threat formula
• Risk and benefit analysis
• Security risk matrixes
• Gap analysis and countermeasures selection
• Risk treatment strategies and principles
• Risk elimination
• Risk reduction
• Types of security design systems
• The “Onion Skin “security
• Workshop: conducting the five steps of SRA

Day Five SRA Review

• Importance of monitoring security system performance
• Types of monitoring system
• Pro-active monitoring
• Re-active monitoring
• Continual improvement plan
• Post-course evaluation

RECTUS Consultant certificate will be issued to all attendees completing all the total tuition hours of the course.