Risk Management and Consulting

A security risk assessment is a structured process of identifying the threats relevant to your organisation, analysing the vulnerabilities that could allow those threats to cause harm, and assessing the likely consequences. The output is a documented risk register with risk ratings and prioritised treatment recommendations. Barrick Group conducts assessments aligned with ISO 31000 and applicable government security frameworks, producing findings that are defensible to regulators, insurers, and boards.

A security company's commercial interest is to sell you security services, guards, monitoring, technology installations. An independent consultant's interest is to give you accurate advice. We have no financial stake in what solutions you choose or which suppliers you engage, which means the advice you receive from Barrick Group reflects your actual risk environment rather than what is most profitable for us to recommend. This distinction matters most when you are making significant procurement decisions or need advice you can rely on at a board or regulatory level.

A Protective Security Risk Assessment is a formal risk assessment conducted in accordance with Australian Government and state government protective security frameworks, including the Protective Security Policy Framework (PSPF). PSRAs are typically required for government tenants, critical infrastructure operators, regulated facilities, and organisations that handle sensitive or classified information. Barrick Group conducts PSRAs across both Commonwealth and state frameworks, producing assessments that satisfy regulatory requirements and provide a genuine basis for security investment decisions.

Barrick Group's risk management work is primarily structured around ISO 31000 (Risk Management, Guidelines), which is the foundational standard for enterprise risk management in Australia. Depending on the client's sector and obligations, we also work with the Protective Security Policy Framework (PSPF), the Security of Critical Infrastructure Act 2018 and its associated Rules, the NIST Cybersecurity Framework, and sector-specific standards in healthcare, construction, and government. Our approach integrates risk management into existing enterprise risk architectures rather than treating it as a separate silo.

Barrick Group provides risk management and advisory services across more than twenty industry sectors, including: accommodation and food services, administrative services, agriculture and farming, arts and recreation, construction, diving operations, education, electrical infrastructure, financial and insurance services, gas and water utilities, healthcare and social assistance, information and telecommunications, labour hire, manufacturing, mining, professional services, public administration, real estate and property, retail trade, and waste services. Whether your obligations arise from formal regulatory frameworks or a board-level responsibility to manage risk, we have the sector experience to advise you. Contact us to discuss your specific context and requirements.