Edition) Chapter 2 Risk assessment"](http://www.odihpn.org/index.php? option=com_k2&view=item&layout=item&id=3159) (HPN - Humanitarian Practice Network) Workbook on Security: Practical Steps for Human Rights Defenders at Risk Guide: "Risk Assessment For Personal Security" (CPNI - Centre for the Protection of National Infrastructure)s Guide: "Threat Assessment & the Security Circle" (Frontline Defenders) Case Study: "Case Study 1 Creating a Security Policy"(Frontline Defenders) ACTIVITIES PROCESS MAPPING Summary This activity helps to identify the processes that allow the organization to function (publishing, payment, fund-raising, outreach, interviewing) the assets and systems (websites, software, PayPal) they rely on, and which ones are critical to their work. (Activity) Participants are asked to "brain-storm" a list of all the processes that are critical for their work and the auditor works to map the details of critical processes out to expose points of risk. Overview Brainstorm with staff all of the organizational processes Identify a smaller set which are mission critical Map the specific interactions and events that compose these processes to expose areas of risk If it was not possible to conduct these activities in person, you can conduct them remotely through applying one of the remote facilitation approaches described in the Remote Facilitation appendix. Materials Needed Page 138 of 240