Risk Assessment

Security risk assessment turns general concern into a structured judgement about what could happen to a collection, how an event might develop and what the consequences would be. It considers not only monetary value, but also portability, visibility, traceability, access, concentration and the loss of records or context.

The same collection can present very different risks depending on where it is stored, who knows about it, who can approach it, whether the collector is absent and how quickly interference would be detected. A useful assessment therefore examines connected pathways rather than treating locks, alarms, privacy and storage as separate subjects.

The aim is not to remove enjoyment or create suspicion around ordinary life. It is to identify the largest credible weaknesses, choose proportionate improvements and preserve enough evidence to support response, recovery and insurance if prevention fails.

Explore risk assessment

Move from target and consequence through exposure and access to practical priorities.

9 detailed topics

Understand the target and consequence

Start by defining what matters, why it may attract attention and how easily it could be removed, divided, concealed or resold.

Map exposure and access

Trace how information, people, routes and storage choices combine to make the collection visible, reachable or vulnerable.

Test change and set priorities

Examine absence and changing circumstances, then direct effort toward controls that reduce the largest credible risks first.

Worked example

The collection that becomes visible by accumulation

A collector posts individual objects, room views and convention updates over several years. No single post reveals everything, but the combined record identifies the collection, approximate value, storage layout, location clues and predictable periods of absence.

The assessment should not reduce this to “never share online.” It should identify the information chain, test who can connect the clues, examine physical access and response during absence, then reduce unnecessary precision while preserving legitimate community participation.

A connected assessment sequence

01

Define the collection and decision

Identify the exact objects, records, locations and activities being assessed, and state whether the decision concerns privacy, storage, display, travel, insurance, access or investment in controls.

02

Map value and attractiveness

Separate financial value from cultural, research, sentimental and evidential value, then consider liquidity, demand, recognisability, traceability and ease of resale.

03

Identify credible threat pathways

Describe how loss, substitution, damage, unauthorised access or information exposure could occur through people, routes, routines, transactions or environmental events.

04

Test vulnerability and opportunity

Assess portability, concealability, access time, storage concentration, visible absence, legitimate visitor access, weak boundaries and whether detection can lead to a useful response.

05

Estimate consequence

Consider replacement difficulty, loss of provenance, research value, personal impact, legal exposure, recovery prospects and whether one event could compromise the whole collection or its records.

06

Review existing controls

Distinguish controls that prevent, delay, detect, record, respond and recover. Check whether they work together, remain maintained and survive ordinary household behaviour.

07

Prioritise proportionately

Address complete high-consequence pathways before isolated weaknesses. Prefer actions that reduce several risks, remove dependencies or improve both prevention and recovery readiness.

08

Record assumptions and review triggers

Document the judgement, evidence, uncertainties, accepted residual risk and events that require reassessment, including new acquisitions, publicity, travel, household change or system failure.

Important distinctions

Value is not the same as attractiveness

A modestly priced item may still be highly portable, liquid, anonymous and easy to sell, while a famous high-value object may be difficult to move without detection.

A threat is not a prediction

Risk assessment identifies credible pathways and consequences. It does not claim that a particular person will act or that every identified event is equally likely.

Visibility is not the same as accessibility

An object may be visible but strongly protected, or hidden yet easily reached by someone with legitimate access. Both information and physical routes must be assessed.

A weak point is not always the priority

The most obvious flaw may matter less than a quieter pathway that combines easy access, high concentration, poor detection and severe consequence.

Likelihood and consequence are separate

A frequent low-impact event and a rare catastrophic event may require different controls. Combining them too early can hide the reason a risk deserves attention.

Absence changes more than occupancy

Travel can alter detection, available attack time, environmental response, delivery routines, insurance conditions and the visibility of the collector's movements.

Controls are not independent checkboxes

A lock, alarm, camera and safe only create resilience when boundaries, credentials, detection, response and daily practice support one another.

Residual risk is not failure

No collection can be made risk-free. A sound assessment explains what remains, why it is accepted and what change would make that judgement no longer reasonable.

Detailed Topics

Related Topics