TSA Pipeline Security 4.1: 4.1 Risk management process and methodology

The Guidelines bring a risk-based approach following the National Infrastructure Protection Plan, where DHS assesses risk as a function of threats, vulnerabilities and consequences. An effective program runs a risk management process covering: criticality assessments; threat assessments of known or potential adversaries; vulnerability assessments of security weaknesses; risk assessments combining threat, vulnerability and consequence with the criticality findings; risk mitigation selecting and implementing countermeasures; and ongoing risk management to monitor, reassess and modify the program. Each operator should choose the process and methodology most appropriate to implementing its plan at its facilities; TSA may ask to review the methodology.