This comprises a number of steps from identifying protective security priorities (principally protection of people in the case of public premises and events), through understanding threat, assessing risk, formulating a security plan, implementing physical and personnel security mitigations, and review.