Preliminary steps in conducting risk assessment

The external factors that need to be taken into consideration encompass the following aspects the legal framework applicable to PT and security, the legacy systems, other relevant stakeholders, the criminal activities in the city/region where the PT is operating, etc. 

It is important to notice that a risk assessment in PT security should be done in a qualitative way. A quantitative assessment based on mathematical formulas and calculations is not possible due to a lack of statistics (especially concerning terrorist incidents). 

---