


Assess protection. Quantify resilience. Improve readiness.
Assess protection. Quantify resilience. Improve readiness.
The Crowded Places Audit Guidance (CPAG) is an online terrorism risk assessment tool for Australia and New Zealand that uses real-time, historical, and geospatial data to evaluate terrorism risk and protective-security readiness. It analyses threats and vulnerabilities across physical, procedural, and organisational measures, generating a detailed audit report with threat and resilience scores, risk mitigation actions, and recommendations aligned with national counter-terrorism standards.
The Crowded Places Audit Guidance (CPAG) is an online terrorism risk assessment tool for Australia and New Zealand that uses real-time, historical, and geospatial data to evaluate terrorism risk and protective-security readiness. It analyses threats and vulnerabilities across physical, procedural, and organisational measures, generating a detailed audit report with threat and resilience scores, risk mitigation actions, and recommendations aligned with national counter-terrorism standards.
Process
Process
Process
How Does it Work?
Step 1
Collect
Collect
CPAG collects data via a detailed online assessment, capturing details such as the location of a property, its associated parties, and its security layout.
CPAG collects data via a detailed online assessment, capturing details such as the location of a property, its associated parties, and its security layout.



Step 2
Analyse
The details collected from the online assessment are amplified using real-time and historical data. A scoring algorithm then processes all data into risk scores and assigns appropriate recommendations.



Step 3
Deliver
The results are automatically generated in a detailed PDF report that combines written analysis with visual summaries of risk, resilience, and recommended actions.



Why Use CPAG
Benefits
Benefits
Benefits



Automated Analysis
Automated Analysis
Automate terrorism risk assessments
Automate terrorism risk assessments
A traditional security audit can take 10 to 20 hours to complete and draft a report. CPAG automates the process, enabling anyone to conduct a terrorism risk assessment online. Users simply enter details about a site or event, including its location and existing security procedures and measures, and CPAG will analyse this information to determine levels of threat, vulnerability, and resilience. A comprehensive report is automatically generated and delivered as a PDF.
A traditional security audit can take 10 to 20 hours to complete and draft a report. CPAG automates the process, enabling anyone to conduct a terrorism risk assessment online. Users simply enter details about a site or event, including its location and existing security procedures and measures, and CPAG will analyse this information to determine levels of threat, vulnerability, and resilience. A comprehensive report is automatically generated and delivered as a PDF.
Risk and Resilience Analysis
Risk and Resilience Analysis
Automated Reporting
Automated Reporting
Data-Driven & Scientific
Data-Driven & Scientific
Driven by real-time, historical and geospatial data
Driven by real-time, historical and geospatial data
CPAG combines multiple data sources to support objective, evidence-based terrorism risk assessments. Real-time and historical datasets provide context on threat activity and trends, while geospatial information helps analyse location-based exposure. Historical data is compiled and maintained by a counterterrorism specialist through an internal global terrorism database that informs each assessment. This data-driven approach ensures every assessment is consistent, repeatable, and grounded in measurable risk factors.
CPAG combines multiple data sources to support objective, evidence-based terrorism risk assessments. Real-time and historical datasets provide context on threat activity and trends, while geospatial information helps analyse location-based exposure. Historical data is compiled and maintained by a counterterrorism specialist through an internal global terrorism database that informs each assessment. This data-driven approach ensures every assessment is consistent, repeatable, and grounded in measurable risk factors.
Informed Evaluation
Informed Evaluation
Evidence-Based
Evidence-Based
Objective Analysis
Objective Analysis





National Standards
National Standards
Align with national best practice
Align with national best practice
CPAG is developed in accordance with the Australia–New Zealand Counter-Terrorism Committee (ANZCTC) Strategy for Protecting Crowded Places from Terrorism and its supporting protective security guidance, the Crowded Places Security Audit. The assessment aligns directly with the audit’s questions and measures, helping you assess and strengthen your security arrangements in line with recognised protective security standards.
CPAG is developed in accordance with the Australia–New Zealand Counter-Terrorism Committee (ANZCTC) Strategy for Protecting Crowded Places from Terrorism and its supporting protective security guidance, the Crowded Places Security Audit. The assessment aligns directly with the audit’s questions and measures, helping you assess and strengthen your security arrangements in line with recognised protective security standards.
ANZCTC Alignment
ANZCTC Alignment
Compliance
Compliance
National Best Practice
National Best Practice
Actionable Insights
Actionable Insights
Generate actionable insights for security improvement
Generate actionable insights for security improvement
CPAG turns assessment results into clear, actionable insights that help organisations make informed security decisions. Each report identifies key vulnerabilities, existing strengths, and areas for improvement, giving users a practical overview of their current security posture. An interactive register of risk mitigation measures allows users to track progress, update actions, and manage improvements over time, strengthening resilience through continuous improvement.
CPAG turns assessment results into clear, actionable insights that help organisations make informed security decisions. Each report identifies key vulnerabilities, existing strengths, and areas for improvement, giving users a practical overview of their current security posture. An interactive register of risk mitigation measures allows users to track progress, update actions, and manage improvements over time, strengthening resilience through continuous improvement.
Risk Summaries
Risk Summaries
Actionable Insights
Actionable Insights
Risk Prioritisation
Risk Prioritisation



Request a demo
Request a demo
See how CPAG makes terrorism risk assessment simple, structured, and accessible. Complete your assessment online and receive a comprehensive report that highlights key risks and practical steps to enhance your security and resilience.
See how CPAG makes terrorism risk assessment simple, structured, and accessible. Complete your assessment online and receive a comprehensive report that highlights key risks and practical steps to enhance your security and resilience.
See how CPAG makes terrorism risk assessment simple, structured, and accessible. Complete your assessment online and receive a comprehensive report that highlights key risks and practical steps to enhance your security and resilience.