The flawed promise of National Security Risk Assessment: nine lessons from the British approach*

Abstract

Since 2010, quinquennial UK National Security Strategies–and the Strategic Defence and Security Reviews that follow–have been based on a public National Security Risk Assessment (NSRA). The purpose of the NSRA is to identify and prioritize UK security risks for the coming five-yearly cycle based on their likelihood and impact. This article recognizes that trading off severity against likelihood is a valuable strategic heuristic. Yet it concludes that until the NSRA can address nine key limitations, it will remain a flawed exercise. Such findings carry implications for UK policy, and for other states operating NSRA-style risk matrices.