Since 1999 the Department of Education and Training in Western Australia has operated a successful security risk management programme. Its strategy is to help school principals both evaluate whether existing controls comply with security procedures and provide adequate, cost-effective levels of security to meet the risks faced by their schools.