For example, Chevron has a Security Risk Assessment Program (SRAP) through which security risks are identified and assessed, from corporate level down to individual facilities and from conceptual projects to mature operations.