Internal security dissertation: analysing a threat and institutional action

Build an internal security dissertation around a specific threat, area and institutional activity. Using flood warnings as an example, we will distinguish Alert RCB from a municipality’s announcements. Alert RCB is an SMS sent by mobile network operators at the request of Poland’s Government Centre for Security (RCB). A municipality may republish the warning on its website. That entry confirms publication, but it does not show that every resident read the message. We will explain how to describe these activities and their limits in a dissertation.

A crisis-management topic can easily become a summary of legislation and a list of services. The page count grows, but readers still do not know what an institution did in a particular situation. Choose an activity you can trace through available sources. This guide uses warnings about flood risk as an example. It shows how to design the study: compare assigned tasks with records of actions, then establish which conclusions the material supports.

Choose a threat and define the project's boundaries

Set out four things: the threat, the area, the period and the part of an institution’s activity you will study. “Crisis management in Poland” is broader than one dissertation can cover. A topic such as “How did a municipality inform residents about a flood threat during a selected period?” lets you identify sources and questions. Treat Alert RCB as a separate channel: according to RCB, the smallest area to which it can be sent is a county (powiat). Studying one municipality’s activities therefore does not mean studying the entire dispatch of an Alert RCB message. You do not need to assess every phase of crisis management if your sources cover just one.

In the following example, we will ask: “How did the municipality pass flood warnings on to residents, and what can be established from public materials?” We will compare its plan with dated announcements. We will look separately for RCB information about an alert covering the area in which the municipality lies. We will examine the publications, their content and their sequence. This material will not yet tell us who read the warning or how they understood it. State that limit when defining the dissertation’s aim.

Explain why you chose this municipality and event. You may have comparable documents, a well-documented event or material from before and after an organisational change. Do not call the municipality “typical” without grounds for that comparison. A case study can show in detail who was responsible for a task and what can be established about its completion. It need not represent every municipality in the country.

Distinguish threat, risk, preparedness and outcome

A flood may be a threat, but identifying it is not yet a risk assessment. Assessing risk requires assumptions about likelihood and possible consequences, together with a method for estimating them. Likewise, distinguish preparation from action: plans and resources show what an institution had in place; activity records show what it did. When assessing an outcome, return to the task's objective. Otherwise, simply having a plan can be mistaken for effectiveness.

Return to warnings for residents. A municipal plan describes preparations, while a dated entry on its website can confirm that an announcement was published. An RCB announcement stating that an alert was sent provides the institution’s account of that action. It is not confirmation of receipt on a particular phone. A properly designed study can ask whether residents read and understood the warning. Whether the warning helped reduce damage is a further, separate question: the extent of damage also depends on how the event unfolded and on other activities.

The University of Warsaw course description for “Metodologia badań nad bezpieczeństwem” distinguishes description, explanation and evaluation. Turn that distinction into questions for your dissertation: what was done, why did it happen and what criteria are you using to assess it? Documents may support a description without explaining every consequence. If evidence is missing, identify what you cannot assess. A lack of material alone does not justify concluding that the whole system was ineffective.

Assign the necessary evidence to each question

To establish the municipality’s tasks, choose its planning document. Check publication on its website against the announcement archive; for Alert RCB, look for RCB information about the message, date and area. Distinguish an official statement that a message was sent from confirmation that a particular phone received it. Assessing whether a warning was understood requires a properly designed study of recipients. A question about reducing damage also requires evidence of the consequences and grounds for linking them to the activity. Do not expect one report to settle every question.

• Plan: the document states who was to warn residents and how this was to be done.
• Implementation: a dated announcement published on the municipality’s website has been collected, with its content and publication time identified.
• Reception: evidence is available to check whether the information reached the group of residents studied.
• Effect: a change can be assessed against the task's objective, with grounds for judging whether it was linked to the action taken.

If you have the municipal plan and an archive of its announcements, you can compare the tasks with documented publications. RCB information about alerts covering the area can add context, if it is available for the selected event. This is enough for a carefully scoped dissertation about informing residents. Without a study of recipients, however, do not call it an assessment of the effectiveness of the entire warning system. Explain in the methodology what you will examine in the publications and which questions they cannot answer.

Build a collection of documents with different functions

Start with public materials relevant to the selected area and period: plans, reports, announcements, inspection findings and information about how the event unfolded. Check the availability of each document. Do not assume access to operators’ records or lists of phone numbers belonging to Alert RCB recipients. RCB explains that operators do not share their databases with it. You can plan an analysis of published warnings without information that identifies residents. Nor should you assume that a student has special access rights to operational information.

Anna Mróz-Jagiełło and Agata Wolanin discuss document analysis and criticism as a method in security studies. For a dissertation, selecting sources according to the objective and assessing credibility are particularly useful principles. A list of legislation and reports is not itself a study of institutional activity.

For each document, record its author, purpose, date, version and the period it covers. Check whether it assigns tasks, reports their completion or promotes the institution's work. “Appropriate measures were taken” does not tell you what was done or when. Look for records of specific actions that allow you to check those details. Read audit reports in the same way: their findings concern specified institutions and periods, not every institution at every time.

Reconstruct the chronology without inventing missing events

Compare when threat information appeared, when a decision was recorded and when an announcement was documented. These may be different moments. A report's publication date is not the date of the action it describes. A website timestamp does not necessarily show when residents received a message. Record precisely what each timestamp means and where it comes from.

If the RCB archive contains an announcement stating that an alert was sent and the municipality republishes its content on its website, do not count these entries as two independent confirmations of dispatch. On the RCB website, you examine the official account of the alert; on the municipal website, you examine its publication. Neither entry is a list of deliveries to individual phones. The absence of such a list from your sources does not mean that the SMS messages were not sent. Describe the source of the warning separately from the way the municipality passed it on.

Where dates conflict, retain both versions and investigate. A document may give the time of preparation, transmission or receipt. Do not choose the more convenient value to obtain a judgement of “quick” or “late”. Timeliness requires a reference point appropriate to the activity, not the author's intuition.

Set assessment criteria before writing the results

Criteria should follow from your question and justified requirements, rather than the appearance of the data you find. You might assess clarity of responsibility, correspondence between announcements and assigned tasks, or completeness of documentation. Explain each criterion. If using legal requirements, check the provisions applicable during the period and their relevance to the particular body.

Do not replace analysis with points awarded according to your own impression. For “3 out of 5” to mean anything, you must explain the categories, their ordering and how results are combined. Otherwise, a description may be more useful: “The record confirms completion of the task; without evidence about reception, we cannot assess its reach.” Readers can then see what was checked and what is missing, rather than being given an unexplained score.

If comparing two municipalities, examine conditions. Different threat severity, population, available channels and periods may limit a ranking's meaning. Apply a common source scope and criteria. More announcements do not automatically mean better communication, especially when events differ. Comparison should explain variation rather than manufacture a winner.

Do not equate task completion with demonstrated effectiveness

Confirmed training, a published announcement or a completed exercise show that particular actions took place. Assessing their effectiveness requires evidence relevant to their objectives. For warnings, this includes information about who received the message and whether they understood it. Such information still does not automatically establish how much harm was prevented. Before analysing the material, identify the outcome your sources can actually help you assess.

The historical Supreme Audit Office publication “Polska nie ma skutecznego systemu ochrony ludności” describes an audit that went beyond reading documents. It also included practical tests using scenarios and examination of a particular event. Notice the research approach: written arrangements and actual operation were checked separately. The findings concern the period and institutions examined. They do not automatically describe the present situation in the municipality you choose for your dissertation.

No recorded damage in a particular year does not by itself establish effective management. The threat may have been less severe or affected a different area. Damage occurring likewise does not establish that every action failed. Describe conditions and provide arguments about a particular relationship instead of judging the system from one final outcome.

Explain gaps and discrepancies as limitations

If you cannot find a document on an authority's website, record where and how you searched. It may not have been published, may have been archived or only partly disclosed, or may never have existed. Searching the website alone does not distinguish these possibilities. Do not turn “I could not find the document” into “the authority did not carry out the task”. If you obtain an explanation from the institution, identify who provided it and what it covers.

Check where information repeated in several places originated. A website article and a press release may both rely on the same report. In that case, you have several publications of one account, rather than several independent confirmations of an action. Find the original document and explain the connection between sources. You can then see whether new material adds evidence or merely repeats an earlier description.

Read a newly found document against your earlier conclusions too. If it gives a different sequence of actions, adding it to the bibliography is not enough: revisit your account of the event. Record why you include or exclude material. These notes will help you explain source selection to your supervisor and revise the relevant passage without reconstructing the whole basis of the dissertation each time.

Use an appropriate scope of material

Choose lawfully available sources within your project's agreed scope. You do not need security-system details, residents' personal data or information that could disrupt institutional operations. If a document contains such material, agree an appropriate way to use it or reduce what you present. Questions about documentation quality can usually be addressed without disclosing sensitive details.

An employee interview, where included in an approved design, provides that person's account. It does not automatically replace an institutional document or evidence of activity. Agree voluntary participation, recording, quotations and identity protection. Do not describe these arrangements as a single mandatory procedure across all universities. Requirements depend on the project and setting.

Record analysis rules so that findings can be checked

Before recording your findings, decide what one entry in your worksheet will represent. If you are describing documents, note their purpose, version and scope. If you are describing activities, record what was done, how you know and what the stated time means. Do not mix these approaches without explanation. Also distinguish “no announcement was found in the archive examined” from “it was established that the authority did not publish it”. The first statement concerns your sources; the second requires additional evidence about the activity.

Try the worksheet on a few documents before analysing the whole collection. Is it clear which records count as “confirmed completion” and which as “no data”? Can the same passage fall into contradictory categories? If you refine the rules, revisit documents already analysed. Apply the same rules throughout and record why they changed. If several people analyse the material, explain how you agreed the categories and resolved different readings.

For each task, you can prepare a short card: what was supposed to happen, which record you found, what it confirms and what it leaves unknown. Add the exact source location. These notes make a chapter easier to write than copies of entire documents. Choose passages that answer your research question. Several pages of official description need not tell you more about task completion than one specific, dated record.

Write findings with their basis and boundaries

If you can confirm only that announcements were published, say so in your conclusion. For example: “The material confirms publication of announcements, but without evidence from recipients we cannot establish what proportion of residents they reached.” Readers can see both the finding and its limit. Do not replace this with “the system worked effectively”. You can recommend studying message reception, but that is a proposal for further research, not evidence of improved safety.

A recommendation should follow from what you were able to establish. If documents make the sequence of actions difficult to reconstruct, you can explain the need for clearer recording of times. That problem alone does not mean new technology must be bought or services reorganised. Identify who the recommendation concerns and which finding supports it. If the available sources do not distinguish between solutions, state what still needs investigation.

Maintain continuity between dissertation sections

Define the relevant process and concepts in the theoretical chapter. In the methodology, explain the case, period, sources, criteria, coding and limitations. Organise results by questions and discuss them in relation to the literature and existing research. A lengthy review of every service's responsibilities is unnecessary unless it helps interpret the activity you examine.

Subject-specific support is described on Internal security. For chapter planning, see “Help with your thesis outline and structure”; for developing an existing text, see “Bachelor’s and master’s thesis proofreading and editing”. If you need help with a model draft or selected chapters, send your topic and the material you already have. We can establish which questions the sources can answer, how to organise the analysis and which passages need work. The writing should be shaped by the available evidence, rather than by a list of chapter titles alone.

Before submission, mark sentences that assess effectiveness and check each one's criterion and source. Does an older audit actually concern the period you describe? Are you assessing an institution against its own responsibilities? Do the documents support everything you have written? If you cannot answer one of these questions, revisit the passage. Clarifying that conclusion matters more than another change to a heading.

Distinguish the time of the event, document and dissertation in the theoretical discussion too. Later legislation may matter for discussion, but earlier activity cannot be assessed solely against later requirements. Identify whether you describe a historical obligation, current arrangement or proposal. If your period includes organisational change, examine each part against its appropriate basis. Documents produced under different conditions need not be contradictory.

For a consultation, you can send the case description, main question and source list. Include two sentences where you are unsure how to justify an assessment or conclusion. Mark what a specific record confirms, what you know only from the institution's report and what you could not check. We can then work on your actual difficulty: selecting material, resolving conflicting dates or wording a finding carefully, rather than only renaming chapters.

Literature and methodological material

• Mróz-Jagiełło, A., Wolanin, A. (2013). Metoda analizy i krytyki dokumentów w naukach o bezpieczeństwie. Obronność – Zeszyty Naukowe Wydziału Zarządzania i Dowodzenia Akademii Obrony Narodowej, 2(6), 109-118.
• Uniwersytet Warszawski. Metodologia badań nad bezpieczeństwem, course 2102-BW-M-Z2MBNB. ECTS catalogue; accessed 4 November 2026.
• Najwyższa Izba Kontroli (2019). Polska nie ma skutecznego systemu ochrony ludności. Historical audit findings used to illustrate verification of institutional activity.
• Rządowe Centrum Bezpieczeństwa. Alert RCB – Najważniejsze Pytania i Odpowiedzi. gov.pl. https://www.gov.pl/web/rcb/alert-rcb---najwazniejsze-pytania-i-odpowiedzi (accessed: 04.11.2026).

Add documents from your case and literature about the specific threat. Check legislation separately for the period examined. The material cited here does not establish any municipality's current condition or replace reading its own sources.