Course Project

Date survey initiated and completed.

Name of each facility and/or site.

Surveyed company's name.

Surveyed company's address.

Surveyed company's CEO/Director/Manager.

Surveyed company's officers.

Facility contacts and their phone numbers.

Main facility telephone numbers.

Emergency telephone numbers for all facilities.

General purpose of each site.

Range of hours of use for each site.

Facility ownership records.

Number of people who have access.

Who performs facility maintenance?

Maintenance schedule.

Facility dollar value of equipment and property.

Location of areas with highest dollar value.

Location of areas containing sensitive material.

Abductions?

Alarms?

Batteries?

Bomb threats?

Burglaries?

Disorderly situations?

Domestic violence involving employees

Employee "down" reports?

Fights?

Fires?

Homicides involving employees?

Intoxicated employees?

Missing or runaway juveniles found on your property?

Open doors or windows?

Police requesting to execute an arrest warrant on property?

Reports of employee involved child abuse?

Robbery involving employees?

Sexual assaults?

Shootings?

The death of an employee on company property?

Traffic accidents?

Vehicle and vessel thefts?

Theft (internal and/or external?)

Vandalism?

Armed Robbery?

What are the physical boundaries of the facility grounds?

Attach the following drawings, sketches, plans, or schematics.

Facility perimeter.

Topography.

Perimeter barriers.

Neighboring facilities.

Ingress/egress points.

Facility and exterior roadways.

Facility locations.

Storage locations.

Locations of doors, windows, and similar openings.

Alarm placement and diagrams (schematics).

Does the company’s top management visibly support security efforts?

Have clear security policies been developed and procedures?

Have we established partnerships with local, state, and federal law enforcement agencies, other public safety agencies, and surrounding communities?

Have we clarified relationships and procedures with other management functions to provide a more coordinated response to security incidents?

Do we have a well-understood system for employees to report security incidents?

Have we developed security awareness programs for employees and contractors?

Have we developed a procedure for referring suspicious incidents and breaches of company policy to corporate counsel or corporate security management?

Have we developed a policy of referring all suspected illegal activity to law enforcement?

Have we developed procedures for emergency response and crisis management?

Do we periodically reassess the site’s security posture (threats, vulnerabilities, risks, and countermeasures)?

Have we implemented appropriate access control measures, such as signs, secure doors and windows, locks, technology based access control systems, parcel inspection, and control of gates and docks?

Do we have appropriate perimeter protection, using, for example, fences, bollards, trenches, turnstiles, lighting and video surveillance

Do we need security officers, on patrol or at fixed locations? If so, do they have written post orders to direct their activity?

Have we appropriately protected crucial communications equipment and utilities?

Does this facility have a "clear zone" on the outside of the perimeter fence?

Does this facility have a "clear zone" on the inside of the perimeter fence?

Is the exterior "clear zone" at least 50 feet wide?

Is the interior "clear zone" at least 20 feet wide?

Is there a clear path for vehicular access around the exterior of the perimeter fence?

Is the "clear zone" kept clear of all visual obstructions including tall grass?

Are "clear zone" areas adequately illuminated?

Are “clear zone areas under CCTV surveillance?

Are there any scaling hazards around the perimeter fence line?

Is any part of the fence overgrowing with vegetation, obstructing a clear view of the "clear zone"?

Have shrubbery near doors, windows, fence lines, gates, and access roads been kept to a minimum?

Are all blind alleys located near buildings protected or under surveillance?

Does the facility's physical environment include a perimeter zone of grounds and/or property surrounding the facility?

Does the perimeter zone surrounding the facility's property have a fence or other barrier restricting entry?

How many entrances to the perimeter zone are there?

Is there additional perimeter barrier or deterrent?

Is someone responsible for periodically verifying the structural integrity of the perimeter barrier (who, when)?

Does the entire perimeter zone have functioning alarms or monitors (e.g. CCTV, guards, etc.) at all times?

Are there alarms, stationed guards or CCTV monitors for all perimeter zone entrances?

Are there alarms, roving guards, or CCTV monitors for the perimeter zone in general?

Is there access control on mechanisms (e.g. badges, keys, combinations, and/or cards) used for entry to the perimeter zone?

Do all gates have top guards?

Do top guards for gates meet same criteria as perimeter fence top guards?

Are gate bolts and nuts spot-welded for security?

State who is responsible for authorizing perimeter zone entry.

Are there effective procedures and systems in place for authorizing perimeter zone entry?

Are all entrances to the perimeter zone controlled during normal working hours?

Are all entrances to the perimeter zone controlled after normal working hours?

Are all entrances to the perimeter zone controlled during emergencies?

Is entry to the perimeter zone controlled by a guard(s), locks, cipher locks or access control system?

Are authorization lists and control mechanisms permitting entry to the perimeter zone updated when a person is no longer authorized for perimeter-zone entry?

Do security personnel control all perimeter openings to the facility?

Is there a designated individual responsible for authorizing building entry?

Would access to the facility still be controlled in case of fire or other emergency or disaster?

Are custodial personnel permitted entries to the facility when it is unattended?

Are physical security personnel permitted entries to the facility when it is unattended?

Is there a procedure to control badges, keys, combinations, and/or cards used for entry to the facility?

Are authorization lists and control mechanisms allowing entry into the facility updated when a person's authorization for entry has been revoked?

Is access to facility resources denied quickly enough to prevent damage to the resources by a person whose facility entry authorization has been revoked?

Is there a record of entries to and exits from the facility by employees?

Does the area non-employee entry/exit record provide notation for time in, time out, identification of entrant, and authorization mechanism?

Are the entire access control procedures and systems managed by one designated security person?

What type of access system provides entrance into the facility?

Who is responsible for authorizing facility entry?

Are there effective procedures for authorizing facility entry?

Does the facility have an enforced limited Access policy?

Are there effective procedures for authorizing facility entry for abnormal situations (emergencies, outside of normal hours, etc.)?

Is there a physical access control system limiting access to the facility?

Are all doors kept closed and locked?

Is positive identification required for a person to receive facility entry authorization?

Are all entrances to the facility, including emergency, equipment, and maintenance portals, controlled?

How many facility entrances are there?

How many facility entrances are available for personnel access:

Is facility entry controlled during normal working hours?

Is facility entry controlled after normal working hours?

Does the company utilize access control procedures to limit access into the facility?

What areas are these systems located in?

Is an access control card also used as an employee badge?

Are biometric technologies used in access control?

Is the system controller on an independent PC or network?

Are vendors and visitors required to wear identification badges in the facility area?

Are visitors and vendors required to sign in before entering the facility?

Is it policy to provide a staff escort for visitors, vendors, and service personnel?

Are authorization lists and control mechanisms allowing facility entry updated when a person's entry authority is revoked?

Do employees challenge persons in the facility if they are not properly badged?

Is there a control on badges, keys, combinations, and/or cards used for facility entry?

Are appropriate procedures for responding to a notification from facility monitors and alarms defined and documented?

Are personnel trained or drilled in how to respond to facility monitors and alarms?

Are emergency exits from the facility operable only from within?

Is there one power source for the control unit, readers, and the locks?

Are the systems equipped with battery back up?

Do the access-controlled doors employ contacts, which indicate whether the door is open or closed?

Are these systems installed in accordance with fire and facility codes?

Is preventive maintenance and cleaning regularly scheduled?

What are the optimal intervals for these services?

Is the facility alarmed?

What type of alarm system is used?

Which of the following perimeter, wall, under floor, above ceiling, perimeter fence alarm sensors are used in your facility (Where are they placed? What are they protecting?)

Mechanical switches (door, windows)?

Break wire (in walls, floors, ceilings)?

Magnetic switches - unbalanced?

Audio?

Vibration?

Ultrasonic?

Microwave?

Infrared Passive?

Infrared break beams?

Capacitance?

CCTV?

Biometric?

Other?

How old is the alarm system and/or major components of the alarm system?

Is the alarm system Underwriters Laboratories, Inc. (UL) approved?

Is output from the intrusion sensors and/or detection devices transmitted outside the facility?

Indicate the location(s) to which the intrusion sensors and/or detection devices transmit output:

Main security station (where guards are located)?

Security station same building?

Security station in different building?

Municipal police station?

Other?

Are adequate spare alarm components located at the facility?

Can the alarm system be deactivated from outside the secured area?

Are external alarm system components tamper-proof and/or alarmed?

Is there a backup power source for the alarm system?

Is the entire alarm system frequently tested to insure reliability?

How often is the alarm system tested?

Who conducts alarm tests?

When was the last test conducted?

Have emergency repair provisions been established for the alarm system?

Are there critical or restricted areas?

How many critical and/or restricted areas are there and where are they located? (attach drawings or plans)

List all controls, barriers, and restrictions placed on these areas

How are these areas administratively controlled?

List the methods of access for each of these areas. (skylights, ventilation shafts, doors, windows...)

Do these areas have perimeter fencing?

What types of alarm systems, Access Control System or components are used in restricted area controls?

Have we taken steps to protect and isolate information that could be of use to our adversaries?

Do we follow appropriate procedures for protecting and destroying sensitive documents?

Are we using appropriate hardware, software, and procedural techniques for protecting our computers and networks?

Do we periodically analyze computer transaction histories to look for irregularities that might indicate security breaches?

Who is responsible for the operation of the computer area access control systems?

Is this individual also responsible for the monitoring security, fire protection, HVAC functions and alarm systems to insure proper functionality?

Is the computer area staffed 24-hours per day?

What type of access system provides entrance into the computer area?

Is there a physical access control system limiting access to the computer areas?

Do access control readers or biometric readers control computer area entry?

Are employee identification badges worn at all times in the computer area?

Are vendors and visitors required to wear identification badges at all times while in the computer area?

Are visitors escorted and documented when in a computer area?

Are emergency exits from the computer area operable only from within?

Does this facility have an enforced limited number of personnel-access policy?

Do operations or employees monitor the activities of emergency, service, and other "invisible" personnel when they are servicing the computer area, area, building, or equipment?

Do operations or employees monitor the activities of other "invisible" personnel (e.g. vending machine suppliers, protective force, janitors, health and safety personnel, etc.)?

Are there procedures permitting computer area access to emergency personnel in case of fire, major power outage, or emergency or disaster?

Are there monitors (e.g., CCTV cameras) and alarms for the computer area entrances?

What steps are taken to insure protection of the computer area (segregation, security alarm systems, security officers, CCTV...)?

Which surveillance or sensor devices are used in the computer area:

Door switches?

Motion detectors?

Breakglass sensors?

Vibration sensors?

Closed-circuit TV?

Other (specify)?

Is all alarm and CCTV wiring enclosed in conduit?

Are there surveillance monitors (e.g., CCTV), intrusion sensors, or alarms for the computer area entrances?

Who monitors the alarm and CCTV systems?

Is output from the computer area surveillance or sensor devices transmitted outside the computer area?

Are records from the computer area entrance surveillance monitors, intrusion sensors, and/or alarms kept in some form available for audit?

Are procedures for responding to notification from area monitors and alarms defined and documented

Who is responsible for responding to computer area intrusion alarms?

Is the shipping/receiving area or building surrounded by a fence with a controlled access gate?

Are these areas designed so vehicle operators do not have direct access to storage areas without passing through a monitored area such as a shipping or receiving processing office?

Are all freight doors secured when not in immediate use?

Are high value items stored in a special area with additional physical security considerations?

Does the security department randomly audit shipping and receiving procedures to determine accuracy?

Are the receiving and shipping areas physically separated?

Does CCTV cover all areas?

Are there surveillance cameras located in the inventory area?

Are all areas covered by a monitored intrusion alarm?

Are employee's entrances monitored by electronic access control, which record all employee pass code transactions?

Are these records regularly reviewed by security for irregularities?

Are delivery, pick-up, and vendor personnel prevented from having unsupervised access to merchandise areas?

Do all employees display photo-ID badges while in the Shipping/Receiving areas?

Are permanent records maintained for all issued and lost badges?

Are all personnel working in the Shipping/Receiving areas photographed, thumb printed and processed through a complete background check (which should include job and personal reference checks, criminal records and credit history)?

Are all shipments loaded and unloaded only by company personnel?

Do surveillance cameras monitor the loading dock?

Is the high value storage area protected by additional intrusion detection equipment?

Is this alarm system capable of being activated independently of the host building's system to provide security during regular operational hours?

Does the high value area's alarm system record all individual access users’ numbers, which activate and deactivate the system?

Are special precautions taken when receiving and storing potentially hazardous materials?

Are special monitoring provisions provided (gas detectors, CCTV cameras)?

Are Material Safety Data Sheets kept on-site for all hazardous materials?

Do emergency response plans incorporate the special requirements for hazardous materials?

Are OSHA requirements satisfied by the facility's operation?

Is all proper safety training courses and devices to safeguard personnel utilized for all equipment present?

Do physical barriers, access control systems or staffed gates, control access to all storage facilities?

Is the number of access points to the facility kept to a functional minimum?

Are security badges or ID cards required of all personnel once there are inside the facility?

Are all visitors, vendors, and employees required to present a valid state issued driver's license or identification card before they are given a badge or pass?

Are all visitors, vendors, and employees required to keep this valid ID and their badges on their person at all times when they are at the facility?

Are visitors and vendors issued special badges, which are easily differentiated from employees' badges?

Are visitors and vendors escorted once inside the facility?

Have facility personnel been educated in how the badging systems work so they are able to recognize any irregularities?

Have facility personnel been educated in how to maintain and clean the badging system?

Are lost badges access immediately terminated?

When a new badge is issued in place of a lost one, does the new badge have a new number, not a duplication of the old one?

Are employees issued special parking permits?

Are visitors and vendors issued special passes which are easily differentiated from employee passes?

Is there specified procedures used for common carrier vehicle movement in to and out of the facility?

Are all permits and passes for vehicles routinely inspected to insure they are valid?

Are all interior parking areas locked away from loading or sensitive areas and under CCTV surveillance?

Are all individuals parking in interior areas required to pass through an access controlled pedestrian gate to a working area when entering or leaving?

Are all fire lanes and loading zones clearly marked?

Are fuels such as solvents, acetone, alcohols and toluene, gasses (like acetylene and propane), and solids (such as wood, paper and ordinary trash) stored properly (How)?

Are common oxidizers including acids, especially nitric and perchloric acids; chlorine dioxide; and other agents such as potassium permanganate and potassium chlorate stored away from all flammable materials?

Are possible sources of ignition segregated from these materials?

Are flammable gases, solids or solvents stored in well-ventilated areas?

Is smoking prohibited in and around all storage areas?

In laboratory or manufacturing areas, is all electrical equipment in ventilated hoods and spray booths explosion-proof?

Is this equipment well maintained?

Does your Hazardous Material program account for selecting the least hazardous/flammable material possible?

Are storage areas inventoried to reduce the amounts of hazardous or flammable materials?

Are all storage areas designed to use safe storage procedures and containers to hold hazardous or flammable materials?

Are there monitoring systems in the storage areas?

Is there an automatic monitoring system (with alarms) for the heating/ventilating/air-conditioning, HVAC system used for the facility?

Is airflow restriction or failure monitored with an alarm?

Are temperature-rise limits/rate monitored with an alarm?

Is humidity monitored with an alarm?

Do alarms from the automatic monitoring system for the heating/ventilating/air-conditioning (HVAC) system used for the facility transmit to the Security Management Information System or other locations outside the facility?

Do appropriate personnel take immediate action when the automatic HVAC monitoring system alarm transmission is received?

Are there Preventive Maintenance and Service Agreements supporting the HVAC system?

Are the building's transformers, motor generators, breaker panels, cooling towers, etc, protected from unauthorized access?

Does the facility have an isolated and regulated power service (Should it have one)?

Does the kind of work done at the facility require an uninterruptible power supply?

Has the local power supply been determined to be adequate, consistent, and reliable?

Does the facility have standby power for electrically controlled doors in case of power outages?

Does the facility have standby power for electrically controlled security systems in case of power outages?

Does the facility have standby power for electrically controlled alarms in case of power outages?

Is the standby power for electrically controlled doors, security systems, and alarms tested at regular intervals determined by site management?

Is there emergency lighting available for the facility if a power failure should occur?

Does the facility have a separate emergency lighting system that activates when the main lighting fails?

Is the facility's emergency lighting system tested on a regularly scheduled basis?

Have we developed appropriate security practices for voluntary and involuntary terminations of employment?

Have we adopted policies and established procedures to prevent and respond to workplace violence?

Have we adopted policies and established procedures to for pre employment screening?

How is employee security education and awareness conducted?

Are personnel given continuing or periodic refresher education about security practices?

Are both initial and periodic security educational briefings conducted to educate employees in general and employee-specific security responsibilities?

Are employees actively involved in developing risk analyses and contingency planning?

Does the security education program address the need for limiting discussions of sensitive topics in public

Are the following intrusions or thefts reported to security:

Unauthorized use of company facilities?

Unauthorized use or attempts to access sensitive information?

Entering the facility without authorization