Security Architecture and Engineering
yellancnigg
SecurityArchitectureandEngineering-PartII.ppt*
SYSTEMS DESIGN and ENGINEERING
(SECURITY ARCHITECTURE & ENGINEERING - PART 2)
Presented by
Frank M. Carpency, P.E., CPP, PSP, CSC
Carpency and Associates, LLC
13425 Scottish Autumn Lane
Gaithersburg, MD 20878-3909
www.carpsecurity.com
*
The Security Program
- Policy
- Procedures
- People
- Equipment
A security system without a security program is useless!
Document your security program and use the document as a sales tool!
*
The Security Triangle
Respond
Detect
Delay
The total time to Detect, Delay and Respond
must be less than the adversary’s task time!
*
Security Terms/Concepts/Philosophies
- Protection of Assets - People, Facilities, Equipment, Information, Raw Materials, Finished Products.
- Defense-in-Depth - Adversary must avoid or defeat a number of protective devices in sequence. Design approach using multiple barriers, technologies and/or controls.
- Balanced Protection – No matter how an adversary attempts to accomplish the goal, effective elements of the security system will be encountered.
*
Security Terms/Concepts/Philosophies
- Crime Prevention Through Environmental Design (CPTED) - A branch of situational crime prevention which has as its basic premise that the physical environment can be changed or managed to produce behavioral effects that will reduce the incidence and fear of crime, thereby improving in the quality of life, and enhancing profitability for business. CPTED has as one of its primary aims to reduce the opportunity for specific crimes to occur. Where CPTED differs from traditional target hardening strategies is that the techniques employed seek to use environmental factors to affect the perceptions of all users of a given space – addressing not only the opportunity for the crime but also perceptions of fear on the part of those who may otherwise be victims.
*
Project Stages
Basis of Design - Study and Report Phase (SAE - Part 1)
- Preliminary Design (SAE - Part 2)
- Design Development (SAE - Part 2)
- Final Design (SAE - Part 2)
Bidding, Negotiation & Procurement (SAE - Part 3)
Construction (SAE - Part 3)
Operational (SAE - Part 3)
*
Study & Report Phase
- Develop Functional Requirements
- What needs to be protected: people, information,
facility/equipment, raw materials, finished products
- Group assets into low, medium & high value
categories
- Tied to security policy and procedures
- Determine Threat & Risk
- Analyze local crime statistics and FBI threat data
- Group threat & risk into low, medium & high
probability categories (use metrics if possible)
- Determine cost tradeoffs
- Transfer risk if possible
*
Study & Report Phase (cont’d)
- Assess Vulnerabilities
- Think like a vandal, criminal, terrorist, etc.
- Develop Risk Mitigation Strategies
- Recommend effective countermeasures
- Prioritize Recommendations
- Estimate Cost for Each Recommendation
*
Replace or Upgrade?
- Determine age and condition of existing equipment
- What equipment can be reused and can it be integrated with
new equipment?
- What are the current maintenance costs?
- How much time is now spent repairing system?
- Are spare parts available?
- Determine the impact of code compliance
- ADA, NFPA and local codes
- What other facility or organizational changes are planned for the near and long-term?
- Share the cost
- Enroll other organizations
*
SAE Part 2 Project Stages
- Preliminary Design (design requirements tied to recognized standards such as UL, IEEE, ANSI, IES, Federal Government Standards)
- Design Development
- Final Design
*
PRELIMINARY DESIGN
*
Getting Started
- Assign Responsibilities
- Gather Data - Site Walkdowns, Existing Facility Drawings, and Existing Security Documents
- Communicate with Key People - Conduct Interviews
- Establish Functional Requirements (measure against security policy & procedures)
- Define Tasks & Develop Realistic Project Scheduling
- Prepare Report with Recommendations, Alternatives Initial Cost Estimate, and Concept Drawings
Establish Design Requirements (formal document tied to recognized standards)
*
Getting the Facts
- Note Grading & Ground Cover
- Note Existing Equipment Types
- Note Placement of Barriers, Fences, Access Points & Possible Breaches
- Document Equipment Locations & Coverage
- Intrusion Detection
- CCTV
- Access Control
- Ancillary Systems (lighting, power, raceways, etc.)
- Determine Condition of Existing Equipment
*
Getting the Facts (cont’d)
- Conduct Light Level Readings
- Note Type, Condition and Length of Wire & Cable
- Confirm Electrical Raceway Location, Condition & Fill
- Confirm Power Source Location, Type & Capacity
- Consider Weather Conditions (Year Round)
- Be Aware of Facility Operational Nuances
- Obtain Existing Drawings & Documentation
*
Design Requirements
*
Poor Sensor Application
- Mounted on non-protected side of door
- Easily removable covers
*
Design Approach
- Review Functional Requirements
- Develop Design Requirements (design basis)
- Develop Design Documentation
Preliminary Drawings (Site Plans & Floor Plan Backgrounds)
Outline Specifications (Select Type)
Design Analysis & Calculations
Total Project Cost Estimate
- Present Design Concept to Client
- Establish/Confirm Total Project Scope
*
Sample Design Requirements
- Delay Time Required to Protect Asset (factor in time for communication and assessment, plus time to deploy and position responders)
- Speed and Weight of Vehicle and Amount of Explosives
- Wind Loading on Structures (i.e. fences, camera towers)
- Minimum Lighting Levels (human and electronic)
- Light-to-Dark Ratio (ideally 4:1)
- Lighting Type (halogen, metal halide, HPS, etc.)
- Minimum CCTV Resolution (at target)
- IDS Probability of Detection (ideally 1.0)
- IDS Level of Confidence (typically 90-95%)
- Power Requirements (normal, emergency, UPS)
*
Design Requirements
- IRE Units (video 1 volt p/p or 140 IRE Units)
- IPS (images per second)
- Real Time (30-60 IPS) vs. Real Motion (15-20 IPS)
- Footcandles vs. Lux (1 fc = approximately 10 lux)
- Full-video (100 IRE units) vs. Usable Video (20-50 IRE Units) 100 IRE is DVD quality
- CIF (Common Intermediate Format; 1, 2, 3, or 4 CIF)
- JPEG, Wavelet, MPEG-4
- File Size (in Kb)
- CRI (color rendering index)
- SNR (signal-to-noise ratio)
- f-stop (f 1.0 to f 16 to closed)
- Sensitivity
- Re-strike Time
- Reflection Factor (camera test percentage used: 75% made in USA, 89.9% made overseas)
- RG59/U, RG6/U, RG11/U, UTP, Cat -5e, multimode
- RAID (redundant array of independent discs)
What the heck are these things and who cares?
*
Design Considerations
- Incorporate CPTED Principles
- Think Integration From the Start
- Address Operational Issues
- Incorporate Human Factors
- Hardware
- Software
- Transition Planning
- Maintenance
- Training
- Anticipate Change
*
Human Factors & Ergonomics
*
Security Console Ergonomics
*
Door, Gate & Turnstile Control
*
Personnel Search Area
*
Engineered Sensor Application
*
Triple Stacked Microwave
*
Microwave Bounce Plate
*
Microwave Junction Box
*
Fixed & PTZ CCTV Cameras
*
COST ESTIMATING
*
The Rule of Ascending Cost
- Procedures $
- Passive Barriers $$
- Active Barriers $$$
- Electronics $$$$
- Personnel $$$$$
The key to cost control is selecting the proper mix!
*
Why a Cost Estimate?
- Project Evaluation/Approval
Choosing between multiple options
Estimating Return on Investment
- Project Planning
Initiate accumulation of funds
Live within your means
- Validation of Bids
Establish competitive range
Establish ceiling
Make sure your consultant knows your budget!
*
Cost Components
- Engineering & Design
In-House
Outside Consultant
- Hardware (bill of materials plus spares)
- Software (including documentation and licenses)
- Installation (labor, equipment rental, permits & miscellaneous materials)
- Construction Supervision (inspection & testing)
Use a Work Breakdown Structure for Labor Costs!
*
Cost Components (cont’d)
- Hidden Costs (security support, temporary operational changes)
- Other Costs
taxes (state & local)
overhead (15%)
profit (10%)
bonding (1-2%)
contingency (5%)
inflation (AR 415-17, “Cost Growth Indices”)
- Continuing Costs (warranty, maintenance, training & alarm monitoring)
*
Levels of Estimates
- Concept/Planning Stage (35% Design)
Rule of thumb estimates
Vendor/supplier estimates
Large contingencies (20% to 30%)
- Intermediate Stage (65% Design)
Drawing take-offs
Vendor estimates/quotes
Moderate contingency (10% to 15%)
- Final Design (100%)
Refined drawing take-offs
Vendor quotations (equipment & labor)
Minimal contingency (5%)
*
Conceptual Estimates
- Based on Unit Prices
- “Ballpark” - Budgetary Estimates
“Means Electrical Cost Data” R.S. Means Company, Inc. 100 Construction Plaza P.O. Box 800 Kingston, MA 02364-0800
(Good for estimating conduit, cable and associated labor, not good for estimating security equipment and specialty applications, including labor)
*
Detailed Estimates
- Identify & Group by Subsystems (stand-alone or supporting systems)
- Develop a Bill of Materials (unit & quantity pricing)
- Establish Material Prices (concrete, rebar, boxes)
- Formulate Work Crews/Productivity/Rates
- Identify Required Equipment and Rental Rates (trenching, scaffolds)
- Combine with Bill of Materials (set up a spreadsheet and/or database)
- Maintain contingency as a separate line item, do not build contingency into each item
*
Pitfalls
- Incorrect or Improper Quantities
- Not including all cost components (design, inflation, terminations, compensatory security measures)
- Price Increases (especially from vendors)
- Fixed Quantities (spools of cable)
- Ongoing or Near Term Site Changes
- Believing What You Hear Instead of Gathering Facts
*
Cost Estimating Summary
- Use Current, Actual Cost Data/Quotes Wherever Possible
- Industry Averages Are Useful at All Stages
- Allow/Expect Differences at Bid Time
- Use Spreadsheet Programs
- Update Cost Estimate at all Design Submittal Stages (35%, 65%, 100%)
*
DESIGN DEVELOPMENT
*
Design Development
- Prepare Equipment Location Drawings
- Determine Generic Equipment Type
Based on:
Functional Requirements
Compatibility With Other Sub-Systems
- Prepare Block or Riser Diagrams
- Research Equipment Vendors
- Select Final Equipment Type
- Develop Preliminary Bill of Materials
- Develop Equipment/System Specification(s)
- Update the Cost Estimate
*
Equipment Location (Floor Plan)
*
Riser Diagram
*
Block Diagram
*
CCTV Location & Coverage
*
Console Layout
*
Design Development (cont’d)
- Select Specific Equipment
- Based on Design Requirements
- Prepare Specifications (CSI or other format)
- Conduct Bid Evaluations
- Conformance to Specification
- Ease of Installation
- Maintainability
- MTTF & MTTR
- Vendor Experience, Documentation, Support & Warranty
- Cost
- Make Award Based on Best Value
*
MINIMIZING COST
*
Minimizing Cost
- Let the security professionals do their jobs
- Money spent in design will return many times over in installation cost savings (minimizes rework & change orders)
- Consider life-cycle issues - design for maintenance
- Implement Crime Prevention Through Environmental Design (CPTED) principles
- Reuse conduit and cable and other equipment (such as CCTV lenses) where practicable
- Use existing LAN where practicable (possible bandwidth issues)
*
Minimizing Cost (cont’d)
- Use multi-technology, multi-function access cards
- Pre-qualify bidders; consider weighted criteria
- Prepare a specification with material takeoffs and requiring unit pricing for equipment, material and labor
- Institute a design freeze at the 65% submittal (changes are a budget buster)
- Establish a single-point of responsibility through the installer/contractor
*
Minimizing Cost (cont’d)
- Conduct a thorough system burn-in and factory acceptance test
- Resolve all software, firmware & hardware issues, and open items prior to shipment
- Conduct thorough site acceptance testing
- Obtain comprehensive operator, administrator, & maintenance training, and documentation
- Develop realistic scheduling
- Obtain thorough as-built documentation
Communicate, document and revalidate requirements!
*
FINAL DESIGN
*
Final Design
- Review Vendor Submittals
- Prepare Final Drawings
- Interconnection Wiring Diagrams
- Conduit & Cable Lists
- Installation Details
- Finalize Bill of Materials
- Prepare or Review Installation Specification
- Detailed Installation Instructions
- Acceptance Test Procedures
- Construction Schedule
*
Final Design (cont’d)
- Revalidate Conformance to the Requirements
- Prepare Final Cost Estimate
- Issue Design for Client Review
- Revise as Necessary
- Issue for Construction
*
Fencing & Grading Details
*
Grading & Ground Cover
*
Equipment Mounting Details
*
Equipment Rack Arrangement
*
CCTV Junction Box Assembly
*
CCTV Junction Box Wiring Diagram
*
CCTV Field Wiring Diagram
*
CCTV Junction Box
*
Other Design Documentation
- System Descriptions (how it works)
- Transition Plan (existing system to new system)
- Factory Acceptance Test Plan and Results
- Site Equipment Test Baseline Data and Results
- System Acceptance Test Plan and Results
*
Testing
- Factory Acceptance Test
- Integrator to develop test plan, Engineer to review and
approve plan, Engineer and Owner to witness test.
- Test after system burn-in and do not ship until all
deficiencies have been corrected.
- Site Equipment Test
- Installer to develop test data sheets (to record
settings) with signoffs for each piece of equipment.
- System Acceptance Test
- Functional and performance test based on the FAT.
Engineer/Owner to witness and signoff on each test.
*
Training
- Who Needs It?
- Console Operators
- System Administrators
- Security Supervisors
- Maintenance Personnel (hardware and software)
- Employees (awareness/user interface)
- Planning
- Initial (hands-on instruction, hard copy, interactive
CD ROM)
- Follow-on (retraining, new employees, software
updates, equipment changes, operational changes)
*
SPECIFICATIONS
*
Specifications
- Format
- Construction Specifications Institute (CSI) MasterFormat
- AIA MasterSpec
- Client/Industry Specific (Design Requirements as outline)
- Content
- Functional
- Procurement
- Evaluation Factors
- Weighted Percentage (split technical from cost evaluation)
- Includes: technical compliance to specification, past
experience, documentation, personnel, workload, project
management, warranty, follow-on support, etc.
*
CSI Format Specification Structure
- Bidding Requirements (invitation, instructions, information, bid form, bid bond)
- Contract Forms (agreement, performance bond, payment bond, certificates)
- Contractor Conditions (general, supplementary)
- Specification Drawings Addenda
- Contract Modifications
*
- GENERAL
- Related Work
- Description
- Submittals (define exactly and use a formal
schedule)
- Definitions
- Standards
- PRODUCTS or EQUIPMENT or SYSTEM
- Functional Requirements
- Performance Requirements
- Recommended Suppliers
CSI Division Structure
*
- EXECUTION
- Installation
- Coordination with Others
- Testing (sometimes not well defined)
- Training (often not well defined)
- Maintenance (base year plus option years)
- Warranty (2- years minimum, initiate at
system acceptance)
- Spare Parts (often overlooked)
CSI Division Structure (cont’d)
*
CSI Facility Services Division 26 Electrical
- 26 05 00 Common Materials and Methods
Cables, Conductors, Raceways, Static UPS, Grounding, lightning and surge protection, etc.
- 26 50 00 Lighting
26 51 00 Interior Lighting
26 52 00 Emergency Lighting
26 55 00 Special Purpose Lighting
26 55 53 Security Lighting
26 56 00 Exterior Lighting
*
CSI Facility Services Division 27 Communications
- 27 40 00 Audio/Visual Communications
- 27 10 00 Structured Cabling
- 27 20 00 Data Communications
- 27 30 00 Voice Communications
- 27 40 00 Audio-Visual Communications
- 27 50 00 Distributed Communications and Monitoring Systems
*
CSI Facility Services Division 28 Electronic Safety and Security
- 28 00 00 Electronic Safety and Security
28 01 00 Operation and Maintenance of Electronic Safety and Security
28 05 00 Common Work Results for Electronic Safety and Security
28 06 00 Schedules for Electronic Safety and Security
28 08 00 Commissioning of Electronic Safety and Security
- 28 10 00 Electronic Access Control and Intrusion Detection
28 13 00 Access Control
28 16 00 Intrusion Detection
*
CSI Facility Services Division 28 Electronic Safety and Security (Cont’d)
- 28 20 00 Electronic Surveillance
28 23 00 Video Surveillance
28 26 00 Electronic Personal Protection Systems
- 28 30 00 Electronic Detection and Alarm
28 31 00 Fire Detection and Alarm
28 32 00 Radiation Detection and Alarm
28 33 00 Fuel-Gas Detection and Alarm
28 34 00 Fuel-Oil Detection and Alarm
28 35 00 Refrigerant Detection and Alarm
- 28 40 00 Electronic Monitoring and Control
28 46 00 Electronic Detention Monitoring and Control Systems
*
The Four Absolutes of Quality
- Definition of Quality
- Conformance to Requirements
- System of Quality
- Prevention of Defects
- Personal Performance Standard
- Commitment to Excellence - Zero Defects
- Measure of Quality
- Customer Satisfaction (make sure you know
who your customer is!)
*
The design process described can be characterized as:
- An Engineering Process
- A Quality Process
- A Risk Management Process
- A Business Process
The process assures that you get what you paid for!
*
Summary
- Use a structured approach to design - implement “the process”
- Define the requirements
- Gather sufficient, meaningful data
- Plan the project
- Develop a realistic budget and schedule
- Pay attention to detail
- Revalidate the requirements at all submittal stages and at the system acceptance test
- Communicate among all team members
*
Contact Information
Frank M. Carpency, P.E., CPP, PSP, CSC
Carpency and Associates, LLC
13425 Scottish Autumn Lane
Gaithersburg, MD 20878-3909
301-560-1069
www.carpsecurity.com
