Week -1 PHy Sec Assign 1

Vijender Reddy Macharala

School of Computer and Information Sciences, University of the Cumberlands

ISOL634 Physical Security

Dr. Ronald P. Sperano

06/30/2020

Table of Contents Natural Surveillance 4 Lighting 4 Human Security 5 Organizational layout 5 Territorial Reinforcement 6 Fencing 6 Unified Visual Appearance 6 Well Maintained Appearance 6 Access Control 7 Locks and Keys 7 Identification Cards 7 Restrictions 7 Maintenance 8 Natural Surveillance 8 Territorial Reinforcement 8 Access Control 8 Reference 10

Workplace Vulnerability Assessment

Workplace vulnerability assessment is the process whereby security officials indulge in an analysis that will enable the person to locate, determine the magnitude of, and prioritize any problems or flaws in the environment of their organization before they used against the organization. In this instance, It will be conducting a vulnerability assessment of the workplace. I will conduct an assessment of each building via the comprehensive scrutiny of all the measures required for security and security administration, review the emergency management documentation, and overview security procedures and the assessment of all the levels of protection in the workplace.

I walked around the organization's entire physical environment to check the lighting to check how the lighting is done. I walked through the parking lot, behind the organization building and where the staircases are. I finished by visiting all the building rooms until I reached the rooftop, and I scrutinized the lighting.

When I was walking around checking how the lighting is done, I realized a couple of flaws. First, the lighting in the staircases was poorly done, and some areas were a bit dark. A few bulbs were missing at the parking lot while some were broken, meaning that it increased the vulnerability.

I was able to speak with both the general employees working in the organization and the security personnel. I wanted to ensure that they were correctly well trained to react with security threats or vulnerabilities. I used many questionnaires, each with several questions, to ensure that I get the information I need.

After conducting the interviews as well as distributing the questionnaire, I was able to determine that the general employee body was not quite sure of what to do in such a situation. On the other hand, the security personnel was more than ready to secure the organization in case of anything. I was glad that at least the security personnel were aware of what they are hired to do.

I observed the organization's building to see whether it could count as a building covered by natural surveillance. The building, I could say, had about 50% natural surveillance capability. This was not that bad because it was better than below that number of zero.

I realized that the parking spot was totally out of the building, meaning that it is not underground parking. This was good because most of the companies encounter vulnerability when their parking lots are underground. In this case, the balconies popped out of the building, and the parking lot was external.

I walked all-round the entire building and checked for fencing. I started from the entrance gate and walked around the perimeter until I returned to the gate on the other side. I wanted to make sure that the fencing is done the best quality and that it would not disappoint by increasing the organization's vulnerability.

This is a territorial technique that has been employed by various organizations. Since this was my organization, I did not need to consult anyone because I could check it on my own. I checked for the appearance of the organization.

I found out that the organization had a special outward appearance because there was a sculpture of an individual holding something that looked book. This was like a landmark that I believe if anyone sees it, he will know where he is. Having this is individual security because it indicates that it is the territory of the organization.

Most organizations tend to maintain their appearance in a way that will show they have everything under control. I moved around the organization several times, and it was clear that we had a maintained appearance. At that point, I had to double-check because nothing is always perfect.

I figured out that the appearance of the organization was only well when it comes to strangers. However, in the internal environment, I found out that some people were not very pleased with the organization. Sometimes the vulnerability is within, and I took note of that.

I moved around the whole building, checking all the doors personally. I checked the number of people that had access to the keys of various locks. I then went ahead to test the reliability of the locks and keys of the entire building.

I was impressed by my findings because I realized that all the locks and keys were perfectly well. I found out that the janitors had access to various keys in the organization, and I did not trust this, so I took note. One thing also took my attention: the keys and locks were outdated and analog, so they could be tampered with easily, thereby increasing vulnerability.

I went ahead and confirmed the people that had identification cards specific for the organization. I also inquired about how a person could have access to the organization's cards and whether they were unique. I went ahead to investigate the identification cards myself and did a thorough assessment.

I found out that the identification cards were merely cards that were printed well with information about the employee and the organization in it. The IDs were pinned on the employee's top, and they were allowed to go with the home. I neither like the sound of that or the fact that they were not digitalized.

I walked around the organization to determine the restricted areas and checked for any means that a person not allowed would access the areas. I also walked into the restricted areas to have a look around. I was also able to check for the form of vulnerability in these areas to allow restricted personnel to enter without permission.

I found out that the areas were well restricted. A person could not access the areas without individual access. The areas restricted for unique or executive individuals were well guarded with special keys and locks that were only gotten upon individual access being granted.

In this area, there were only a few areas that needed maintenance. First, I recommended that lighting should be revised and incorporated well in the staircase section. The staircase is a unique area where there needs to be enough lighting at all times. The bulbs in the parking area should be replaced and increased in number because at night, and this might cause the environment to be prone to threats. The employees should also be trained on matters to do with vulnerability reduction and control because they are like the first line of defense, and they are probably the first people that will encounter and vulnerability first.

The fencing was okay, and it was because it was a concrete fence that is very high; nobody could jump over without getting noticed. The appearance of the organization is excellent. However, the employees need to be trained on how to respect their senior and avoid quarrels. These are what lead to conflicts, which are a source of vulnerability in the organization.

The access control system of the organization was well off, but I want to emphasize when it comes to digitalization. The access is okay, but it would be better if they were updated so that they are digitalized. Having swiping cards as keys improve security and reduce the chance of forced entry through breaking down the door. I would also recommend that the identification cards be left in the offices and worn when employees get to the building because if they get lost or stolen, they will pose a threat to the organization.

Reference Designoutcrime.org. (2020). 7 steps in using territorial reinforcement in crime prevention. Design Out Crime and CPTED Centre. https://designoutcrime.org/index.php/free-resources/resources/83-7steps-territorial-reinforcement Gonzalez K. (2019, February 24). A step-by-step guide to vulnerability assessment. Security Intelligence. https://securityintelligence.com/a-step-by-step-guide-to-vulnerability-assessment/ Love T. (2019, August 17). 8 keys to effective natural surveillance. LinkedIn. https://www.linkedin.com/pulse/8-keys-effective-natural-surveillance-dr-terence-love Martin, J. A. (2019, August 21). What is access control? A key component of data security. CSO Online. https://www.csoonline.com/article/3251714/what-is-access-control-a-key-component-of-data-security.html Perry, M. A. (2017). Natural surveillance. ScienceDirect.com | Science, health and medical journals, full text articles and books. https://www.sciencedirect.com/topics/computer-science/natural-surveillance SemiColonWeb. (2017). Physical security assessment | GXC Inc. GXC. https://gxc-inc.com/physical-security-assessments Tobok D. (2019, October 10). What is vulnerability assessment | Vulnerability analysis definition. Cytelligence. https://cytelligence.com/how-often-should-vulnerability-assessments-be-performed/