SEC420 Secure Work Environment Proposal

Work Environment

Secure Work Environment Proposal

Name

SEC420

Date

Professor

Secure Work Environment Proposal

The Ace Corporation will be opening a new plant that contains sensitive material. When an organization opens a new location one important consideration involves the security measures that will be employed. The new site opening will require security to come up with a comprehensive security plan that will be effective in securing the new location. Without a security plan that addresses all potential security gaps the new plant cannot be successful in protecting the sensitive material it contains and will not be able to secure the private information of customers and employees.

The new location will require a security plan that covers access control procedures for the new facility and personnel security recommendations for key personnel. The security plan will take into account inventory control considerations and establish effective perimeter and facility security. Lastly the security plan will involve a threat and risk analysis. In order for the Ace Corporation to be successful in securing the facility as well as information systems the security plan will need to identify all threats, analyze and prioritize those threats, and lastly create a security plans to reduce the likelihood of security threats.

Access Control Procedures

The new facility will need to have access control procedures in place at the facility to prevent security breaches. The process of user authentication, granting, and limiting access to facility, application and system resources to only authorized individuals, programs, processes, or systems (SoN, 2006). While all employees need to have access to the facility there will be secure areas in the facility that will only need to be accessed by authorized personnel. All employees have access through the front door of the facility but must pass through a security checkpoint within the entryway of the new Ace corporation plant.

The entryway checkpoint will ensure only authorized personnel enter the facility and that any guest that visit the plant will sign in upon arrival and receive an escort. Secure areas in the facility will require authorized personnel to have the necessary codes to give them entrance. Employees need to be informed on what areas are off limits to unauthorized personnel. Through having an existing access control plan to protect sensitive areas the less the likelihood that unauthorized personnel will gain entrance and cause a security breach. Security cameras will also be present at secured access points to alert security to any potential security breaches.

Personnel Security Recommendations

In order for the new location to be amply secured their will need to be ample security staff. The security personnel will be led by the Chief Security Officer who is responsible for hiring and firing security staff, disciplining, and managing staff as well as assigning roles and responsibilities of security staff that is hired. The facility contains a large plant, storage building, sensitive areas of the building, and security checkpoints. The Chief Security Officer will need to ensure all security positions are properly staffed.

Perimeter and facility security

Security personnel will be placed at security checkpoint at the entrance of the parking lot to stop any unwanted visitors. Security will also be placed in the entrance of the plant in order to ensure no unwanted people enter building and that visitors check in. Next security staff will be responsible for patrolling the plant when the building closes for the evening and security staff will monitor the video surveillance station located in the security headquarters. The security building will be secured with keyless entry locks and security guards will secure the area through their continued patrols.

Inventory Control Considerations

The inventory at the Ace Corporation is highly sensitive and extremely costly. Any loss can be detrimental to the plant and can create a major safety hazard for members of the public. In order to ensure the inventory is properly protected the first protection will be the security fence placed around the facility and its parking lot. Overseeing the storage of supplies and parts becomes more complicated when several buildings are spread out geographically (Murphy, 2008). In the case of the Ace corporations new location a twelve foot fence will secure the outer perimeter.

The storage building containing the companies sensitive supplies will be secured will keyless entry lock that only authorized personnel can enter a security cameras will be placed at the entrance of the storage building. Security personnel will patrol the inner perimeter of the plant to ensure there are no security breaches that can result in loss. Next the inventory will need to be properly maintained by a plant manger through inventory checks and management. The manager is responsible for identifying the loss if it does not involve an obvious security breach.

Threat and Vulnerability Analysis

The Threat and Vulnerability Analysis will assist the security staff in identifying real security threats and areas of vulnerability that will require more effective security measures. The threat analysis provides a clear understanding of what threats the new Ace Corporation facility will face. For example the threat assessment will provide information on what types of security threats would be present to attempt to steal sensitive data stored at the facility or to gain illegal entry into the information systems of the building. By understanding the threats the security staff will be better equipped to deflect the security risk through more effective security measures.

To examine this risk, a security vulnerability analysis would evaluate an organization to identify, validate and prioritize vulnerabilities that could produce a security incident (Ahren, 2010). This includes identifying the potential threats that exist. These threats include offenders that attempt to gain entry into the information systems of the facility as well as physical security breaches that result in sensitive and expensive material being stolen or damaged. The risk assessment alerts to level of risk from different areas of the facility. Once the risks are identified they can be evaluated for importance and then prioritize to ensure the most pressing security challenge is addressed first.

Conclusion

The Ace Corporation new plant opening requires a comprehensive security plan to ensure the sensitive material stored there is not accessed, damaged, or stolen as well as the information systems of the plant are amply secured. The Chief Security Officer will conduct a risk and threat assessment to identify potential security gaps and put the appropriate security measures in place. Through an effective security plan the company can avoid unnecessary loss and the sensitive material can be properly protected.

References

Ahren, S. (2010). A Security Vulnerability Analysis Helps Identify Real Threats. Retrieved

March 18, 2013 from http://www.facilitiesnet.com/security/article/A-Security-Vulnerability

Murphy F. (2008). Inventory Management: Storage Considerations. Retrieved March 18, 2013

from http://www.facilitiesnet.com/equipmentrentaltools/article/Inventory-Management-Stor

School of Nursing. (2006). Facility access Controls Procedures. Retrieved March 18, 2013 from

http://nurseweb.ucsf.edu/public/secure/facility_access_controls.pdf