Facility physical security risk assessment: an owner’s guide
Use an asset-threat-vulnerability-consequence process to prioritize facility physical security improvements and create a decision-ready risk register.
Read the guideTwenty-eight independent guides help owners, investors, insurers and operators evaluate physical security risk, protective construction, critical infrastructure and resilient operations.
Frame the owner decision, justify investment and keep controls effective after installation.
Use an asset-threat-vulnerability-consequence process to prioritize facility physical security improvements and create a decision-ready risk register.
Read the guideBuild layered physical security around detection, delay, response and recovery instead of relying on one barrier, camera or access-control system.
Read the guideCreate a security design basis that connects assets, threats, performance objectives, standards, responsibilities and acceptance evidence.
Read the guideBuild a physical security business case using risk reduction, continuity, lifecycle cost, operational impact, evidence and residual risk.
Read the guideBuild a clearer insurance and capital-planning case for physical security improvements with documented exposure, controls, evidence and residual risk.
Read the guideMaintain physical security through asset inventories, inspections, alarm tests, access reviews, exercises, deficiency tracking and change control.
Read the guideBuild a protective construction QA plan for submittals, mockups, concealed work, deviations, commissioning and turnover evidence.
Read the guidePhase security retrofits without creating uncontrolled openings, blocked egress, disabled alarms, utility outages or continuity failures.
Read the guideTranslate defined threats into complete assemblies, test evidence, site design and construction requirements.
Learn when a hardened building envelope should supplement cameras, access control and response plans to protect occupants, assets and continuity.
Read the guideSpecify ballistic wall systems around a defined threat, tested assembly, interfaces, constructability, field quality control and acceptance evidence.
Read the guideCompare ballistic test claims by threat, specimen, impacts, pass criteria and application before specifying walls, glazing, doors or barriers.
Read the guidePlan forced-entry-resistant construction as a complete assembly tied to threat tools, attack duration, response time, openings, egress and acceptance evidence.
Read the guideSpecify forced-entry resistance using a defined tool set, attack time, complete assembly, pass criterion, response assumption and field controls.
Read the guideCoordinate security doors, glazing, frames, anchors and walls as complete protective openings without compromising egress or accessibility.
Read the guideCoordinate conduits, ducts, pipes, cable trays, drains and access panels so protective walls retain continuity, serviceability and evidence.
Read the guideUse standoff distance, approach control, topography and site circulation to reduce exposure before adding expensive building hardening.
Read the guideSelect vehicle barriers using threat mass, speed, approach geometry, penetration rating, foundation, operations and active-barrier safety.
Read the guideDesign security vestibules and guard booths around observation, credential decisions, delay, escape, communications and compatible wall openings.
Read the guideProtect high-consequence energy, water, communications and digital infrastructure around continuity and recovery.
Plan physical security for BESS, substations, utility yards and other critical infrastructure using consequence-based zones and layered protection.
Read the guideEvaluate substation perimeter security using consequence, standoff, line of sight, access, response time and targeted protection of critical equipment.
Read the guidePlan layered data center physical security around critical functions, site approaches, hardened envelopes, utility dependencies and realistic response.
Read the guideProtect microgrids, generators, fuel, batteries, controls and distribution so resilient power remains available during physical and grid disruptions.
Read the guidePlan physical security for water and wastewater sources, treatment, chemicals, pumps, storage, controls and distributed sites using consequence.
Read the guidePlan physical security for telecom hubs, shelters, towers, fiber access, backup power and remote sites using criticality, redundancy and response time.
Read the guideApply the same risk-based method to operating environments with very different access, safety and throughput needs.
Plan hospital physical security around open access, emergency care, workplace violence, critical utilities, shelter, egress and continuous operations.
Read the guideEvaluate school entrance hardening through site approach, visitor control, doors, glazing, communications, egress, supervision and emergency response.
Read the guideProtect manufacturing facilities by mapping production bottlenecks, hazardous processes, utilities, loading, contractors and recovery dependencies.
Read the guidePlan warehouse security around yard access, trailers, loading docks, employee entrances, inventory, critical systems and high-throughput operations.
Read the guideThreats, response capabilities, codes and operating requirements vary by site. Qualified professionals should convert the owner’s risk basis into the final design.