ROYAL CANADIAN MOUNTED POLICE TECHNICAL SECURITY BRANCH TECHNICAL OPERATIONS DIRECTORATE OTTAWA, ONTARIO K1A 0R2
SECURITY GUIDE TSB/SG-25 GUIDE TO THE PREPARATION OF PHYSICAL SECURITY BRIEFS OCTOBER 1992 REVISED JANUARY 2000
Any suggested revisions and comments as well as requests for clarification regarding this Security Guide should be directed to the O i/c Technical Security Branch, attention: Physical Security Consulting Section, Royal Canadian Mounted Police, Ottawa, Ontario K1A 0R2. This is a third level reference document which becomes part of a series of reference documents listed in Chapter 2.1, Appendix B of the Physical Security Operational Standards (Security Volume of the Treasury Board Manual on Information and Administrative Management). This copy of the document originates from the Security Equipment Selection Instrument (SESI) which incorporates the other technical documents as well. Contact the Physical Security Consulting Section of the RCMP should you require a copy of any technical documents and you do not have access to SESI.
ACKNOWLEDGEMENT The RCMP wishes to express its appreciation to Public Works and Government Services Canada, Real Property Services Branch, Accommodation Management, for their help in providing much of the research material for this document. We also wish to thank the members of interdepartmental committees and individual government institutions who provided assistance through review and consultation.
(Ce document est également disponible en français)
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
PREFACE 1.
Words in italics are explained or defined as they relate to this document (See Appendix C).
2.
There are many types of buildings required by an institution which may or may not contain the building attributes listed in this document. This document is not written to identify a particular building type and is not all encompassing. The safeguards listed identify the requirements for security normally provided for general purpose office buildings (GPOB). However, many other buildings such as laboratories, court houses and medical facilities will have these attributes plus many other safeguards, in order to provide security sufficient to counter the threats identified.
3.
The organization of the Security Volume of the Treasury Board Manual is based on the hierarchy of security documentation. In that volume, the words "policy", "standards" and "technical documentation" have the following meaning: a.
The Security Volume of the Treasury Board Manual outlines the federal government policy on security. Also referred to as the Government Security Policy (GSP), the Manual is comprised of broad principles and requirements for the security of sensitive information and assets.
b.
The GSP also outlines operational security standards which comprise general guidelines and specific requirements for implementation of Security Organization & Administration, Physical Security, Information Technology Security, Personnel Security, Security and Contracting Management and Security and Contingency Management.
c.
Technical documentation is comprised of detailed statements of guidance to help institutions to interpret and implement the operational security standards. They are approved and issued by the lead agencies for their respective responsibility areas.
The term "system" denotes combining the physical, information technology and personnel security into an integrated system to optimally counter established threats. This system, along with the security organization and administration make up an institution's security program consistent with the GSP. Consequently, physical security, information technology security, personnel security and security organization/administration, when individually considered, are subsystems of the security program. The technical documentation, issued by the Royal Canadian Mounted Police (RCMP) as the lead agency on physical security, uses the same meaning as indicated in the GSP security program model for the words "system" and "subsystem". In addition, the words "element" and "safeguard" are used as follows: a.
An element is any component of target hardening (protection, detection and response) or of defensible space (demarcation, observation, clustering, territoriality and utilization) used in the physical security subsystem.
b.
A safeguard is any security measure or equipment which provides the protection, detection, response, demarcation, observation, clustering, territoriality and utilization.
Technical Security Branch
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
TABLE OF CONTENTS PAGE CHAPTER 1 - INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1.1 GENERAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1.2 SECURITY SYSTEM DESIGN PROCESS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1.3 COORDINATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1.4 LEVEL OF DETAIL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 1 1 4 5
CHAPTER 2 - LEASING EXISTING FACILITIES - SECURITY SITE BRIEF . . . . . . . . . . . . . . . . . . . . 2.1 GENERAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.2 MANAGEMENT SUMMARY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.3 MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) . . . . . . . . . . . . . . . . .
6 6 6 6
CHAPTER 3 - LEASING EXISTING FACILITIES - SECURITY DESIGN BRIEF (FIT-UP) . . . . . . . . . . 3.1 GENERAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3.2 MANAGEMENT SUMMARY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3.3 MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) . . . . . . . . . . . . . . . . .
9 9 9 9
CHAPTER 4 - CONSTRUCTING FACILITIES - SECURITY SITE BRIEF . . . . . . . . . . . . . . . . . . . . . . 4.1 GENERAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4.2 MANAGEMENT SUMMARY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4.3 MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) . . . . . . . . . . . . . . . .
12 12 12 12
CHAPTER 5 - CONSTRUCTING FACILITIES - SECURITY DESIGN BRIEF (FIT-UP) . . . . . . . . . . . . 5.1 GENERAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5.2 MANAGEMENT SUMMARY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5.3 MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) . . . . . . . . . . . . . . . .
15 15 15 15
APPENDIX A - MINIMUM AND ENHANCED SAFEGUARDS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.1 LIFE SAFETY AND EMERGENCIES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.1.1 LIFE SAFETY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.1.2 EMERGENCY POWER . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.1.3 FIRE WATER CAPACITY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.1.4 RESPONSE TIME FOR FIREFIGHTERS AND POLICE . . . . . . . . . . . . . . . . . . . . . . A.2 SITE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.1 EASEMENTS THROUGH SITE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.2 PERIMETER CONTROL OF SITE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.3 PERIMETER DISTANCE FROM BUILDING . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.4 TELECOM AND DATA LINKS OUTSIDE THE FACILITY . . . . . . . . . . . . . . . . . . . . . . A.2.5 ILLUMINATION OF SITE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.6 LANDSCAPING . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.7 SITE OVERVIEW . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.8 ADJACENT OCCUPANTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.9 STAFF AND VISITOR PARKING . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.10 BUILDING LOCATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.11 EXTERIOR CIRCULATION - ROADWAYS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.2.12 TOPOGRAPHY OF THE SITE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
18 18 18 18 19 19 19 19 20 20 21 21 22 22 22 23 23 24 24
Technical Security Branch
i
Revised: January 2000
Royal Canadian Mounted Police
A.3
A.4
A.5
A.6
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
BUILDING DESIGN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.1 PHYSICAL SECURITY DESIGN PHILOSOPHY . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.2 SECURITY DESIGN CONCEPTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.3 PERIMETER OF BUILDING . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.4 COMPARTMENTALIZATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.5 ELEVATOR LOBBIES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.6 CIRCULATION ROUTES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.7 CIRCULATION-PERSONS AND EQUIPMENT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.8 PEDESTRIAN CONTROL WITHIN A BUILDING . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.9 INTERNAL CIRCULATION - CORRIDORS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.10 ZONING WITHIN A BUILDING . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.11 LOCATION OF EXIT STAIRWELLS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.12 FLOOR LOADING CAPACITY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.3.13 WINDOWS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . BUILDING LAYOUT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.1 COMMON SPACES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.2 WASHROOMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.3 UTILITY SPACES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.4 MAILROOMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.5 FOOD SERVICES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.6 LOADING DOCKS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.7 TELECOM AND DATA LINKS WITHIN THE FACILITY . . . . . . . . . . . . . . . . . . . . . . . A.4.8 CONFERENCE AND BOARD ROOMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.9 DAY-CARE CENTRES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.4.10 SPECIAL PURPOSE SPACE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . BUILDING - SPECIAL REQUIREMENTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.5.1 ELECTRONIC ACCESS CONTROL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.5.2 ELECTRONIC INTRUSION DETECTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.5.3 CLOSED CIRCUIT TELEVISION / VIDEO EQUIPMENT . . . . . . . . . . . . . . . . . . . . . . A.5.4 SECURITY CONTROL CENTRE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.5.5 SECURE ROOMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.5.6 VAULTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.5.7 SENSITIVE DISCUSSION AREAS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.5.8 COMPUTER ROOMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.5.9 TELECOM AND DATA LINKS WITHIN THE FACILITY . . . . . . . . . . . . . . . . . . . . . . . FACILITY MANAGEMENT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.6.1 LEASING CONTRACT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.6.2 CONTROL OF ACCESS TO PREMISES WITHIN A BUILDING . . . . . . . . . . . . . . . . . A.6.3 MAINTENANCE SERVICES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.6.4 CLEANING SERVICES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.6.5 GARBAGE REMOVAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.6.6 CLASSIFIED WASTE DESTRUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.6.7 SIGNS IN BUILDING INTERIOR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.6.8 LOCKING HARDWARE AND KEY CONTROL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A.6.9 RENOVATION WORK OUTSIDE PUBLIC-ACCESS HOURS . . . . . . . . . . . . . . . . . .
24 24 25 25 26 26 26 27 27 27 28 28 28 29 29 29 29 30 30 30 30 31 31 31 32 32 32 32 33 33 33 34 34 34 35 35 35 36 36 36 37 37 37 38 38
APPENDIX B - BASIC BUILDING SECURITY ATTRIBUTES FOR CUSTODIANS . . . . . . . . . . . . . . 39 APPENDIX C - GLOSSARY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Technical Security Branch
2
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
CHAPTER 1 INTRODUCTION 1.1
GENERAL
1.1.1
Purpose This document provides guidance for the preparation of security site and design briefs as required in the physical security standards.
1.1.2
Scope This document provides general security guidelines to federal government institutions for all accommodations. Whether leasing or constructing, an institution needs only to be concerned with Chapters 2 and 3, or 4 and 5, in conjunction with the safeguards addressed at Appendix A. Appendix B gives a partial list of basic building security attributes that custodians are usually required to implement, service and maintain. Appendix C consists of a glossary where a variety of terms used in this document are defined.
1.1.3
Application This guide is for the use of institutions in order to comply with the Physical Security Operational Standards (Chapter 2.2) of the GSP.
1.1.4
Responsibilities The responsibilities of custodians are outlined in Appendix B. Pursuant to Appendix B, Chapter 1.1 of the GSP, the RCMP is the lead agency responsible for providing physical security consulting services and advice to institutions, on request. The RCMP will provide physical security consulting services and advice on each of the building project delivery phases. Following the GSP policy statement that Deputy heads are accountable for safeguarding sensitive information and assets under their control, the Physical Security Operational Standard requires that the Departmental Security Officer (DSO), or representative, be responsible for preparing, reviewing, inspecting and monitoring the accommodation projects. For these reasons the present document is proposing to the DSO, or representative, a security system design process integrated to the building project delivery methodology. By being involved in each stage of the delivery process, from planning to evaluation, the DSO or representative will progressively specify and meet the physical safeguarding requirements without adversely affecting facility management and operations.
1.2
SECURITY SYSTEM DESIGN PROCESS
1.2.1
A security system is generally not effective unless it is developed based on an understanding of the actual threats and risks it is designed to control. The development of a threat and risk assessment (TRA) for a new facility involves the following steps: ! Preparation - determining what to protect, ! Threat assessment - determining what to protect against, !
Risk assessment - determining if existing or proposed security measures are
Technical Security Branch
1
Revised: January 2000
Royal Canadian Mounted Police
!
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
satisfactory, and Recommendations - identifying what should be done.
In Figure 1 the preparation and threat assessment steps establish what is at stake with the eventual compromise of sensitive information and assets to be housed within the accommodation. Risk assessment measures the performance of existing safeguards in the designed environment against the identified threats. Recommendations define the applicable safeguarding strategy for the accommodation. The assessment is therefore generic in nature in order to specify the actual safeguards according to the conditions progressively established as the accommodation project evolves.
Figure 1 - Facility TRA Process
1.2.2
A safeguarding strategy should be defined and used with the present guide to develop a security site brief (SSB). This document sets out the security criteria to evaluate proposed sites, whether site acquisition is achieved through leasing an existing facility or constructing a facility. The institution or tenant should prepare a SSB for leasing existing facilities (see Chapter 2), because custodians generally seek existing space as a first option. If it is determined that existing space is not available or is not the first option, then another SSB for constructing facilities should be prepared (see Chapter 4). Once selected through a build, buy or lease process, the site is subjected to a survey to determine site specific security-related problems. These problems might include neighbourhood vandalism, theft or violent crime. This information is considered along with the facility TRA and
Technical Security Branch
2
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
allows the safeguarding strategy to be adjusted as required, and adequate safeguards to be developed for the site. In some cases, the location of accommodation will be pre-selected without using a feasibility analysis which has the benefit of a security site brief. In these cases, the site selection criteria normally established in the SSB should be determined, and a safeguarding strategy should be identified with the use of the facility TRA and included in the security design brief (SDB). 1.2.3
The institution prepares architectural programming documents which includes conceptual space relation diagrams as part of the acquisition process. The development of complete and effective physical security can only result from a complete understanding of the facility operation (architectural programming documents), and the safeguarding strategy evolving from the facility TRA and site specific problems. Once this understanding is complete, a SDB is developed. At this point a cost estimate for the physical security safeguards must be established. A simple rule of thumb suggests that the electronic security package would cost between .5% and 1% of the total cost of a large project. Small projects should not be evaluated by this general guideline as the proportions vary radically with the security requirements. Therefore, it is wise to develop the cost using a more reliable method specifically related to the facility at hand.
1.2.4
The project manager ensures that both the SSB and SDB form part of the architectural programming documents. From this document, the designer develops concept drawings. The DSO or representative reviews these drawings and compares them against the SSB and the SDB and safeguarding strategy. At this stage, the drawings can be changed extensively if necessary. This process continues until the concept drawings are approved.
1.2.5
The designer then completes the working drawings and specifications, and subsequent tendering documents detailing the eventual completed designs and all security-related equipment installations. Once again, the DSO or representative should continuously examine the drawings, tender documents and subsequent contractor bids for compliance to the safeguarding strategy.
1.2.6
The DSO or representative should also monitor unique security aspects in installing the security equipment, making sure each step is approved before going on to the next. This process may also involve the administration of the security contracts. The DSO or representative may be asked to advise the contracting agent if progress payments should be made to the contractor.
1.2.7
The next step involves the commissioning of the security equipment which includes inputting all data necessary for operation. Operator training, if required, is included in this process. A transition period could exist where temporary security measures (perhaps temporary security personnel) may be necessary. Once fully operational, and all deficiencies have been corrected, the final payment, including all holdbacks, should be recommended. Only at this point should final payments be made to the contractor.
1.2.8
Once operational, there should be periodic verification to ensure all aspects of the project are operating properly.
1.2.9
Once the project is completed, when information and asset sensitivity or operations change, or following a security incident, the facility TRA is reviewed and a new safeguarding strategy may be identified which would require adjusting existing safeguards.
Technical Security Branch
3
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Figure 2 - Security System Design Process within the project delivery system
1.3
COORDINATION Often, persons involved in the planning of a facility have not considered security. As a result, instances arise where appropriate types or levels of safeguards for leasing existing facilities or constructing facilities have been substandard or non existent. In many instances, even when planning efforts are directed towards security, problems arise through a lack of coordination, or from a breakdown in communication between the project leader/manager and the DSO or representative. Institutions should establish clear paths of communication, through internal policy, between the security office and the planning office within the institution and with the project manager, to ensure that all security safeguards within a facility are properly and efficiently planned and implemented.
1.4
LEVEL OF DETAIL The content of security site and design briefs will vary, depending on whether the department is leasing existing facilities or constructing facilities. The level of detail normally provided in site and design briefs is general in nature, in order to provide maximum flexibility in the acquisition or design process. Specific technical details about security equipment are not discussed in this guide (e.g., types of door hardware or intrusion alarms).
Technical Security Branch
4
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
CHAPTER 2 LEASING EXISTING FACILITIES - SECURITY SITE BRIEF 2.1
GENERAL The institution is responsible for determining, by referring to the safeguarding strategy established from the facility TRA, if a listed measure is justified or warranted. The listing of a security measure does not imply necessity or recommendation of the measure. These listed options are to be applied as and when justified by the specific security requirements. Physical security measures are listed in three groups in this guide. Appendix A lists two distinct groups - the minimum and enhanced safeguards recommended by the RCMP when leasing accommodation. The institution has the option of assuming the additional risk associated with not providing the recommended measures. Enhanced safeguards are special purpose physical security measures which may or may not be justified for the institution. Their applicability should be determined in light of the safeguarding strategy established from the facility TRA as well as of other departmental priorities and requirements. Once selected the security measures are of necessity sought in a leasing document, but they will often only be provided during the fit-up of the facility. Appendix B lists the basic security measures that are usually provided by the custodians in any facility under their control. Selection from this listing of measures is subject to approval by custodians. Identification of the security measures will ensure that the custodian is aware of any space, service and functional requirements, in order that the selected site can accommodate all physical security safeguards.
2.2
MANAGEMENT SUMMARY Due to the length of these documents, it is preferable to have a two- to three-page summary included as part of the brief. The summary should only highlight the specific design concepts related to each major attribute listed in the brief. The intent is to assist senior managers in quickly capturing the important design ideas necessary for safeguarding the facility.
2.3
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) Refer to Appendix A for minimum and enhanced safeguards for the sections listed below, using the same numbering sequence. LEGEND:
//
Usually this section would be part of the Security Design Brief (SDB).
A.1 A.1.1 A.1.2 A.1.3 A.1.4
LIFE SAFETY AND EMERGENCIES Life Safety Emergency Power Fire Water Capacity Response Time for Firefighters and Police
A.2 A.2.1 A.2.2 A.2.3 A.2.4 A.2.5
SITE Easements Through Site Perimeter Control of Site Perimeter Distance from Building Telecom and Data Links Outside the Facility Illumination of Site
Technical Security Branch
5
Revised: January 2000
Royal Canadian Mounted Police
2.3
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) - cont’d A.2 A.2.6 A.2.7 A.2.8 A.2.9 A.2.10 A.2.11 A.2.12
SITE - cont’d Landscaping Site Overview Adjacent Occupants Staff and Visitor Parking Building Location Exterior Circulation - Roadways Topography of the Site
A.3 A.3.1 A.3.2 A.3.3 A.3.4 A.3.5 A.3.6 A.3.7 A.3.8 A.3.9 A.3.10 A.3.11 A.3.12 A.3.13
BUILDING DESIGN Physical Security Design Philosophy Security Design Concepts Perimeter of Building Compartmentalization // Elevator Lobbies Circulation Routes // Circulation - Persons and Equipment Pedestrian Control Within a Building Internal Circulation - Corridors // Zoning Within a Building // Location of Exit Stairwells Floor Loading Capacity Windows
A.4 A.4.1 A.4.2 A.4.3 A.4.4 A.4.5 A.4.6 A.4.7 A.4.8 A.4.9 A.4.10
BUILDING LAYOUT Common Spaces // Washrooms Utility Spaces Mailrooms Food Services Loading Docks Telecom and Data Links Within the Facility // Conference and Board Rooms // Day-care Centres Special Purpose Space //
A.5 A.5.1 A.5.2 A.5.3 A.5.4 A.5.5 A.5.6 A.5.7 A.5.8 A.5.9
BUILDING - SPECIAL REQUIREMENTS Electronic Access Control // Electronic Intrusion Detection // Closed Circuit Television / Video Equipment // Security Control Centre // Secure Rooms // Vaults Sensitive Discussion Areas // Computer Rooms Telecom and Data Links Within the Facility //
Technical Security Branch
6
Revised: January 2000
Royal Canadian Mounted Police
2.3
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) - cont’d A.6 A.6.1 A.6.2 A.6.3 A.6.4 A.6.5 A.6.6 A.6.7 A.6.8 A.6.9
FACILITY MANAGEMENT Leasing Contract Control of Access to Premises Within a Building Maintenance Services Cleaning Services Garbage Removal Classified Waste Destruction // Signs in Building Interior // Locking Hardware and Key Control Renovation Work Outside Public-Access Hours
Technical Security Branch
7
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
CHAPTER 3 LEASING EXISTING FACILITIES - SECURITY DESIGN BRIEF (FIT-UP) 3.1
GENERAL Security measures already documented in a site brief and implemented need not be repeated in the design brief. However, if no site brief has been submitted, it is up to the institution to determine, by reference to the safeguarding strategy established from the facility TRA and site specific deficiencies, if a listed measure is justified or warranted. The listing of a security measure does not imply necessity or recommendation of the measure. These listed options are to be applied as and when justified by the specific security requirements. Physical security measures are listed in three groups in this guide. Appendix A lists two - the minimum and enhanced safeguards recommended by the RCMP when leasing accommodation. The institution has the option of assuming the additional risk associated with not providing the recommended measures. Enhanced safeguards are special purpose physical security measures which may or may not be justified for the institution. Their applicability should be determined in light of the safeguarding strategy established from the facility TRA as well as of other departmental priorities and requirements. Once selected the security measures are of necessity sought in a leasing document, but they will often only be provided during the fit-up of the facility. Appendix B lists the basic security measures that are usually provided by the custodian in any facility under their control. Selection from this listing of measures is subject to approval by custodians. Identification of the security measures will ensure that the custodian is aware of any space, service and functional requirements, in order that the selected site can accommodate all physical security safeguards.
3.2
MANAGEMENT SUMMARY Due to the length of these documents, it is preferable to have a two- to three-page summary included as part of the brief. The summary should only highlight the specific design concepts related to each major attribute listed in the brief. The intent is to assist senior managers in quickly capturing the important design ideas necessary for safeguarding the facility.
3.3
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) Refer to Appendix A for minimum and enhanced safeguards for the sections listed below, using the same numbering sequence. LEGEND:
/// Usually this section would be part of the Security Site Brief (SSB). If a SSB has not been prepared, then this section forms part of the Security Design Brief (SDB).
A.1 A.1.1 A.1.2 A.1.3 A.1.4
LIFE SAFETY AND EMERGENCIES Life Safety /// Emergency Power /// Fire Water Capacity /// Response Time for Firefighters and Police ///
Technical Security Branch
8
Revised: January 2000
Royal Canadian Mounted Police
3.3
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) - cont’d A.2 A.2.1 A.2.2 A.2.3 A.2.4 A.2.5 A.2.6 A.2.7 A.2.8 A.2.9 A.2.10 A.2.11 A.2.12
SITE Easements Through Site /// Perimeter Control of Site /// Perimeter Distance from Building /// Telecom and Data Links Outside the Facility /// Illumination of Site /// Landscaping /// Site Overview /// Adjacent Occupants /// Staff and Visitor Parking /// Building Location /// Exterior Circulation - Roadways /// Topography of the Site ///
A.3 A.3.1 A.3.2 A.3.3 A.3.4 A.3.5 A.3.6 A.3.7 A.3.8 A.3.9 A.3.10 A.3.11 A.3.12 A.3.13
BUILDING DESIGN Physical Security Design Philosophy /// Security Design Concepts /// Perimeter of Building /// Compartmentalization Elevator Lobbies /// Circulation Routes Circulation -Persons and Equipment /// Pedestrian Control Within a Building /// Internal Circulation - Corridors Zoning Within a Building Location of Exit Stairwells /// Floor Loading Capacity /// Windows ///
A.4 A.4.1 A.4.2 A.4.3 A.4.4 A.4.5 A.4.6 A.4.7 A.4.8 A.4.9 A.4.10
BUILDING LAYOUT Common Spaces Washrooms /// Utility Spaces /// Mailrooms /// Food Services /// Loading Docks /// Telecom and Data Links Within the Facility Conference and Board Rooms Day-care Centres /// Special Purpose Space
A.5 A.5.1 A.5.2 A.5.3
BUILDING - SPECIAL REQUIREMENTS Electronic Access Control Electronic Intrusion Detection Closed Circuit Television / Video Equipment
Technical Security Branch
9
Revised: January 2000
Royal Canadian Mounted Police
3.3
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) - cont’d A.5 A.5.4 A.5.5 A.5.6 A.5.7 A.5.8 A.5.9
BUILDING - SPECIAL REQUIREMENTS- cont’d Security Control Centre Secure Rooms Vaults /// Sensitive Discussion Areas Computer Rooms /// Telecom and Data Links Within the Facility
A.6 A.6.1 A.6.2 A.6.3 A.6.4 A.6.5 A.6.6 A.6.7 A.6.8 A.6.9
FACILITY MANAGEMENT Leasing Contract /// Control of Access to Premises Within a Building /// Maintenance Services /// Cleaning Services /// Garbage Removal /// Classified Waste Destruction Signs in Building Interior Locking Hardware and Key Control /// Renovation Work Outside Public-Access Hours ///
Technical Security Branch
10
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
CHAPTER 4 CONSTRUCTING FACILITIES - SECURITY SITE BRIEF 4.1
GENERAL It is up to the institution to determine, by reference to the safeguarding strategy established from the facility TRA, if a listed measure is justified or warranted. The listing of a security measure does not imply necessity or recommendation of the measure. These listed options are to be applied as and when justified by the specific security requirements. Physical security measures are listed in three groups in this guide. Appendix A lists two - the minimum and enhanced safeguards recommended by the RCMP when leasing accommodation. The institution has the option of assuming the additional risk associated with not providing the recommended measures. Enhanced safeguards are special purpose physical security measures which may or may not be justified for the institution. Their applicability should be determined in light of the safeguarding strategy established from the facility TRA as well as of other departmental priorities and requirements. Once selected the security measures are of necessity sought in a leasing document, but they will often only be provided during the fit-up of the facility. Appendix B lists the basic security measures that are usually provided by the custodian in any facility under their control. Selection from this listing of measures is subject to approval by custodians. Identification of the security measures will ensure that the custodian is aware of any space, service and functional requirements, in order that the selected site can accommodate all physical security safeguards.
4.2
MANAGEMENT SUMMARY Due to the length of these documents, it is preferable to have a two- to three-page summary included as part of the brief. The summary should only highlight the specific design concepts related to each major attribute listed in the brief. The intent is to assist senior managers in quickly capturing the important design ideas necessary for safeguarding the facility.
4.3
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) Refer to Appendix A for minimum and enhanced safeguards for the sections listed below, using the same numbering sequence. LEGEND:
////
Usually this section would be part of the Security Design Brief (SDB).
A.1 A.1.1 A.1.2 A.1.3 A.1.4
LIFE SAFETY AND EMERGENCIES Life Safety //// Emergency Power //// Fire Water Capacity //// Response Time for Firefighters and Police
A.2 A.2.1 A.2.2 A.2.3 A.2.4
SITE Easements Through Site Perimeter Control of Site Perimeter Distance from Building Telecom and Data Links Outside the Facility
Technical Security Branch
11
Revised: January 2000
Royal Canadian Mounted Police
4.3
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) - cont’d A.2 A.2.5 A.2.6 A.2.7 A.2.8 A.2.9 A.2.10 A.2.11 A.2.12
SITE - cont’d Illumination of Site //// Landscaping //// Site Overview Adjacent Occupants Staff and Visitor Parking //// Building Location Exterior Circulation - Roadways Topography of the Site
A.3 A.3.1 A.3.2 A.3.3 A.3.4 A.3.5 A.3.6 A.3.7 A.3.8 A.3.9 A.3.10 A.3.11 A.3.12 A.3.13
BUILDING DESIGN Physical Security Design Philosophy //// Security Design Concepts //// Perimeter of Building //// Compartmentalization //// Elevator Lobbies //// Circulation Routes //// Circulation -Persons and Equipment //// Pedestrian Control Within a Building //// Internal Circulation - Corridors //// Zoning Within a Building //// Location of Exit Stairwells //// Floor Loading Capacity //// Windows ////
A.4 A.4.1 A.4.2 A.4.3 A.4.4 A.4.5 A.4.6 A.4.7 A.4.8 A.4.9 A.4.10
BUILDING LAYOUT Common Spaces //// Washrooms //// Utility Spaces //// Mailrooms //// Food Services //// Loading Docks //// Telecom and Data Links Within the Facility //// Conference and Board Rooms //// Day-care Centres //// Special Purpose Space ////
A.5 A.5.1 A.5.2 A.5.3 A.5.4 A.5.5 A.5.6
BUILDING - SPECIAL REQUIREMENTS Electronic Access Control //// Electronic Intrusion Detection //// Closed Circuit Television / Video Equipment //// Security Control Centre //// Secure Rooms //// Vaults ////
Technical Security Branch
12
Revised: January 2000
Royal Canadian Mounted Police
4.3
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) - cont’d A.5 A.5.7 A.5.8 A.5.9
BUILDING - SPECIAL REQUIREMENTS - cont’d Sensitive Discussion Areas //// Computer Rooms //// Telecom and Data Links Within the Facility ////
A.6 A.6.1 A.6.2 A.6.3 A.6.4 A.6.5 A.6.6 A.6.7 A.6.8 A.6.9
FACILITY MANAGEMENT Leasing Contract //// Control of Access to Premises Within a Building //// Maintenance Services //// Cleaning Services //// Garbage Removal //// Classified Waste Destruction //// Signs in Building Interior //// Locking Hardware and Key Control //// Renovation Work Outside Public-Access Hours ////
Technical Security Branch
13
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
CHAPTER 5 CONSTRUCTING FACILITIES - SECURITY DESIGN BRIEF (FIT-UP) 5.1
GENERAL Security measures already documented in a site brief and implemented need not be repeated in the design brief. However, if no site brief has been submitted, it is up to the institution to determine, by reference to the safeguarding strategy established from the facility TRA and site specific deficiencies, if a listed measure is justified or warranted. The listing of a security measure does not imply necessity or recommendation of the measure. These listed options are to be applied as and when justified by the specific security requirements. Physical security measures are listed in three groups in this guide. Appendix A lists two - the minimum and enhanced safeguards recommended by the RCMP when leasing accommodation. The institution has the option of assuming the additional risk associated with not providing the recommended measures. Enhanced safeguards are special purpose physical security measures which may or may not be justified for the institution. Their applicability should be determined in light of the safeguarding strategy established from the facility TRA as well as of other departmental priorities and requirements. Once selected the security measures are of necessity sought in a leasing document, but they will often only be provided during the fit-up of the facility. Appendix B lists the basic security measures that are usually provided by the custodian in any facility under their control. Selection from this listing of measures is subject to approval by custodians. Identification of the security measures will ensure that the custodian is aware of any space, service and functional requirements, in order that the selected site can accommodate all physical security safeguards.
5.2
MANAGEMENT SUMMARY Due to the length of these documents, it is preferable to have a two- to three-page summary included as part of the brief. The summary should only highlight the specific design concepts related to each major attribute listed in the brief. The intent is to assist senior managers in quickly capturing the important design ideas necessary for safeguarding the facility.
5.3
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) Refer to Appendix A for minimum and enhanced safeguards for the sections listed below, using the same numbering sequence. LEGEND:
5.3
/////
Usually this section would be part of the Security Site Brief (SSB). If a SSB has not been prepared, then this section forms part of the Security Design Brief (SDB).
A.1 A.1.1 A.1.2 A.1.3 A.1.4
LIFE SAFETY AND EMERGENCIES Life Safety Emergency Power Fire Water Capacity Response Time for Firefighters and Police /////
A.2 A.2.1 A.2.2
SITE Easements Through Site ///// Perimeter Control of Site /////
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) - cont’d
Technical Security Branch
14
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
A.2 A.2.3 A.2.4 A.2.5 A.2.6 A.2.7 A.2.8 A.2.9 A.2.10 A.2.11 A.2.12
SITE - cont’d Perimeter Distance from Building ///// Telecom and Data Links Outside the Facility ///// Illumination of Site Landscaping Site Overview ///// Adjacent Occupants ///// Staff and Visitor Parking Building Location ///// Exterior Circulation - Roadways ///// Topography of the Site /////
A.3 A.3.1 A.3.2 A.3.3 A.3.4 A.3.5 A.3.6 A.3.7 A.3.8 A.3.9 A.3.10 A.3.11 A.3.12 A.3.13
BUILDING DESIGN Physical Security Design Philosophy Security Design Concepts Perimeter of Building Compartmentalization Elevator Lobbies Circulation Routes Circulation -Persons and Equipment Pedestrian Control Within a Building Internal Circulation - Corridors Zoning Within a Building Location of Exit Stairwells Floor Loading Capacity Windows
A.4 A.4.1 A.4.2 A.4.3 A.4.4 A.4.5 A.4.6 A.4.7 A.4.8 A.4.9 A.4.10
BUILDING LAYOUT Common Spaces Washrooms Utility Spaces Mailrooms Food Services Loading Docks Telecom and Data Links Within the Facility Conference and Board Rooms Day-care Centres Special Purpose Space
A.5 A.5.1 A.5.2 A.5.3 A.5.4 A.5.5 A.5.6 A.5.7 A.5.8 A.5.9
BUILDING - SPECIAL REQUIREMENTS Electronic Access Control Electronic Intrusion Detection Closed Circuit Television / Video Equipment Security Control Centre Secure Rooms Vaults Sensitive Discussion Areas Computer Rooms Telecom and Data Links Within the Facility
Technical Security Branch
15
Revised: January 2000
Royal Canadian Mounted Police
5.3
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
MINIMUM AND ENHANCED SAFEGUARDS (See Appendix A) - cont’d A.6 A.6.1 A.6.2 A.6.3 A.6.4 A.6.5 A.6.6 A.6.7 A.6.8 A.6.9
FACILITY MANAGEMENT Leasing Contract ///// Control of Access to Premises Within a Building Maintenance Services Cleaning Services Garbage Removal Classified Waste Destruction Signs in Building Interior Locking Hardware and Key Control Renovation Work Outside Public-Access Hours
Technical Security Branch
16
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
APPENDIX A MINIMUM AND ENHANCED SAFEGUARDS A.1
LIFE SAFETY AND EMERGENCIES
A.1.1
LIFE SAFETY Minimum Safeguards All new facilities must conform to applicable building codes regarding life safety, e.g., fire safety, exiting, alarms, smoke control, safe havens. All life safety concerns should take precedence over any security standards and recommendations. This responsibility for federally-owned facilities lies with Human Resources Development Canada, Fire Prevention, Fire Protection Engineering Services. Life safety is controlled by provincial authorities for facilities owned and operated by the private sector. Municipalities usually administer provincial codes. There are a number of areas in the National Building Code (NBC) which have a security connotation. Particular attention should be given to the hardware requirements, especially 3.4.6.15(1) of the 1995 NBC. (See Security connotations to the NBC in SESI Reference folder) All existing facilities are reviewed periodically for compliance. Barrier free issues that have an impact on security should be identified and resolved during the conceptual design stage. This review includes recommendations as to whether deficiencies can be corrected, or whether compensating features or operations can be added in lieu of conformity. Life safety equipment is inspected and tested at required intervals. Older facilities may be governed by codes that were in force at the time they were built or remodelled, and which were less stringent than those now in force. In these cases, a decision will be needed as to whether this provides sufficient safety under current conditions. Sprinklers are generally provided if required by the code applicable due to building type, design or materials, or to hazardous contents. Examples of Enhanced Safeguards ! Sprinklers or other fire protection required to protect persons or other valuable assets. ! Regulations for high-rise buildings (e.g. stairwell doors to cross-over floors must be left unlocked) requires placement of a functional operation to a level not used as a crossover floor. ! Panic alarms and/or video equipment in high risk areas. ! Providing fire refuge areas in high-rise buildings.
A.1.2
EMERGENCY POWER Minimum Safeguards Emergency power appropriate to the facility for basic building services - heating, partial elevator service, emergency lighting, etc., with at least 12 hours of fuel supply (72 hours at isolated locations). Provide emergency power or battery packs for emergency exit lighting, and for four hours operation of installed electronic intrusion detection. Examples of Enhanced Safeguards ! Emergency power to selected tenant equipment. ! Uninterruptible power supply for security computer and other selected computer equipment. ! Emergency power for specific tenant operation. ! In urban areas, additional capacity to fuel tanks for emergency generators, to extend running time, e.g. from minimum of 12 hours to 72 hours.
Technical Security Branch
17
Revised: January 2000
Royal Canadian Mounted Police
A.1.3
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
FIRE WATER CAPACITY Minimum Safeguards Ensure that municipal water supply to site has sufficient volume and pressure for firefighting. Where municipal supply does not exist there should be a reservoir and fire pump or sufficient static head on site; sufficient capacity means appropriate to size and combustibility of building and contents (measured in minutes of full discharge rate). Provide a sufficient number of water pumps where water pressure is unreliable. Examples of Enhanced Safeguards ! Yard hydrants on-site at locations convenient to fire-access lanes. ! Emergency generator to power fire booster pumps.
A.1.4
RESPONSE TIME FOR FIREFIGHTERS AND POLICE Minimum Safeguards Firefighters response -The NBC requires that fire detection and response equipment be operational 24 hours a day. If the safeguarding strategy indicates response time is inadequate, compensatory steps that will be the most cost effective should be taken. Police response - The basic level of security is determined from (a) the probability of a police response of sufficient short duration that the physical security measures can reasonably be expected to counter the threats, and (b) the inherent psychological deterrence of a facility that is locked during restricted and limited access hours. Examples of Enhanced Safeguards Firefighters ! Enhanced fire alarm to speed firefighters response, e.g. by direct link to fire hall or central alarm agency. ! Fire sprinkler or other extinguishing equipment, if not already provided. ! Two-stage fire alarm. ! Guard or commissionaire service either during restricted and limited access hours, or 24 hours. Police ! Establish beforehand with the police what to do in the event of an emergency ! Measures to delay an intruder, e.g. multiple locked entry-ways to go through ! Electronic intrusion detection to notify building security or central alarm agency. ! ULC monitoring or commissionaire service either during limited access hours, or 24 hours. ! On-site accommodation for an effective response force (e.g. police detachment at an airport).
A.2
SITE
A.2.1
EASEMENTS THROUGH SITE Minimum Safeguards Easements should not be permitted closer than 15 m from the building. Institutions are to be informed by the custodian of the possibility of intrusion on the site by an easement owner (e.g. utility crews sent to replace or repair overhead lines, or excavations to repair or replace underground utilities), without advance notice to the occupants. If an easement permits public access through the site, e.g. in an emergency, the institution must be informed and agree with the requirement prior to occupancy.
Technical Security Branch
18
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Examples of Enhanced Safeguards ! Fenced yard, locked, with utility crews gaining entry only by advanced notice. ! No easement areas within fenced yard. ! Utility personnel granted access to site only when accompanied by institution or building security personnel. ! Emergency access under control of institution or building security personnel once all safety factors have been considered. A.2.2
PERIMETER CONTROL OF SITE Minimum Safeguards The site is to be signed with the name of the government institution clearly displayed. During public access hours there is no restriction on access to the site or to the Public-Access Zone of the building. During limited-access hours there is no restriction on access to the site but the building is locked. Signs provide clear directions, and define the public and restricted areas of the site. Examples of Enhanced Safeguards ! No signs indicate the name of the institution. ! Fencing of portions of site with locked gate. ! Fencing of entire site with gate attended during public and restricted access hours. ! Fencing to be a specified distance from the facility. ! Monitoring by patrol or remote cameras during limited access hours. ! Fencing with gate attended during public and restricted access hours, and key device during limited access hours for automobiles and pedestrians. ! Motion detectors within the perimeter encircled by the fence. ! Fencing, single or double line, with intrusion alarm and/or motion detectors. ! Illumination of site. ! Low reflection fence, e.g. coated with dark, non-reflective material.
A.2.3
PERIMETER DISTANCE FROM BUILDING Minimum Safeguards Except for easements, the facility may have to abut the property line, a street or the wall of an adjacent building on some sites. Examples of Enhanced Safeguards ! Allow sufficient distance from the site perimeter to the building wall to prevent unauthorized access on foot from neighbouring facilities, without being observed. ! Crossing from an adjacent roof should be observable, and difficult without bridging tools (e.g. for an adjacent roof of similar height and a gap of less than 4 m, provide a smooth high fence at roof edge.) ! Distance and possible grade change or other obstacles sufficient to delay an intruder for a specified time. ! Distance and terrain sufficient to deter technical intrusion, e.g. electronic or acoustic. ! Not permitting vehicles to come within three metres of the building face. ! Distance sufficient to provide fencing with all necessary security features. ! Allow sufficient distance from building face to install fence lines or exterior intrusion detection equipment.
A.2.4
TELECOM AND DATA LINKS OUTSIDE THE FACILITY
Technical Security Branch
19
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Minimum Safeguards Refer to the GSP-chapter 2-3, Information Technology Security Standards and the Technical Security Standards for Information Technology (TSSIT) - RCMP-Aug. 1997. Examples of Enhanced Safeguards ! All cabling underground through site. ! Cabling underground beyond site. ! Locking of access points to underground vaults containing sensitive cabling. ! Redundant second service on opposite side of site from normal main service, to a different telephone "central office" from normal service. ! Laser communication links. ! Alternative communication links using encrypted microwave along safeguarded paths. ! Government-approved encryption (Consultation with the COMSEC authority required) A.2.5
ILLUMINATION OF SITE Minimum Safeguards Provide general illumination of the entire perimeter of the building, driveways, and parking lots, to a target level of 25 lux (20 lux minimum). (A lux is a metric measurement of light equal to the illumination on the surface of all points one metre from a uniform light source. One lux equals approximately one-tenth of a footcandle). Lighting sources may be street lighting, yard lighting or building-mounted lighting, or combinations of all three. Maximum contrast of darkest to brightest illumination is a ratio of one to ten. (i.e. if darkest is 25 lux, then highest level should not exceed 250 lux). Where the building abuts the property line, with private property on the other side, that private property should not be illuminated if its owner so requests. Examples of Enhanced Safeguards ! Solar-activated light sources to compensate for summer and winter hours, especially if video equipment is used. ! Security lighting, in order to obtain increased light intensity or a specialized colour spectrum, or both, for identification or for closed-circuit video equipment applications. ! Illumination of the additional portions of the site to 25 lux. ! Illumination at the site fence line. ! Low reflection fence, e.g. coated with dark, non-reflective material. ! Lighting at staff entrances and exits used after hours to a minimum of 50 lux, but not more than 200 lux. ! Wall-mounted light fixtures (3 m - 4 m high) shining on light wall surfaces, so that a person moving on the site would cast a large, long shadow. ! Tamper-resistant lighting fixtures. ! Security lighting positioned to prevent deep shadows from the building or vegetation, so an intruder could be noticed. ! When using video cameras, providing a minimum of 50 lux reflected light. Consult a lighting engineer when using colour video cameras for correct light sources and their appropriate colour rendition index. ! If colour rendition is a requirement, ensure the correct type of lighting is used.
Technical Security Branch
20
Revised: January 2000
Royal Canadian Mounted Police
A.2.6
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
LANDSCAPING Minimum Safeguards Provide a clear space of six metres around the building and on both sides of paths between building(s) and parking areas, sidewalk and public transportation stops. Avoid bushes or branches that enable a person to hide. The zone between 400 mm and 1,500 mm above grade should be clear of all visual obstructions. If snow is piled on the site or if grass and shrubs are allowed to grow wild, ensure there is no visual impediment, that response forces are not delayed, and that access cannot be gained into or on top of the building. Examples of Enhanced Safeguards ! Landscaping to be restricted to low ground cover, or deciduous trees with high branches, giving clear view of site at eye level, for a person standing, seated in a car or van, or viewing on video equipment, i.e. from 300 mm up to 2,000 mm. ! Fence fabric to resist ice build-up affecting perimeter alarm equipment. ! Landscaping features to prevent vehicle access to a facility. Berms or changes in elevation, such as retaining walls, to direct the flow of people and vehicles past observation points, or to establish the perimeter of a site. ! Psychological barriers such as elevation, material or colour changes, concrete curbs, etc. ! Securing objects such as paving bricks, stones, rocks, benches, tables, etc. to ensure they cannot be used as projectiles.
A.2.7
SITE OVERVIEW Minimum Safeguards Building facades and the site should be observable from the roadway by local police and passers-by, unless deemed undesirable when considering the safeguarding strategy. Examples of Enhanced Safeguards ! Site where surrounding buildings or terrain does not permit overview of building(s), or depending on the plan for security at a given site, overview for guard patrols may be required. ! For the restricted zones, selecting only upper floors in a building where surrounding buildings or terrain do not permit looking down at, or straight into, those floors. ! Site selected where overview exists from several directions, and neighbours can report abnormal events.
A.2.8
ADJACENT OCCUPANTS Minimum Safeguards In single or multi-tenant buildings, access to an institution's space should be controlled. Examples of Enhanced Safeguards ! Leasing document to provide for extra security measures to be installed at custodian's expense if specified tenants (justified by the safeguarding strategy) are located in the facility. ! Prior to site selection, right of way access and parking which could influence access to the site are to be evaluated. ! Prior to site selection, the prospective government tenant should list neighbouring activities and groups that would be unacceptable. ! Leasing documents to ensure a single tenant occupancy of the building or floor.
Technical Security Branch
21
Revised: January 2000
Royal Canadian Mounted Police
A.2.9
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
STAFF AND VISITOR PARKING Minimum Safeguards During limited access hours, parking locations designated by signs should indicate visitor and staff parking areas. Elevators to and from indoor parking should not give direct access to office floors. Instead, elevators should open to the main lobby, in view of the reception or guard station, or if there is no attended station, into an open traffic zone in the lobby. During limited access hours, staff access to indoor parking should be only by key, or by guard control. Proper placement of the staff parking facility may have a significant bearing on the amount of use of emergency exit doors; for example, if they conveniently open onto the parking lot one can anticipate frequent use. The more often the emergency exit door is used, the less security personnel will rely on monitoring equipment, with response becoming progressively less reliable. When an exit door is used it is very difficult to prevent someone from entering the facility while another is exiting. The entrant may or may not be an employee of your facility. Also, if personnel can find logical reasons for circumventing physical security safeguards the less respect they will have for restrictions imposed to make physical security function. Visitor parking should allow visitors easy orientation to the main entrance. Because of potential obstruction problems, space should not be provided directly on the main circulation route for parking, pulling over, stopping or as a drop-off point, at main or side entrances. Examples of Enhanced Safeguards ! Card-reader access for designated staff parking. ! Indoor parking with attended control station. ! Outdoor parking with attended control station. ! Fenced outdoor storage area for parking of government-owned vehicles. ! Open-mesh fencing coated with dark, non-reflective material. ! Video monitoring of parking areas by unattended videotape recording or security personnel. ! Increased lighting requirements for personnel security. ! Electronic access control or parking attendant. ! Fence around the perimeter of surface parking lots. ! Direct view of parking areas from a control point.
A.2.10 BUILDING LOCATION Minimum Safeguards The building will not be located in a manner which will produce undue natural or man-made hazards. Examples of Enhanced Safeguards ! Building location for easy access by an emergency response force in all weather conditions. ! Natural surveillance by automobiles or pedestrians. ! Visually shield the facility with a solid fence. ! Locate the facility on a corner to provide two emergency access routes for essential services, such as the local police. ! Locate the building on the site such that security for building services can be assured. ! Communication lines (telephone, data, etc.), power lines, energy supply lines (oil, gas), water and sewage pipes to be physically protected.
A.2.11 EXTERIOR CIRCULATION - ROADWAYS Technical Security Branch
22
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Minimum Safeguards Visitors should be able to easily determine where to go and how to get there. Clear definition of entry will reduce confusion thereby enhancing legitimate access. Where access is not apparent, signs will direct the public. Signs will reduce the number of times employees will be distracted by giving directions to a visitor. Rather than redirecting visitors to the main entrance, employees often send visitors through the facility to the proper entry point to receive the requisite badges, etc. Proper identification of the requirements will lessen the number of incidents of this nature. Examples of Enhanced Safeguards ! Driveways and vehicle routing encircling the facility to enhance natural surveillance of the building. ! Vehicle circulation routes not easily accessed from the emergency exits, as someone could easily slip out of the facility and drop something into an accomplice's vehicle. A.2.12 TOPOGRAPHY OF THE SITE Minimum Safeguards Security measures which compensate for site specific deficiencies are to be provided in this section. Examples of Enhanced Safeguards ! If surveillance of the site is necessary, do not locate the facility in lowlands or areas where fog is common. ! Do not locate facilities on flood plains. ! Utilize gullies or valleys as a barrier to control access onto the site.
A.3
BUILDING DESIGN
A.3.1
PHYSICAL SECURITY DESIGN PHILOSOPHY The general physical security design standard advocated by the GSP is developed from the physical security elements of protection, detection, response, demarcation, observation, clustering, territoriality and utilization. Therefore, the environment for the facility functions should be identified and stated. If physical security is to be very stringent to compensate for vulnerabilities, a statement to that effect should start the design section. The general philosophy of the government is to favour compartmentalization. Specifics that are unique to the way that compartmentalization is to be achieved are addressed in this chapter. Progressively restrictive zones are to be used in the development of physical security ranging from Public-Access Zones to Security Zones (and exceptionally to High-Security Zones). For example, in this section it could be stated that the proposed facility will have "X" number of functional groups. Functional groups that process "A" commodity will generally be allocated to Restricted Zones, and those groups which store certain assets generally fall into Operation Zones, etc. Unique considerations to take into account in all restricted zone planning should be identified. One such requirement is to have access to, and emergency egress routes from, a more restrictive zone through a less restrictive zone. It is preferable to use architectural design to achieve the objectives, rather than having to install security equipment to solve a security problem created by poor design. One example is locating common service areas in centralized locations, with circulation to them through Operations Zones, to avoid having employees travelling through other restricted areas.
A.3.2
SECURITY DESIGN CONCEPTS Physical security should be designed using an interactive method, incorporating the elements of
Technical Security Branch
23
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
protection, detection, response, demarcation, observation, clustering, territoriality and utilization. The concept of defensible space should be applied where opportunistic and accidental threats are expected to materialize. This implies the use of five strategies: demarcation, observation, clustering, territoriality and utilization. Oscar Newman's book, Defensible Space, provides a detailed look at these strategies. Where premeditated threats are likely, the Target Hardening principles integrating protection , detection and response should be used. Protection can include both physical and psychological barriers, using a variety of materials in different combinations. Detection can include both electromechanical and manual safeguards. Responses are usually manual but they can be automatic. Other accepted methods of protecting assets include: dividing the target, such as creating several registries; exposing the target, such as placing a safe in the front window of a retail outlet, and relying on passers-by as a deterrent; hiding the target, such as positioning a safe behind a picture in a room; combining information assets to create such a volume of material that the specific target cannot be located; and placing a target behind many barriers and forcing an adversary to penetrate each one using different methods. (See the Target Hardening document in the SESI Reference folder.) By combining the concepts of target hardening and defensible space, strategies for crime prevention through environmental design are developed. This idea allows security designers to create an environment where employees are naturally integrated and used to support the security program. In addition, crimes are prevented by application of direct controls. A.3.3
PERIMETER OF BUILDING Minimum Safeguards Total building secured at grade level by locked doors, using heavy duty commercial hardware (locks, hinges, etc.). All windows either fixed or locked with heavy duty commercial hardware at all levels. Roof access door or roof hatch locked with heavy duty commercial hardware. Air intake sufficiently remote from air exhaust. Examples of Enhanced Safeguards ! Grade level doors and windows alarmed for opening or breakage. ! Security patrol. ! Video monitoring with single or multiple cameras, either videotaped, monitored by security personnel, or both. ! All glass windows within three metres of grade fitted with bars, with vandal-resistant glazing or set in frames with a maximum width of 15 mm to prevent a person from passing through. ! The institution requiring entry security controls should be located in a single tenant facility, or in a facility where other government departments present require the same level of security at entry. ! Institutions requiring entry security controls may not be suited for a multi-tenant building that has private tenants who may not want entry controls. ! If the threat warrants, all windows visible from off-site to be fitted with bullet-resistant glazing. ! Locate and screen air intakes to inhibit placement of smoke, tear gas or other offensive substances.
Technical Security Branch
24
Revised: January 2000
Royal Canadian Mounted Police
A.3.4
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
COMPARTMENTALIZATION It is important to suitably control the movement of visitors and non-staff within a facility. Staff movement should also be controlled. Compartmentalization of single or multiple areas is crucial to the control of staff and visitor movement, and is necessary if control points are to be effective. Control points could be a receptionist or a locked door. Each directorate, branch or section should be capable of being compartmentalized either horizontally or vertically. Vertical compartmentalization of spaces requires controls of the vertical circulation routes (stairways, elevators etc.) and may create some life safety problems not inherent in horizontal compartmentalization. The architectural programming documents would specify the relationships of each compartment.
A.3.5
ELEVATOR LOBBIES Minimum Safeguards In all buildings, elevators (including freight elevators from public parking and loading dock areas) should open in a Public-Access or Reception Zone, e.g. ground floor elevator lobby. However, uncontrolled opening of an elevator into the elevator lobby (i.e. a Public-Access or Reception Zone) on an institution's floor is permitted, if access to the floor is continuously monitored by the institution, or if the floor is secure at all times. On multi-tenant floors, all of the following should be accessed from the elevator lobby by the public without leaving the Public-Access Zone: • means of egress, • public toilets, and • the Reception Zone of institutions. On floors having only a single institution, access to toilets and exit stairs may or may not be from the Public-Access Zone. The security site brief should specify that access to washrooms may or may not be from an Operations Zone. Examples of Enhanced Safeguards ! Elevator lobbies connecting stairs and toilets on all floors are in the Public-Access Zone. ! During restricted or limited access hours, operation of elevators is controlled by the entry control desk. ! Elevators do not open on any or all institution floors, unless persons who use the elevator have been granted access by the entry control desk, or have a key, card or other access device.
A.3.6
CIRCULATION ROUTES Minimum Safeguards Circulation routes from Public-Access to Operations Zones should pass through a Reception Zone under the institution's control. Within the institution's Operations Zones there should be no circulation routes for public access, even in an emergency. All stairs required as a means of egress for Public-Access Zones should be located in the Public-Access Zones. All exit doors forming part of a means of egress from restricted zones to Public-Access Zones should be equipped with automatic closers and secured on the stairwell or corridor side, except on crossover floors in a high-rise building. Signs on these doors from restricted zones should indicate one-way movement only. Access signs direct public to and from premises through public access routes, or directly to outside (i.e. not through restricted zones or other tenants' premises).
Examples of Enhanced Safeguards Technical Security Branch
25
Revised: January 2000
Royal Canadian Mounted Police
! ! ! !
A.3.7
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Signs clearly define limits to which public access is permitted. Local alarms on doors that are to be used only in emergencies. Use signs on such doors. Electronic access controls on doors between Operations, Public-Access or Reception Zones. Short distance stairs (i.e. circulation stairs) running between intra-directorate floors, with controlled means of entering or exiting these floors.
CIRCULATION-PERSONS AND EQUIPMENT Minimum Safeguards Security measures which compensate for site specific deficiencies are to be provided in this section, unless already documented in a site brief and implemented. Often, the architectural designer can develop an innovative plan which meets all of your considerations. Where warranted by the safeguarding strategy developed from the facility TRA, specify electronic access control equipment to regulate circulation. The specification for the equipment should identify the performance requirements totally. Often, the architectural designer can develop an innovative plan which meets all of your considerations. Examples of Enhanced Safeguards ! Establish reception points at interface points between functional groups or restricted zones. ! Stairs for circulation separate from a means of egress. ! Electronic access control. ! Separation of high value assets circulation from normal supply items.
A.3.8
PEDESTRIAN CONTROL WITHIN A BUILDING Minimum Safeguards Provide sufficient space within the Reception Zone, or sufficient overflow space in Public-Access Zones, to accommodate visitors waiting for service, without disrupting normal activity on the premises or in the remainder of the facility. Vertical access routes to the rest of the building from the Public-Access Zone should be by elevator or via short distance stairs. Stairs forming part of a means of egress should not be used to enter the tenant space. At the perimeter of the institution's space, or at the boundary where a facility would be closed because of a demonstration, there should be the potential to erect a physical or psychological barrier as a means of access control. Examples of Enhanced Safeguards ! Physical separations in place, creating secure boundaries between areas where the public is permitted and the restricted zones where the public is not permitted. Separation adequate to prevent attempted occupation or demonstration.
A.3.9
INTERNAL CIRCULATION - CORRIDORS Minimum Safeguards Security is influenced by the internal circulation of the facility. Emergency exit routes that circumvent restricted zones at a time of crisis can be a vulnerability. Some definitive circulation is established at this point, therefore, clearly indicating to the architect which specific functions should be removed from the main circulation routes. Examples of Enhanced Safeguards
Technical Security Branch
26
Revised: January 2000
Royal Canadian Mounted Police
! ! !
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Specific functions which cannot be located on a cross-over floor. A corridor between the mandatory fire exits on cross-over floors. Specific functions which are not allowed to abut the fire exit or public corridors.
A.3.10 ZONING WITHIN A BUILDING Minimum Safeguards Every facility should have a Reception Zone accessed directly from the Public-Access Zone, where visitors, if necessary, wait for service or wait for permission to proceed to a restricted zone. At the boundary between the Public-Access and the Reception Zone, and between the Reception Zone and restricted zones, the wall - including the perimeter wall and any internal ceiling - should not permit access over the wall by simply lifting the ceiling, i.e. ceiling on public side to be fixed or wall to extend to structure above. Every facility should be compartmentalized in a manner which develops progressively restrictive zones. The use of physical barriers to separate Security and High-Security Zones is not necessary, provided access is manually or electro mechanically controlled and continuously monitored. Examples of Enhanced Safeguards ! Specific zones physically separated by a wall with a lockable door. ! High-Security Zones, located where traffic between less restrictive restricted zones does not pass. ! All perimeter physical barriers around Security and High-Security Zones extend to underside of structure above. ! Operations Zone separated from the Reception Zone by a wall with lockable door. ! Security and High-Security Zones to be alarmed, (GSP mandatory requirement). A.3.11 LOCATION OF EXIT STAIRWELLS Minimum Safeguards Exit stairwells which form part of a means of egress will comply with the National Building Code requirements. These stairwells should not allow uncontrolled access to Operations, Security or High-Security Zones. Examples of Enhanced Safeguards ! The stairs are not to be used for pedestrian circulation between floors. ! Control lobbies, security personnel or employees are to be located at doors to exit stairs. ! To avoid circumventing any security equipment, exit doors leading from the stairwell should not be located next to external rest or parking areas. ! Ensure exterior doors leading from the stairwell can be easily observed, preferably by guards or employees. ! Stairs and toilets connecting elevator lobbies on all floors are in the Public-access Zone. A.3.12 FLOOR LOADING CAPACITY Minimum Safeguards Entire floor areas need not have sufficient loading capacity to accommodate concentrations of security containers. However, within each Operations Zone, on each floor, the floor loading capacity should support a minimum of two approved security containers near each structural column, or in another specified area of the Operations Zone.
Examples of Enhanced Safeguards ! Reinforced structure within the area of the facility designated for secure storage. Technical Security Branch
27
Revised: January 2000
Royal Canadian Mounted Police
!
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
A future requirement that a minimum of one secure room and/or vault be built within the institution's area, providing one-hour fire-retardant material and/or force attack protection, from the floor to the underside of the structure above.
A.3.13 WINDOWS Minimum Safeguards As per architectural requirements. Examples of Enhanced Safeguards ! Planning data relative to windows must be detailed. Specific requirements such as areas that should not have windows for security reasons, for example, sensitive discussion areas where top secret conversations regularly occur. ! No windows within 3 m of grade bordering on Security or High-Security Zones. ! Special glazing such as bullet-resistant or vandal-resistant identified for specific areas. ! Acoustical windows for conference rooms. ! No windows permitted for special functional areas. ! Special curtains to contain projectiles from explosions. ! Apply protective coatings to glass, or use plastic laminates to replace glass.
A.4
BUILDING LAYOUT
A.4.1
COMMON SPACES Minimum Safeguards All common functions within the building, especially on the ground/first floor should be located in centralized areas. These areas should be part of an Operations Zone and could include, for example, lunch/coffee rooms, washrooms and general photocopy rooms. Common areas for visitors such as washrooms, interview rooms and orientation spaces should be located in the Reception Zone. The intent is to reduce pedestrian movement into more restricted zones, and to eliminate reasons for persons not working in the restricted zones to enter legitimately. Examples of Enhanced Safeguards ! Locate employee service areas within a restricted zone where access is not granted to visitors to the institution. ! Interview rooms with direct access from Reception Zone under control of personnel from the Operations Zone. ! Photocopy rooms are located in and for the exclusive use of Security and High-Security Zone personnel.
A.4.2
WASHROOMS Minimum Safeguards Access to washrooms is provided directly from a Public-Access or Reception Zone. To minimize damage or their use for other than their intended purpose, locate the washrooms where there is unobtrusive visual observation of the entry by a receptionist or guard.
Technical Security Branch
28
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Examples of Enhanced Safeguards ! Separate staff and public washrooms. ! Vandal-resistant light fixtures and wall surfaces in public washrooms. ! No closets, utility spaces or access hatches inside washrooms. ! Access control to washroom facilities. ! In locations where staff use same washrooms as members of the public, wing walls of toilet stalls extend close to floor and ceiling to prevent attack or observation. A.4.3
UTILITY SPACES Minimum Safeguards Use standard building locks on electrical, mechanical and telephone rooms. Examples of Enhanced Safeguards ! Security locks on electrical, mechanical and telephone rooms. ! Intrusion alarms in electrical, mechanical and telephone rooms. ! Security screw fastening of access doors to ceilings and mechanical shafts. ! Wiring related to secure circuits in conduit (not in open cable trays). ! Door closers with automatic locking.
A.4.4
MAILROOMS Minimum Safeguards All mailrooms should be managed as an Operations Zone. Internal mail delivery should provide proper protection to the mail if left outside the mailroom (i.e. on a delivery cart). Examples of Enhanced Safeguards ! Manage as a Security zone ! Provide an intrusion alarm and/or access control equipment in the mailroom. ! Install a fluoroscope to x-ray the mail upon entry into the facility. ! Special room for incoming mail delivery, keyed off the master. The same would apply for parcel delivery. Routes to these spaces from the exterior is either directly to the outside, or under visual control of an attended guard station whenever delivery is permitted. ! Provide blow-out panels.
A.4.5
FOOD SERVICES Minimum Safeguards Food services should be located on a lower floor or on the ground floor. All storage areas containing food should be lockable. Access to the food preparation area should be controlled so patrons cannot enter this area. There should be a physical separation between the food services and government-occupied space. Examples of Enhanced Safeguards ! Provide a hold-up intrusion alarm. ! Provide a money chest to secure cash receipts. ! Separate access to food services. ! Separate public/employee and VIP dining rooms.
A.4.6
LOADING DOCKS Minimum Safeguards Shipping and receiving areas may be located within the same loading dock area. Ensure that
Technical Security Branch
29
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
the overhead doors are properly secured with padlocks or cane bolts accessed only from the inside. Doors should be heavy duty sectional or vertical lift doors, with a steel skin on both the inside and outside of the door. Secure storage areas within the loading dock area. Examples of Enhanced Safeguards ! Provide an enclosed truck bay. ! Provide an interlock which prevents the exterior door to the truck bay from opening at the same time as the door from the truck bay to the loading dock is open. ! Physically separate the shipping and receiving areas. A.4.7
TELECOM AND DATA LINKS WITHIN THE FACILITY Minimum Safeguards Refer to the GSP - chapter 2-3, Information Technology Security Standard and the Technical Security Standard for Information Technology (TSSIT) - RCMP - Aug. 1997. Examples of Enhanced Safeguards The need to implement protective measures within the facility should be justified by the safeguarding strategy. Requirements such as emergency power for an intercom or internal telephone must be identified. If the threat is present, the need for routing of conduit to carry communications within the facility should be identified. ! Emergency power for on-site intercom or telephone. ! All data lines located in Public-Access or Reception Zones to be encased in conduit which is visible in its entire length. ! All telecom lines between High-Security Zones pass through Security or Operations Zones in conduit which is visible through its entire length. ! Locate remote data terminals in an area controlled by the institution. ! Use electronic encryption techniques. ! Separate data and communication links with specialized grounding networks.
A.4.8
CONFERENCE AND BOARD ROOMS Minimum Safeguards In the context of this document, conference and board rooms are intended for the use of the institution and visitors with a legitimate reason for being there. These rooms should therefore be located in an Operations Zone as a minimum. The rooms should be constructed of physical walls to the suspended or false ceiling. The room should have one door which is lockable using commercial grade hardware. Examples of Enhanced Safeguards ! Provide additional sound attenuation if sensitive or classified information is discussed. (See the document New Construction to Provide Speech Privacy in the SESI Reference folder.) ! Ensure public address equipment is not installed in the room. ! Ensure windows are not part of the perimeter walls of this room. ! Do not locate this room adjacent to a Reception Zone or to a main circulation route in an Operations Zone.
A.4.9
DAY-CARE CENTRES Minimum Safeguards Day-care centres present a special problem. Two issues must be addressed. First, how the daycare centre affects the security of the facility, and second, the safeguards necessary to protect the day-care centre.
Technical Security Branch
30
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Day-care centres should have their own entrance with no requirement to enter the departmental space. Anyone entering the government building from the day-care centre should pass through building security. It is paramount that a day-care centre be safe for children and meet all the necessary building codes. Examples of Enhanced Safeguards ! Locate the day-care centre away from the facility or completely off the site. ! Provide only one entry point into the day-care centre which can be easily controlled. A.4.10 SPECIAL PURPOSE SPACE This document concerns itself with building attributes generally associated with general purpose office buildings (GPOB). Many spaces which will be unique to an institution's facility are not outlined in this document. The onus is on the institution to ensure that minimum and any enhanced safeguards for these spaces are part of this security brief. These spaces might include medical facilities, laboratories, classrooms, workshops and theatres.
A.5
BUILDING - SPECIAL REQUIREMENTS
A.5.1
ELECTRONIC ACCESS CONTROL Minimum Safeguards The safeguarding strategy will determine the need for electronic access control measures and the necessary technical sophistication of the equipment. Generally, mechanical access control equipment is considered to be more of a physical deterrent than electronic access control equipment. The security value of mechanical safeguards lies in their ability to physically control access. Electronic access control safeguards provide accurate records (auditing) of visitor and employee movements throughout a facility. This security measure can be combined with electronic intrusion detection and closed circuit television to create a convenient, reliable and accurate component of the detection element in a physical security subsystem. If an electronic access control system is to be installed, refer to RCMP standards EACDI-P (1995) and EACCI-P (1997) for the minimum requirements. Examples of Enhanced Safeguards ! Electronic access control. ! Anti-passback features which record entry and exit. ! Positive identification through biometric or other identifiers unique to the individual. ! Personal Identification Numbers (PINs). ! Special functions such as auditing of access by individuals, use of a special portal or date/time restrictions. ! Fail secure equipment.
A.5.2
ELECTRONIC INTRUSION DETECTION Minimum Safeguards The safeguarding strategy will determine the need for electronic intrusion detection measures and the necessary technical sophistication of the equipment. Generally, electronic intrusion detection equipment, when properly installed and serviced, accurately monitors for unauthorized access to a facility. This security measure can be combined with electronic access control and closed circuit television to create a convenient, reliable and accurate component of the detection element in a physical security subsystem. If an electronic intrusion detection system is to be installed, refer to RCMP standards EIDDIP(1995) and EIDCI-P (1997) for the minimum requirements.
Technical Security Branch
31
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Examples of Enhanced Safeguards ! Perimeter detection of the facility. ! Perimeter detection of the site. ! Volumetric motion detection of a facility. ! Computer controlled reporting/annunciating. ! Perimeter detection of special function groups. ! Line supervision A.5.3
CLOSED CIRCUIT TELEVISION / VIDEO EQUIPMENT Minimum Safeguards The safeguarding strategy will determine the need for closed circuit television/video equipment and the necessary technical sophistication of the equipment. Generally, closed circuit television/video equipment, when properly installed and serviced, can accurately be used to assess valid and nuisance alarms, and provide random surveillance of a problem location. It cannot assess a false alarm. This security measure can be combined with electronic access control and electronic intrusion detection to create a convenient, reliable and accurate component of the detection element in a physical security subsystem. Examples of Enhanced Safeguards ! Low light, infra red or colour cameras. ! Pan, zoom and tilt controls. ! Computer controlled pan, zoom and tilt control. ! Video recording. ! Video motion detection. ! Video capture.
A.5.4
SECURITY CONTROL CENTRE Minimum Safeguards The safeguarding strategy will determine the need for a security control centre and the necessary technical sophistication of the equipment. Generally, a security control centre is used as a base of operations for assessing the validity of electronic detection equipment alarms and initiating the response element in a physical security subsystem. Examples of Enhanced Safeguards (See the SESI Security Control Centre folder) ! Locate a security control centre in a well-protected part of the facility having no windows. ! Access to this room is controlled. ! Separate security equipment room. ! Separate washroom facility attached to the security control centre. ! Electronic access control on entry to establish audit trail. ! Extra air conditioning to handle the heat from the electronic equipment. ! Variable light level controls.
A.5.5
SECURE ROOMS Minimum Safeguards Secure rooms A, B, C and D (see the SESI Secure Rooms folder) are work spaces which are approved for the open shelf storage of classified and designated information and assets. This storage method precludes the need to use a large number of security containers, which is usually more expensive and inconvenient than the single room requirement.
Technical Security Branch
32
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Examples of Enhanced Safeguards ! Electronic intrusion detection for Secure Room D. ! Fire resistance ratings. ! Locating the Secure Room within a Security Zone or a High-Security Zone. ! Operating and managing a Secure Room as a Security or High-Security Zone. A.5.6
VAULTS Minimum Safeguards The safeguarding strategy will determine the need for a vault and the necessary technical sophistication of the safeguards. Generally, a vault is used to store large quantities of classified and designated information and valuables not requiring regular processing. Traditional vaults usually need special structural requirements to be designed into the building. Often, modular vaults are used because they are lighter in weight and therefore, require less structural reinforcement than the traditional vault. Another advantage of the modular vault over that of an in-situ vault is its potential to move with the institution. Vaults should be located in areas where access is controlled, with no circulation routes. Expert advice should be sought from the lead agency as to specific construction details when considering this type of room. (See the SESI Vault folder.) Examples of Enhanced Safeguards ! Suitable construction would use heavy-duty commercial door assemblies with appropriate locks and hinges. Walls would be of traditional materials used in fit-up construction (i.e. gypsum board and plywood). ! Traditional vault door assemblies with combination lock and appropriate hinges. ! Located away from any exterior walls. ! Special air supply and exhaust, directly from and to the outside, with air ducts, heat exchangers and fans located entirely within Operations or restricted zones. ! Continuous walls extend from structural floor to underside of structural floor above. ! Walls are of masonry or concrete.
A.5.7
SENSITIVE DISCUSSION AREAS Minimum Safeguards The safeguarding strategy will determine the need for a sensitive discussion area (SDA) and the necessary technical sophistication of the safeguards. Sensitive discussion areas use specialized construction, are expensive to construct, and should be used very sparingly. Expert advice should be sought from the lead agency as to specific construction details when considering this type of room. They should be managed similarly to other areas that process and handle classified or highly sensitive designated information. (See the SESI Sensitive Discussion Area folder) Examples of Enhanced Safeguards ! Specify as a speech private sensitive discussion area ! Specify as a speech secure sensitive discussion area ! Specify as a speech and counter technical secure sensitive discussion area. ! Electronic shielding
A.5.8
COMPUTER ROOMS Minimum Safeguards Refer to the GSP - chapter 2-3, Information Technology Security Standard.
Technical Security Branch
33
Revised: January 2000
Royal Canadian Mounted Police
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
Computer rooms require security advice for existing facilities from the Security Evaluation and Inspection Team (SEIT) of the RCMP as directed by the GSP. Minimum standards are identified in the publication Technical Security Standard for Information Technology -Aug. 1997 (TSSIT), published by the RCMP's Technical Security Branch. Examples of Enhanced Safeguards ! UPS equipment. ! Access control. ! Access logs. ! Two person access rule. ! Operated and managed as a Security or High-Security Zone. A.5.9
TELECOM AND DATA LINKS WITHIN THE FACILITY Minimum Safeguards Refer to the GSP - chapter 2-3, Information Technology Security Standard and the RCMP Technical Security Standard for Information Technology (TSSIT) - Aug. 1997. The need to implement protective measures within the facility such as emergency power for the intercom or internal telephone and the routing of conduit to carry communications should be determined by the safeguarding strategy. Examples of Enhanced Safeguards ! Emergency power for on-site intercom or telephone. ! All data lines outside of Operations Zones or other restricted zones are only in conduit which is visible in its entire length. ! All telecom lines between High-Security Zones pass only through Security or Operations Zones and are in conduit which is visible through its entire length. ! Locate data gathering panels in an area controlled by the institution. ! Use electronic encryption techniques. ! Separate data and communication links with proper grounding networks.
A.6
FACILITY MANAGEMENT
A.6.1
LEASING CONTRACT Minimum Safeguards The standard lease for build-to-lease facilities should allow the tenant to install electronic intrusion detection and access control equipment as necessary, to develop physical security for the facility. The tenant should also be allowed to add locks to doors, to re-key their leased areas and to restrict owner access to the facility to specific hours or by appointment. Examples of Enhanced Safeguards ! Leasing provisions to allow use of video cameras, providing a minimum of 50 lux reflected light. Consultation with a lighting engineer when using colour video cameras for correct light sources and the appropriate colour rendition index. ! Installation of special security features such as vandal or bullet-resistant glazing, acoustical doors and windows and vandal-resistant light fixtures. ! In a leasing agreement with the landlord, specify that maintenance and cleaning be performed by institution-controlled staff. ! Leasing provisions allow installation of security locks on utility closets and mechanical rooms. ! List neighbouring activities or groups that would be unacceptable.
Technical Security Branch
34
Revised: January 2000
Royal Canadian Mounted Police
A.6.2
Gendarmerie royale du Canada
Guide to the Preparation of Physical Security Briefs (TSB/SG-25)
CONTROL OF ACCESS TO PREMISES WITHIN A BUILDING Minimum Safeguards In single-tenant buildings, the tenant department is responsible for providing any required guard services. Tenant-occupied facilities include a Reception Zone within the institution's premises capable of being attended. Personnel who control the Reception Zone are provided by the institution. All entry points to the tenant facility should have locking capabilities using a high quality locking device. During restricted access and limited access hours, entry to the building is through a locked door. Entry to the institution's facility is through a locked door. Keys should only be issued to authorized personnel. Examples of Enhanced Safeguards ! Manned entry control station during limited access hours or manned 24 hours. ! Security personnel to screen all employees and visitors before entering the restricted zones of the facility. ! At the main floor lobby, all elevators open within view of the control station. ! Key control of elevator during restricted and secure access hours. ! Provide electronic devices (card access or keypad) with electric strikes or electromagnetic devices to control access.
A.6.3
MAINTENANCE SERVICES Minimum Safeguards Use custodian's regular maintenance staff in Reception and restricted zones. All maintenance staff should meet the minimum personnel screening requirements. Examples of Enhanced Safeguards ! In restricted areas, maintenance staff should be monitored and controlled by institution or security staff. ! Where required in the institution's security brief, maintenance staff will meet a specified level of personnel screening above minimum, (reliability status or security clearance) and be identified and admitted to restricted zones by the institution's personnel or security control staff. ! All routine maintenance should be during public access hours. ! Provide an escort for all non-government maintenance personnel. ! In restricted zones, maintenance staff should be monitored and controlled by institution or security staff.
A.6.4
CLEANING SERVICES Minimum Safeguards After hours cleaning of premises by cleaning crews under
