Physical Security Assessment

Service Overview

Physical security is an integral part of any business information security programme. We have a team of experts who provide security consultancy with a focus on the critical aspects of physical security as it relates to your business.

Physical Security Assessment Business Benefit

Our physical security assessment is performed within the context of your overall business risk management strategy. Our assessment adds value by delivering more than a list of recommendations by analysing the combined factors of assets, threat and likelihood. We will prioritise risk areas and make recommendations to align physical security with your overall risk management strategy. This holistic approach enables your business to focus physical security controls on the important assets and implement the right level of security.

Methodology

We will perform onsite physical security reviews of facilities and operations. In the first phase our consultants will gain an understanding of the business and its resources that needs to be protected from threats. The physical threat environment will be analysed through interviewing relevant business roles, reviewing of existing business practices, local policies and procedures. With this understanding, we will move into the assessment phase and review physical security controls and related areas, such as:

Facilities

• Entry points, public areas, meeting rooms, secure areas and use of break areas
• Access control and monitoring devices
• Security guards
• Control and accountability
• Use of equipment
• Security procedure compliance
• Awareness

Technology

• Storage devices and Backup media
• Portable computing devices
• Access points, e.g. wireless, modems and physical access points
• Sensitive Information and Data
• Control, Storage and Destruction

Our consultants have a strong understanding of various physical security standards and methodologies covering TIA-942, BS7984:2008, BS3621:2007 amongst many others. 

Deliverables

We will deliver a formally documented physical security risk assessment report detailing risk areas and recommendations on how to mitigate security risks to an acceptable level.  We can present these findings to key stakeholders and where required work with your organisation to implement suitable controls.

Monitoring Devices

Network video products can be used to remotely and cost-effectively monitor and protect people, places, and assets; secure sites with the help of alarm information and video motion detection; provide remote product demonstrations or consultations from anywhere in the world; or broadcast live images on Web sites for promotion purposes.

Closed circuit television (CCTV)

In its simplest form a CCTV system consists of a television camera joined by a transmission link such as a cable to a monitor sited in the guard room or central control point. More complex systems use several cameras and monitors or a single monitor with a switching system to display camera pictures in sequence. Additional facilities such as recorders, automatic switching in response to an alarm signal may be used.

CCTV should form part of the total security system and should not be used on its own. It cannot replace security staff, although it may permit a reduction in their number or their redeployment to other security activities.

Using CCTV can help clarify whether a security alert is real and is often vital in post-incident investigations, but only if the images are good enough to identify what happened and be used in court.

External lighting will help security staff and improve the capabilities of CCTV systems if it is carefully designed and used. Effective CCTV systems may help to deter a terrorist attack or even identify planning activity. Good quality images can provide crucial evidence in court.

If you contract in staff who operate CCTV equipment, they must be licensed by the Security Industry Authority (SIA). This applies if the CCTV equipment is deployed into fixed positions or has a pan, tilt and zoom capability and where operators:

• proactively monitor the activities of members of the public whether they are in public areas or on private property
• use cameras to focus on the activities of particular people either by controlling or directing cameras to an individual's activities
• use cameras to look out for particular individuals
• use recorded CCTV images to identify individuals or to investigate their activities.

Checklist

• do you have your cameras regularly maintained?
• do the cameras cover the entrances and exits to your building?
• do you have cameras covering critical areas in your business, such as server rooms or cash offices?
• do you store the images in accordance with the evidential needs of the police?
• could you positively identify an individual from the recorded images on your CCTV system?