08/27/2002

Chart Your Course

Twelve Steps to Reduce Your Security Risk

 

In dealing with security for a large building or campus, it is advisable to enlist a trained security professional (e.g., a Certified Protection Professional) to work with a team of individuals from the facility to develop a security risk assessment and action plan. The team should include the on-site security manager and representatives of the stakeholder organizations at the facility, including operations, human resources, engineering, information technology, finance, public relations, and executive management. With the security professional acting as the facilitator, the team should use the following 12-step security risk assessment process, which is an adaptation of a method used extensively in the military and civilian government agencies to address security risks:

  1. Identify and quantify assets. Assets can take the form of facilities, personnel, property, or information. Name the specific assets to be protected and estimate their value in dollars. While it is obviously difficult to quantify a human life, actuaries generally set insurance values at about $2.5 million per person. The loss of an asset due to a malevolent act represents a consequence. For each type of asset identified, assign a consequence rating of “not serious,” “serious,” “very serious,” or “catastrophic,” depending on the total dollar value of the loss of the listed assets. Remember that the loss of an asset might be mitigated by the existence of a redundant capability.
  2. Identify the threat events and existing protective measures. These events would address the assets identified in the first step. Because most facilities already have a baseline of security, identify the security measures already in place that contribute to protection against those threat events.
  3. Evaluate the likelihood of occurrence. Rank the likelihood of the threat events identified as “highly probable,” “probable,” or “improbable,” (i.e., the likelihood of a computer theft at the average commercial office building is highly probable, but an attack by a vehicle bomb might be rated improbable).
  4. Identify the risk level of each threat event. The “Consequence vs. Likelihood” chart (below) will help determine the risk rating for each asset/threat combination. The risk rating would run from a low of 4-D, to a high of 1-A. Note the three bands of risk interpretation in the second graphic. You may wish to modify the interpretations of the three risk bands to better reflect your institution’s risk policies.
  5. List the threat events in descending order by risk. This will prioritize the threat events you are to address.
  6. Identify measures that could mitigate the threat events. Identify security enhancements that would reduce the likelihood of the threat event occurring, such as increased access control, new surveillance equipment, or new security procedures. Also identify measures that could lessen the consequences of an event, such as an alternate office space or backup equipment.
  7. Reassess the risks, assuming that each identified upgrade is implemented. Now you can see how effective the security improvements and consequence-reduction measures are.
  8. List the proposed upgrades in descending order. This will prioritize the upgrades in which you are most interested.
  9. Gather information on the costs of upgrades. Your security professional and your facility engineering staff can assist in this task. Be sure to take into account life-cycle costs.
  10. Perform a cost-benefit analysis. Use a simple cost-to-benefit ratio where costs are stated in dollars, and benefits are ranked on a numeric scale of 1-5, or 1-10.
  11. Rank the upgrades by cost benefit level. This will prioritize the upgrades you will pursue, given the availability of funds.
  12. Compare the prioritized upgrades against the available budget, and proceed with the highest rated upgrades until the budget is exhausted.

The process is now complete, and you have developed a sound, defensible plan for addressing your security concerns, while achieving the maximum return on your investment.

Tom Allen is vice president at Milwaukee, WI-based Johnson Controls Security Systems LLC (www.johnsoncontrols.com), and located in the Gaithersburg, MD, office.

To view the Consequence vs. Likelihood table, courtesy of Johnson Controls Security Systems LLC, click here.

 


Visit our website today to learn about the design flexibility of a Morton building and the endless possibilities of partnering with our designBUILD team.


Wood construction is both cost and energy efficient. Check out Morton Buildings and our designBUILD team online today to discover all the benefits of post-frame construction.


When choosing a metal-clad building for your next construction project, consider Morton Buildings, Inc., and their designBUILD team, we’ll make your dream a reality.

We Can Help You Reduce Energy by 30%

Our mission is to help our customers manage their buildings' energy costs, improve reliability, and enhance performance while having a positive impact on the environment.
CLICK HERE to find out how.

 

Add highly responsive multi-zone comfort to any building project, in any climate. Our CITY MULTI H2i R2- and Y-Series VRF systems give you flexibility to fit the needs of any building. Enjoy 100% heating capacity at 0°F outdoor ambient, and 85% heating capacity at -13°F outdoor ambient.  For more information, log on to www.mitsubishipro.com


Tennant Company is a recognized leader in designing, manufacturing and marketing solutions that help create a cleaner, safer, healthier world. With thousands of satisfied customers already using award winning ec-H2O technology, why not see what you're missing? Test ec-H2O on your soils in your facility. Get a free demo.


Tennant Company is a recognized leader in designing, manufacturing and marketing solutions that help create a cleaner, safer, healthier world. With thousands of satisfied customers already using award winning ec-H2O technology, why not see what you're missing? Test ec-H2O on your soils in your facility. Get a free demo.

 

Replace core drilling with Connectrac In-Carpet and On-Floor Wireways, the proven connectivity solution in open interior spaces of all kinds. These elegant low-profile wireways are great for AV / telecom connectivity wherever it’s needed.

 


Visit our website today to learn about the design flexibility of a Morton building and the endless possibilities of partnering with our designBUILD team.


Wood construction is both cost and energy efficient. Check out Morton Buildings and our designBUILD team online today to discover all the benefits of post-frame construction.


When choosing a metal-clad building for your next construction project, consider Morton Buildings, Inc., and their designBUILD team, we’ll make your dream a reality.

We Can Help You Reduce Energy by 30%

Our mission is to help our customers manage their buildings' energy costs, improve reliability, and enhance performance while having a positive impact on the environment.
CLICK HERE to find out how.

 

Add highly responsive multi-zone comfort to any building project, in any climate. Our CITY MULTI H2i R2- and Y-Series VRF systems give you flexibility to fit the needs of any building. Enjoy 100% heating capacity at 0°F outdoor ambient, and 85% heating capacity at -13°F outdoor ambient.  For more information, log on to www.mitsubishipro.com


Tennant Company is a recognized leader in designing, manufacturing and marketing solutions that help create a cleaner, safer, healthier world. With thousands of satisfied customers already using award winning ec-H2O technology, why not see what you're missing? Test ec-H2O on your soils in your facility. Get a free demo.


Tennant Company is a recognized leader in designing, manufacturing and marketing solutions that help create a cleaner, safer, healthier world. With thousands of satisfied customers already using award winning ec-H2O technology, why not see what you're missing? Test ec-H2O on your soils in your facility. Get a free demo.

 

Replace core drilling with Connectrac In-Carpet and On-Floor Wireways, the proven connectivity solution in open interior spaces of all kinds. These elegant low-profile wireways are great for AV / telecom connectivity wherever it’s needed.

 


 
comments powered by Disqus

Sponsored Links