Provide Security for Building Occupants and Assets

by the WBDG Safe Committee

Last updated: 05-01-2008

Overview

Graphic of the design of the new Oklahoma City Federal Building

Security measures, such as setbacks, bollards, protective glazing, and structural hardening, are incorporated into the design of the new Oklahoma City Federal Building, located north of where the former Alfred P. Murrah Federal Building once stood. (Designed by Ross Barney + Jankowski Architects and Atkins Benham)

The bombings at New York City's World Trade Center, Oklahoma City's Alfred P. Murrah Federal Office Building, and Atlanta's Centennial Park, shook the nation, and made Americans aware of the need for better ways to protect occupants, assets, and buildings from human aggressors (e.g. disgruntled employees, criminals, vandals, and terrorists).

A Department of Justice study called "Vulnerability Assessment of Federal Facilities", conducted in response to a Presidential directive and issued one day after the 19 April 1995 Oklahoma City bombing, produced recommended minimum standards for security at federal facilities. It divided federal sites into five security levels ranging from Level 1 (minimum security needs) to Level 5 (maximum). The study listed recommendations for upgrading federal building security, including 52 security standards addressing such items as parking, lighting, physical barriers, and closed circuit television monitoring.

More recently, the 11 September 2001 terrorist attacks demonstrated the country's vulnerability to an even wider range of threats and reasserted heightened public concern for the safety of workers and occupants in all Building Types. Many federal agencies responding to these concerns have adopted an overarching philosophy to provide appropriate and cost-effective protection for building occupants. That is, while it may be cost prohibitive to design a facility to a worse case scenario, decision makers should strive to make smart choices and investments that will lessen the risk of mass casualties resulting from terrorist attacks.

Some federal agencies have issued their own security design standards. The most prominent of these are the DOD Unified Facilities Criteria (UFC) UFC 4-010-01 DoD Minimum Anti-Terrorism Standards for Buildings and Interagency Security Committee (ISC) Security Design Criteria. There are currently no universal codes or standards that apply to both public and private sector buildings. However, most designers agree that security issues must be addressed in concert with other design objectives and integrated into the overall building design throughout the process to ensure a quality building with effective security. This concept is known as multi-hazard design.

Depending on the building type, acceptable levels of risk, and decisions made based on recommendations from a comprehensive threat assessment, vulnerability assessment, and risk analysis, appropriate countermeasures should be implemented to protect people, assets, and mission. Types of attack and threats to consider include:

Recommendations

Basic to realizing an effective security plan and design is the implementation of appropriate countermeasures to deter, delay, detect, and deny attacks. Oftentimes the countermeasures work on the layered defense concept or "Onion Philosophy." This concept provides for increasing levels of security from the outer areas of the site or facility towards the inner, more protected areas. Some or all of the issues outlined below need consideration for effective security design and building operations.

Unauthorized Entry (Forced and Covert)

Protecting the facility and assets from unauthorized persons is an important part of any security system. Some items to consider include:

Insider Threats

One of the most serious threats may come from persons who have authorized access to a facility. These may include disgruntled employees or persons who have gained access through normal means (e.g., contractors, support personnel, etc). To mitigate this threat some items to consider include:

Explosive Threats: Stationary and Moving Vehicle-Delivered, Mail Bombs, Package Bombs

Explosive threats tend to be the criminal and terrorist weapon of choice. Devices may include large amounts of explosives that require delivery by a vehicle. However, smaller amounts may be introduced into a facility through mail, packages, or simply hand carried in an unsecured area. Normally the best defense is to provide defended distance between the threat location and the asset to be protected. This is typically called standoff distance. If standoff is not available or is insufficient to reduce the blast forces reaching the protected asset, structural hardening may be required. If introduced early in the design process, this may be done in an efficient and cost-effective manner. If introduced late in a design, or if retrofitting an existing facility, such a measure may prove to be economically difficult to justify. Some items to consider include:

Ballistic Threats

These threats may range from random drive-by shootings to high-powered rifle attacks directed at specific targets within the facility. It is important to quantify the potential risk and to establish the appropriate level of protection. The most common ballistic protection rating systems include: Underwriters Laboratories (UL), National Institute of Justice (NIJ), H.P. White Laboratory, and ASTM International. Materials are rated based on their ability to stop specific ammunition (e.g., projectile size and velocity). Some items to consider include:

Weapons of Mass Destruction: Chemical, Biological, and Radiological (CBR)

Commonly referred to as WMD, these threats generally have a low probability of occurrence but the consequences of an attack may be extremely high. While fully protecting a facility against such threats may not be feasible with the exception of very special facilities, there are several common sense and low cost measures that can improve resistance and reduce the risk from the WMD threat. Some items to consider include:

Cyber and Information Security Threats

In today's world, business continuity and mission function rely heavily on the transmission, storage, and access to a wide range of electronic data and communication systems. Protecting these systems from attack is critical for most users ranging from individuals, businesses, and government agencies. Some items to consider include:

Development and Training on Occupant Emergency Plans

Occupant Emergency Plans should be developed for building Operations staff and occupants to be able to respond to all forms of credible attacks and threats. Clearly defined lines of communication, responsibilities, and operational procedures are all important parts of Emergency Plans. Emergency Plans are an essential element of protecting life and property from attacks and threats by preparing for and carrying out activities to prevent or minimize personal injury and physical damage. This will be accomplished by pre-emergency planning; establishing specific functions for Operational staff and occupants; training Organization personnel in appropriate functions; instructing occupants of appropriate responses to emergency situations and evacuation procedures; and conducting actual drills.

Emerging Issues

Balancing Security and Sustainability

Providing for sustainable designs that meet all facility requirements is often a challenge to the design community. With limited resources it is not always feasible to provide for the most secure facility, the most architecturally expressive design, or energy efficient building envelope. From the concept stage through the development of construction documents, it is important that all project or design stakeholders work cooperatively to ensure a balanced design. Successful designs must consider all competing design objectives.

Designing for Fire Protection and Physical Security

Care should be taken to implement physical security measures that allow Fire Protection forces access with to sites and buildings and building occupants with adequate means of emergency egress. GSA has conducted a study and developed recommendations on design strategies that achieve both secure and fire safe designs. Specifically, the issue of emergency ingress and egress through blast resistant window systems was studied. Training was developed based on this information and is available at the GSA Public Buildings Service—Building Security Technology Web site.

Photo of an integrated security system

Integrated security systems can offer more efficient access and control. (Courtesy of Integrated Security Systems, LTD)

Integrated Systems

In recent years, there has been a general trend towards integrating various stand-alone security systems, integrating systems across remote locations, and integrating security systems with other systems such as communications, and fire and emergency management. For example, CCTV, fire, and burglar alarm systems have been integrated to form the foundation for access control.

Relevant Codes and Standards

Highly complex security system design is still neither codified nor regulated, and no universal codes or standards apply to all public and private sector buildings. However, in many cases, government agencies, including the military services, and private sector organizations have developed specific security design criteria.

Mandates

Federal Guidelines

Others

Private Sector Guidelines

Major Resources

WBDG

Products and Systems

Fenestration Systems—Exterior Doors

Security Centers

Organizations and Associations

Trade Journals/Magazines

Training Courses

Others

WBDG Services Construction Criteria Base