Unit Objectives
Explain building security design issues to a building owner for consideration 
prior to a renovation or new construction.
Explain the identification process to arrive at the high risk asset Ð threat/hazard 
pairs.
Justify the recommended mitigation measures, explaining the benefits in 
reducing the risk for the high risk situations of interest.
Hazardville Information Company
Company
_ Functions
_ Infrastructure
Threats/Hazards
_ Design Basis 
Threat
_ Level of Protection
Vulnerabilities
_ Impact
_ Mitigation
Report
Hazardville Information Company
IT services and support
_ 130 employees
Two story building in small corporate office park
Located in suburban area of major metropolitan city
"Neighbors" include:
_ Offices
_ Industry
_ Road, Rail, Air traffic

HIC 5-Mile Building Radius
HIC Local Imagery
HIC Site Imagery
HIC HazMat Sites
HIC Emergency Response
HIC Functional Layout
HIC Car Bomb Blast Effects
HIC Truck Bomb Blast Effects
HIC Truck Bomb Blast Effects
HIC Building Data
HIC Mechanical Systems
HIC Mechanical Systems
HIC Mechanical Systems
HIC Electrical Systems
HIC Mechanical and Electrical Room
HIC Physical Security
HIC IT
HIC Emergency Response
Threats/Hazards
Design Basis Threat
Explosive Blast:  Car Bomb 250 lb TNT equivalent. Truck Bomb 5,000 lb TNT equivalent 
(Murrah Federal Building class weapon)
Chemical: Large quantity gasoline spill and toxic plume from the adjacent tank farm, 
small quantity (tanker truck and rail car size) spills of HazMat materials (chlorine)
Biological:  Anthrax delivered by mail or in packages, smallpox distributed by spray 
mechanism mounted on truck or aircraft in metropolitan area
Radiological:  Small "dirty" Bomb detonation within the 10-mile radius of the HIC building
Level of Protection
GSA Interagency Security Criteria
Level II Building Ð between 11-150 employees; 2,500 to 80,000 sq ft
_ Perimeter Security
_ Entry Security
_ Interior Security
_ Administrative Procedures
_ Blast/Setback Standards


Levels of Protection
Levels of Protection
Level of Protection
Level of Protection (continued)
Unit XI Case Study Activity
Finalization and Presentation of Group Results
Purpose
_ Groups finalize their assessments
_ Decide on high priority risk concerns
_ Determine appropriate mitigation measures
_ Present findings to class
Requirements
Based on findings from previous 10 activities, complete the worksheet table
Prepare to present conclusions and justify decisions to class in a 5- to 7-
minute presentation
Vulnerability/Mitigation
Car Bomb Blast/Site
Protect front entrance from car bomb blast Ð 82 foot        stand-off
_ Use planters, plinth walls, landscaping
_ FRF film on windows or replace with laminated glass
_ Consider closing in overhang area
Truck Bomb/Site
Protect rear parking area from truck bomb
_ Use chain link gate, vehicle pop barriers, pre-screening away from 
building
Vulnerability/Mitigation
Chemical/Mechanical-HVAC
Install emergency shut down switch, protect outside air intake
Evaluate carbon filters for chlorine type spills
Upgrade filters to MERV 11 to remove gasoline plume and other particulates
Biological/Mechanical-HVAC
Evaluate UVGI
Evaluate a standalone mailroom on separate HVAC zone
Radiological/Site
Install emergency shut down switch on HVAC
Upgrade filters to MERV 11 to remove radioactive particulates
Vulnerability/Mitigation
Other Significant Vulnerabilities/Mitigations 
Blast/Site
Separate front lobby from interior office space with security door if primary mail 
entry point is the lobby area
Distribute internal functions for redundancy
Evaluate other utility connections/distribution capability for redundant feed to the 
building
Blast/Structural and Building
Strengthen overhead anchorage elements
_ Heaters
Vulnerability/Mitigation
Blast or Armed Attack/Mechanical
Fire sprinklers
_ Install enunciator panel and go to zones, dual stage in data center, clean agents 
versus water
Chill water
_ Install backup piping to primary air handling units
Install exhaust fan in UPS room (lead acid batteries)
Place bollards around or relocate natural gas meters
Blast or Armed Attack/Electrical
Primary Bus
_ Separate Computer Center Bus from Support Bus
Place bollards or fencing around transformers
Increase size of generator fuel tank
Vulnerability/Mitigation
Cyber Attack and Blast/IT Systems
Store backup tapes/data at least 10 miles away
Identify alternate telecom carrier circuits and availability
Conduct full extended load test of emergency power/UPS system
Blast and Armed Attack/Physical Security
Raise height of rear perimeter fencing
Evaluate installing a small Security Operations Center and increase 
monitoring/awareness of exterior
Upgrade CCTV system to digital and DVR and install additional cameras to 
view front parking, lobby, and loading dock


Vulnerability/Mitigation
Blast and CBR/Emergency Operations/Disaster Recovery
Install mass notification system
Post shelter and evacuation procedures
Identify rally point at site away from building
Use computer data center for shelter-in-place
Acquire personal protective evacuation hoods