PHYSICAL AND PROCEDURAL SECURITY CHECKLIST FOR GLOBAL, REGIONAL AND COUNTRY HEADQUARTERS; TECHNOLOGY AND R&D CENTERS Application: Minimum physical and procedural security standards for global, regional and country headquarters; technology and R&D centers have been established. This checklist provides a useful tool for local management in measuring facility compliance with these standards. Please review your facility’s level of compliance to the following standards, and identify its current status. If the partial compliance area is checked, please explain what measures are currently in place. If the non-compliance area is checked, please provide information on plans to implement measures to achieve compliance. ---------------------------------------------------------------------------------------------------------A. All facilities: 1. Either a receptionist or guard must be present at the employee/contractor/visitor access point, or an electronic access control system employed to control office access. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 2. In high crime areas pedestrian entry points must remain secured until the guest has been identified and his/her appointment confirmed. Full compliance ___ Partial compliance ___ non-compliance ___ Comments: 3. Exterior lighting must be sufficient to illuminate foot paths and entry points commonly used by employees, contractors and visitors, and to eliminate shadows where intruders or malefactors could hide. Parking areas must be similarly illuminated to ensure the safety of employees, contractors and guests. Full compliance___ Comments: Partial compliance ___ non-compliance ___ 4. Any otherwise unprotected window, door or building opening up to 15 feet from ground level, or if accessible from the ground using existing hand or foot holds, must be barred or alarmed. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 5. At facilities with 30 or more employees and long term contractors, ID badges must be issued and worn by employees/contractors whenever they are on company property. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 6. Access to sensitive areas within the facility must be controlled and limited to those having a need to enter. This can be accomplished either by installing locks on office or server room doors and controlling keys, or installing card readers programmed to restrict individual access to authorized staff. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 7. A policy that ensures that proprietary and sensitive information including trade secrets, pre-merger and acquisition documents, pre-alliance information, corporate risk assessments, R&D technology, business plans, production capacity, cost data, customer lists, manufacturing data, sales data, salary and pay position information and employee medical records is secured when not under direct control by the owner of the information must be in place. A clean desk policy; and lockable desks, file cabinets and office doors are applicable tools. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 8. A strict visitor access control policy must be in place that requires visitors be logged in, and escorted or otherwise kept under observation whenever they are within a work or storage area. At facilities with 30 or more employees and long term contractors, nonemployees and non-contractors will be issued visitor ID badges and instructed to prominently display them. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 9. A security awareness program that encourages employees to challenge anyone found breaching security policies, and to take personal responsibility for safety and security issues must be put in place. Full compliance ___ partial compliance ___ non-compliance ___ Comments: B. Facilities where SAC is the sole or primary occupant and the property line extends beyond the buildings perimeter: 10. A perimeter fence or wall at least 2 meters high, with limited number of gates or openings determined by operational need, must be present. An acceptable alternative to a fence or wall is the deployment of a CCTV system which features night or low light vision, and is actively monitored by a security guard on site or at an off site security monitoring station. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 11. The fence or wall does not have to encompass the entire property but must form a perimeter at least 15 feet from the building or at the property boundary if it extends less than 15 feet from the building perimeter. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 12. Consideration should be given to incorporating several strands of barbed or razor wire at the top of the fence or wall if warranted by the local threat and allowed by local ordinance. Full compliance ___ Comments: partial compliance ___ non-compliance ___ 13. The fence or wall must be in good repair and free of features such as hand or footholds that could aide an intruder in breaching the barrier. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 14. All trees and vegetation must be cut back 10 feet on either side of the fence or wall. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 15. Vehicle entry points into the facility parking and loading dock areas must be kept closed and locked unless a guard is present, or the entry point is under observation by CCTV camera. If locked, employee entry can be by way of key access, electronic key pad or key card. Delivery, customer and visitor access should be restricted. Full compliance ___ partial compliance ___ non-compliance ___ Comments: 16. When local threat conditions warrant, either an intrusion alarm system that encompasses the buildings perimeter and is monitored by on site security personnel or from off site monitoring station, or exterior guard patrols or posts is necessary. Full compliance ___ Comments: partial compliance ___ non-compliance ___