physical and procedural security checklist

advertisement
PHYSICAL AND PROCEDURAL SECURITY CHECKLIST FOR
GLOBAL, REGIONAL AND COUNTRY HEADQUARTERS; TECHNOLOGY AND
R&D CENTERS
Application: Minimum physical and procedural security standards for global, regional
and country headquarters; technology and R&D centers have been established. This
checklist provides a useful tool for local management in measuring facility compliance
with these standards.
Please review your facility’s level of compliance to the following standards, and identify
its current status. If the partial compliance area is checked, please explain what measures
are currently in place. If the non-compliance area is checked, please provide information
on plans to implement measures to achieve compliance.
---------------------------------------------------------------------------------------------------------A. All facilities:
1. Either a receptionist or guard must be present at the employee/contractor/visitor access
point, or an electronic access control system employed to control office access.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
2. In high crime areas pedestrian entry points must remain secured until the guest has
been identified and his/her appointment confirmed.
Full compliance ___
Partial compliance ___
non-compliance ___
Comments:
3. Exterior lighting must be sufficient to illuminate foot paths and entry points
commonly used by employees, contractors and visitors, and to eliminate shadows where
intruders or malefactors could hide. Parking areas must be similarly illuminated to
ensure the safety of employees, contractors and guests.
Full compliance___
Comments:
Partial compliance ___
non-compliance ___
4. Any otherwise unprotected window, door or building opening up to 15 feet from
ground level, or if accessible from the ground using existing hand or foot holds, must be
barred or alarmed.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
5. At facilities with 30 or more employees and long term contractors, ID badges must be
issued and worn by employees/contractors whenever they are on company property.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
6. Access to sensitive areas within the facility must be controlled and limited to those
having a need to enter. This can be accomplished either by installing locks on office or
server room doors and controlling keys, or installing card readers programmed to restrict
individual access to authorized staff.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
7. A policy that ensures that proprietary and sensitive information including trade
secrets, pre-merger and acquisition documents, pre-alliance information, corporate risk
assessments, R&D technology, business plans, production capacity, cost data, customer
lists, manufacturing data, sales data, salary and pay position information and employee
medical records is secured when not under direct control by the owner of the information
must be in place. A clean desk policy; and lockable desks, file cabinets and office doors
are applicable tools.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
8. A strict visitor access control policy must be in place that requires visitors be logged
in, and escorted or otherwise kept under observation whenever they are within a work or
storage area. At facilities with 30 or more employees and long term contractors, nonemployees and non-contractors will be issued visitor ID badges and instructed to
prominently display them.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
9. A security awareness program that encourages employees to challenge anyone found
breaching security policies, and to take personal responsibility for safety and security
issues must be put in place.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
B. Facilities where SAC is the sole or primary occupant and the property line extends
beyond the buildings perimeter:
10. A perimeter fence or wall at least 2 meters high, with limited number of gates or
openings determined by operational need, must be present. An acceptable alternative to a
fence or wall is the deployment of a CCTV system which features night or low light
vision, and is actively monitored by a security guard on site or at an off site security
monitoring station.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
11. The fence or wall does not have to encompass the entire property but must form a
perimeter at least 15 feet from the building or at the property boundary if it extends less
than 15 feet from the building perimeter.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
12. Consideration should be given to incorporating several strands of barbed or razor wire
at the top of the fence or wall if warranted by the local threat and allowed by local
ordinance.
Full compliance ___
Comments:
partial compliance ___
non-compliance ___
13. The fence or wall must be in good repair and free of features such as hand or
footholds that could aide an intruder in breaching the barrier.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
14. All trees and vegetation must be cut back 10 feet on either side of the fence or wall.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
15. Vehicle entry points into the facility parking and loading dock areas must be kept
closed and locked unless a guard is present, or the entry point is under observation by
CCTV camera. If locked, employee entry can be by way of key access, electronic key
pad or key card. Delivery, customer and visitor access should be restricted.
Full compliance ___
partial compliance ___
non-compliance ___
Comments:
16. When local threat conditions warrant, either an intrusion alarm system that
encompasses the buildings perimeter and is monitored by on site security personnel or
from off site monitoring station, or exterior guard patrols or posts is necessary.
Full compliance ___
Comments:
partial compliance ___
non-compliance ___
Download