36C25919Q0645-002.pdf

VA U.S. Department of Veterans Affairs

Facilities Management

Physical Security

Design Manual

JANUARY 2015

For VA Life-Safety Protected Facilities

U.S. DEPARTMENT OF

VETERANS AFFAIRS

PHYSICAL SECURITY

DESIGN MANUAL

FOR

LIFE-SAFETY PROTECTED

FACILITIES

JANUARY 2015

Department of Veterans Affairs Physical Security Design Manual January 2015

TABLE OF CONTENTS

1 INTRODUCTION

1.0 Purpose

1.1 Authority

1.2 VA Facilities

1.3 Introduction to Physical Security Concepts

1.4 Objectives of VA Physical Security Design

1.5 Requirements for Physical Security Subject Matter Specialists

1.6 Budgeting and Programming for Physical Security

1.7 Risk Assessment of VA Facilities

1.8 Document Distribution, Use, and Control

1.9 Administration and Enforcement

1.10 Interpretations and Exceptions

1.11 Master Planning

2 GLOSSARY & ACRONYMS

3 SITE CONSIDERATIONS

3.0 Scope, Purpose, and Goals

3.1 Standoff Distance

3.2 Perimeter Fences

3.3 Vehicle and Pedestrian Screening

3.4 Anti-ram Rated Vehicle Barriers

3.5 Parking

3.6 Site Lighting

4 BUILDING ENTRANCES & EXITS

4.0 Scope, Purpose, and Goals

4.1 Public Entrances and Lobbies

4.2 Patient Drop-offs

4.3 Building Exits and Life Safety Considerations

Life-Safety Protected Facilities Page i

5 FUNCTIONAL AREAS

5.0 Scope, Purpose, and Goals

5.1 Agent Cashier

5.2 Cache

5.3 Childcare/Development Center

5.4 Main Computer Room

5.5 Emergency Department

5.6 Emergency and/or Standby Generator Room

5.7 Energy Center/Boiler Plant

5.8 Fire Command Center

5.9 Incident Command Center

5.10 Loading Dock and Service Entrances

5.11 Mailroom

5.12 Pharmacy

5.13 Police Operations Room and Holding Room

5.14 Records Storage and Archives

5.15 Research Laboratory and Vivarium

5.16 Security Control Center

6 BUILDING ENVELOPE

6.0 Scope, Purpose, and Goals

6.1 Walls

6.2 Fenestration and Doors

6.3 Atria

6.4 Roofs

6.5 Air Intakes and Exhausts Servicing Critical Equipment

6.6 Calculation Methods

7 STRUCTURAL SYSTEM

7.0 Scope, Purpose, and Goals

7.1 Blast Resistance

7.2 Progressive Collapse

Page ii

7.3 Column Protection

7.4 Wall Protection

7.5 Anti-ram Resistance

7.6 Calculation Methods

8 UTILITIES & BUILDING SERVICES

8.0 Scope, Purpose, and Goals

8.1 Utility Entrances

8.2 Site Distribution

8.3 Energy Center

8.4 Water and Fuel Storage

9 BUILDING SYSTEMS

9.0 Scope, Purpose, and Goals

9.1 HVAC systems

9.2 Electrical Systems

9.3 Telecommunications Systems

9.4 Plumbing Systems

9.5 Fire Protection Systems

10 SECURITY SYSTEMS

10.0 Scope, Purpose, and Goals

10.1 Electronic Security Systems

10.2 Physical Access Control System

10.3 Intrusion Detection System

10.4 Video Assessment and Surveillance

10.5 Duress, Security Phones, and Intercom System

10.6 Detection and Screening Systems

11 REFERENCES

Page iii

Page iv

1 INTRODUCTION

1.0 Purpose

This Manual contains the physical security standards for improving the protection of life-safety protected facilities of the U.S. Department of Veterans Affairs (VA). Life-Safety Protected facilities are required to protect the life safety of the VA patients, staff, and visitors in case of an emergency. Although indispensable to the mission of VA, these facilities are not required to remain operational during a natural or manmade extreme event or a national emergency.

Design and construction standards are provided for the physical security of new buildings, additions, and major alterations. In addition, standards are provided to improve the physical security for existing life-safety protected facilities.

The requirements of this manual are to be coordinated with all VA design and construction requirements for the mitigation of other hazards, such as earthquake and hurricane, in order to complete a multi-hazard approach to physical security planning, design, and construction. In addition, it is intended that the requirements of this manual be coordinated with the requirements of the Life Safety Code, NFPA 101.

1.1 Authority

It has long been the policy of the United States to assure the continuity and viability of mission critical infrastructure. Executive Order 12656, issued November 18, 1988, states, “The head of each Federal department and agency shall be prepared to respond adequately to all national security emergencies.” Furthermore, the “head of each Federal department and agency shall ensure the continuity of essential functions in any national security emergency by providing for: succession to office and emergency delegation of authority in accordance with applicable law; safekeeping of essential resources, facilities, and records; and establishment of emergency operating capabilities.” The Order also requires that the “head of each Federal department and agency shall: identify facilities and resources, both government and private, essential to the national defense and national welfare, and assess their vulnerabilities and develop strategies, plans, and programs to provide for the security of such facilities and resources, and to avoid or minimize disruptions of essential services during any national security emergency.”

Public Law 107-188, Public Health Security and Bioterrorism Preparedness and Response Act of 2002 enacted June 12, 2002, requires actions to enhance the readiness of Department of Veterans Affairs medical centers to enable them to fulfill their obligations as part of the Federal response to public health emergencies. Under section 154 the law specifically requires that the “Secretary of Veterans Affairs shall take appropriate actions to enhance the readiness of Department of Veterans Affairs medical centers to protect the patients and staff of such centers from chemical or biological attack or otherwise to respond to such an attack and so as to enable such centers to fulfill their obligations as part of the Federal response to public health emergencies.”

Public Law 107-287, Department of Veterans Affairs Emergency Preparedness Act of 2002 enacted November 7, 2002, requires that the “Secretary take appropriate actions to provide for the readiness of Department medical centers to protect the patients and staff of such centers from chemical or biological attack or otherwise to respond to such an attack so as to enable such centers to fulfill their obligations as part of the Federal response to public health emergencies” and that the “Secretary take appropriate actions to provide for the security of Department medical centers and research facilities, including staff and patients at such centers and facilities.” This Act also states that the “Secretary may furnish hospital care and medical services to individuals responding to, involved in, or otherwise affected by that disaster or emergency.”

38 USC Sec. 901 gives the Secretary the authority to prescribe regulations to provide for the maintenance of law and order and the protection of persons and property on VA property.

1.2 VA Facilities

The Department of Veterans Affairs (VA) is composed of a Central Office (VACO) and three administrations, the Veterans Health Administration (VHA), the Veterans Benefits Administration (VBA), and the National Cemetery Administration (NCA). VHA manages one of the largest health care systems in the U.S. In addition to providing health care, VHA also has missions to provide training for health care professionals; to conduct medical research; to serve as a contingency backup to Department of Defense (DoD) medical services; during national emergencies, to support the National Disaster Medical System (NDMS); and provide hospital and medical services, as appropriate, to civilians during community-wide disasters.

VBA provides benefits and services to Veterans including compensation and pension, education, loan guaranty, and insurance. NCA delivers burial benefits to Veterans and eligible dependents. In total, VA provides a mission critical medical and economic infrastructure to the government and population of the United States.

Life-safety protected facilities shall include all VA facilities designated as not mission critical.

The status of each facility shall be determined by VACO prior to the programming phase of any project.

The facilities in the following table remain as published in the previous version of the Physical Security Design Manual dated July, 2007. VHA is currently planning to conduct a comprehensive review and analysis for the facilities and their physical security designations (i.e. mission critical or life-safety protected). Upon completion of the VHA review and analysis, the updated information will be incorporated into this Manual.

Life-Safety Protected Facility Types Accessory Non-Building Structures Auditorium Biomedical Engineering (equipment and wheelchair repair) Canteen/Cafeteria Canteen/Retail Store Cemetery Administration Cemetery Chapel Cemetery Maintenance Child Care Clinical Services Administration Office Community-Based Outpatient Clinic

(CBOC)

Community Living Centers (CLC) [with Mission Critical Level Utility/System Requirements 1 ]

Connecting Corridor Concourse (and bridge)

General Administration Office

Greenhouses

Laundry Library/Museum

Maintenance Facility (shops) Maintenance Storage (equipment) Materials Management Storage Office Plant Outbuilding Post Office Quarters (residential) Recreational School Student Housing Temporary Buildings Toilets (outhouses) Training/Education Veterans Services Warehouse Waste Management (incinerator and recycling) Waste Storage

Notes:

Community Living Centers (CLC) are designated as “Life Safety Protected with Mission Critical Level Utility and System Redundancy/Capacity”. See Chapters 8 and 9 of the Physical Security Design Manual for Mission Critical Facilities. The default mission critical utility/system requirement is 4 days of full operation of the facility during or after an extreme event. It is acceptable to perform a risk assessment to determine if the level of the Mission Critical utility/system requirements can be reduced. VHA is the authority-having-jurisdiction enforcing this assessment. The minimum standby generator capacity shall not be less than the requirements of nursing homes in the state.

Buildings that are exempted from the building envelope standards and structural requirements (Chapters 6 & 7) set forth in the physical security design manuals include: open air structures (such as columbaria and committal shelters), lodges (non-residential meeting facilities), chapels, toilets (outhouses), greenhouses, maintenance storages, and waste storage.

National Cemeteries include facilities, both enclosed and open-air structures, and utilities.

Physical security of NCA facilities and utilities is important, but their unique nature and function make many physical security requirements less likely to be applicable in cemeteries than in those facilities listed above. The following table indicates the applicable requirements for each NCA facility type. Exceptions will be handled in accordance with section 1.10.1.

NCA Facility Type

Physical Security Design Manual

Applicable Requirements

Notes

Administration buildings

- visitor information

- public restrooms

Section 3.1 Standoff Distance Section 3.5.1.1 Parking Section 6.2.1.1 Glass Chapter 10 Security Systems Appx A Security Door Types Appx B Security System

Application Matrix

Section 3.5.1.1 does not apply to NCA staff parking.

Sufficient lighting shall be provided for the operation of security systems. Such lighting shall be mounted on the building exterior (not on poles or fences).

Lodges (residential) Chapter 10 Security Systems Appx A Security Door Types Appx B Security System Application Matrix

None

Maintenance buildings

- employee buildings

- workshops

- storage for vehicles and equipment

Chapter 10 Security Systems Appx A Security Door Types Appx B Security System

Application Matrix

Provide security fencing to maintenance yard adjacent to maintenance buildings. Security fencing shall be six feet high, black, vinyl-coated chain link.

Sufficient lighting shall be provided for the operation of security systems. Such lighting shall be mounted on the building exterior (not on poles or fences).

Columbarium

- walls and courts

- open-air structure

Chapter 10 Security Systems Appx B Security System

Application Matrix

None

Committal shelter

- roofed, open at sides

- storage closet

- open-air structure

Chapter 10 Security Systems Appx B Security System

Application Matrix

None

Water supply

- systems

- pump stations

- deep wells

- reservoirs

Chapter 10 Security Systems Appx B Security System

Application Matrix

Provide security fencing to control access. Security fencing shall be six feet high, black, vinyl-coated chain link.

NCA Facility Type

Physical Security Design Manual

Applicable Requirements

Notes

Fuel supply

- stations

- tanks

Chapter 10 Security Systems Appx B Security System

Application Matrix

Provide security fencing to control access. Security fencing shall be six feet high, black, vinyl-coated chain link.

Site Where site conditions allow: perimeter or boundary fencing beyond the entrance area is preferred, but is a site-specific decision for NCA. The entire cemetery of hundreds of acres may not be fenced when it is first established but rather fenced incrementally as it is developed.

NOTE: All relevant requirements of Appendix A are listed in the National Cemetery Administration section of that appendix; relevant requirements of Appendix B are listed under Cemetery in that appendix.

1.2.1 VA Owned Facilities

Life-safety protected facilities that are owned and operated by VA shall follow the requirements of this document.

1.2.2 VA Medical-Related Leased Facilities

This section provides guidance in the determination of applicable physical security standards for VA medically-related leased facilities. Refer to section 1.10.1 Exceptions, as necessary.

1.2.2.1 Leased built-to-suit facilities up to 150,000 net usable square feet shall follow the requirements in the VA Physical Security Design Manual (PSDM) for Life- Safety Protected Facilities.

1.2.2.2 Leased built-to-suit facilities greater than 150,000 net usable square feet shall have a determination made by the local VAMC Director with concurrence by the Network Director, and approved by the Under Secretary for Health for Operations and Management or delegated approving official serving as the authority having jurisdiction (AHJ) as to whether the facility will be classified as mission critical or life-safety protected. This determination shall be identified and submitted in the original OMB-300 as part of the initial Capital Planning Process.

● When the facility is classified as mission critical, follow VA PSDM for Mission Critical

Facilities, as allowable per local, city, and state building codes.

● When the facility is classified as life-safety protected, follow the VA PSDM for Life-

Safety Protected Facilities.

1.3 Introduction to Physical Security Concepts

The Physical Security Design Manual for VA Facilities: Life-Safety Protected dated July 2007 is superseded by this physical security design manual. The VA CD-54 Natural Disaster Non- Structural Resistive Design (September 2002) is subsumed and superseded by this physical security design manual. The physical protection strategies used to develop this manual are documented in the Physical Security Strategies Report (January 10, 2006).

The Physical Security Design Manuals will be updated by interim amendments and revised every three to five years. All PSDM documents are posted and kept current on the CFM Technical Information Library (TIL) website at http://www.cfm.va.gov/TIL/.

VA is not adopting the 2010 Interagency Security Committee (ISC) requirements. The ISC Security Design Criteria is a controlled document and cannot be distributed to VA A/E consultants.

1.3.1 Concentric Levels of Control and Protection

The physical security of facilities requires the use of concentric levels of control and protection to provide progressively enhanced levels of security to deter, prevent, detect, delay, and respond to threats in the protection of assets. The concept of concentric levels of control is to protect the central asset behind layers of security measures such that it is least exposed to the threats. Where a single line of defense might be easily breached, the concentric levels approach offers redundancy in lines of defense that is less likely to be breached.

1.3.1.1 The first point of control, or the outermost level, should be at the perimeter of the property consisting of fences and other barriers with one or two points of entry through gates controlled by police or other guard personnel. In certain urban sites,

1.2.3 Existing – VA Medical-Related Leased Facilities

1.2.3.1 Existing leased facilities up to 150,000 net usable square feet shall comply with The Risk Management Process: An Interagency Security Committee (ISC) Standard dated August, 2013.

1.2.3.2 Existing leased facilities greater than 150,000 net usable square feet shall have a determination made by the local VAMC Director with concurrence by the Network Director, and approved by the Under Secretary for Health for Operations and Management or delegated approving official serving as the authority having jurisdiction (AHJ) as to whether the facility will be classified as mission critical or life-safety protected. This determination will be identified and submitted in the future OMB-300 as part of the Capital Planning Process.

● When the facility is classified as mission critical, follow VA PSDM for Mission

Critical Facilities, as allowable per local, city, and state building codes.

When the facility is classified as life-safety protected, follow The Risk Management Process: An Interagency Security Committee (ISC) Standard dated August, 2013.

http://www.cfm.va.gov/TIL/ the building perimeter may be on the property line. Increased levels of screening of persons and vehicles, as the Department of Homeland Security (DHS) threat levels are changed, must be accommodated at the perimeter without burdening surrounding roads with vehicles waiting to enter the site.

1.3.1.2 The second point of control should be at the building perimeter consisting of doors and other openings protected as appropriate to the level of protection needed with or without the first point of control. This includes access control hardware, intrusion detection, surveillance, and, at selected entrances at various times, personnel for control and screening.

1.3.1.3 The third point of control should be to segregate with barriers and hardware generally accessible public and patient areas from staff-only areas such as pharmacy preparation, food preparation, sterile corridors, research laboratories, and building operations and maintenance areas.

1.3.1.4 The fourth point of control should be to segregate authorized from unauthorized staff areas with barriers and access controls such as card reader-activated hardware. Unauthorized areas may include patient records, laboratories, vivariums, and cash-handling tellers.

1.3.1.5 The fifth point of control, at the innermost level, should be to restrict access to restricted areas to a minimum with card-reader access controls, video assessment and surveillance system (VASS) monitors, intrusion detection alarms, and forced-entry-resistant construction. Restricted access areas may include select agent storage, narcotics storage and pharmaceutical caches, and laboratories.

The more effective the perimeter barrier and screening are the less protection is needed within the site, such as between buildings, from patient and visitor parking and the building lobby, and from the site entrance to the other buildings on the site. In highly urban areas where the VA building may front on a city street with no standoff or separation, the building and its occupants can only be protected from hazards of breaking and entering, vandalism, and even explosive or armed attack by hardening the building itself to resist, which may lead to undesirable solutions such as façades with minimum openings and a fortress-like appearance.

1.3.2 Crime Prevention Through Environmental Design

VA follows the principles of Crime Prevention Through Environmental Design (CPTED, see www.cpted.net). CPTED strategies include elements of natural surveillance, natural access control, and natural territorial reinforcement. CPTED promotes the principles that proper design and effective use of the built environment can discourage, reduce, or remove potential crime risks. CPTED should be used to evaluate VA site and building designs to create and enhance the concentric circles or layers of security protection.

1.3.3 Facilities in Floodplains

Throughout this manual where it is mandatory that construction or equipment be in an area that is not subject to flooding refer to the FEMA flood map information available at http://www.fema.gov/business/nfip/fmapinfo.shtm. No new facility shall be constructed in the 100-year floodplain.

Life-Safety Protected Facilities http://www.cpted.net/ http://www.fema.gov/business/nfip/fmapinfo.shtm

1.3.4 Security Operation Requirements

Design decisions for the physical security of a mission critical facility should be based on the concentric levels of control and protection—both physical and operational—as described in section 1.3.1.

1.4 Objectives of VA Physical Security Design

The primary objective of this manual is to provide the design team with the criteria and standards for the full range of strategies available for existing and new buildings to provide unobtrusive protection for VA facilities while safeguarding the Veterans, staff, visitors.

The physical security standards account for VA operations and policies and must be cost effective when implemented. An objective of this manual is to provide cost effective design criteria that will, when constructed and implemented, provide the appropriate level of physical security to VA’s life-safety protected facilities.

1.5 Requirements for Physical Security Subject Matter

Specialists

In order to meet the physical security standards of this manual the design team must include a certified physical security specialist as well as a licensed professional structural engineer who has specialized training in blast design and analysis. These specialists shall become part of the design team during the concept phase of any project. This manual assumes the use of qualified physical security and blast experts.

1.5.1 Physical Security Specialist Requirements

The security specialist shall have a minimum of five years’ experience in physical security design and shall maintain current certification as Certified Protection Professional (CPP) or Physical Security Professional (PSP) from the American Society for Industrial Security (ASIS).

The security specialist must have demonstrated knowledge and experience applying security strategies, such as the application of CPTED, ballistic and forced entry requirements, and electronic security system design as defined in Chapter 10. The résumé of the specialist must be submitted to the VA Project Manager (PM) for review and approval prior to the concept phase of the project. The qualifications of the firm for whom the specialist works must also be submitted with the résumé.

1.5.2 Blast Specialist Requirements

At a minimum, the structural blast specialist shall have a bachelor’s degree in structural engineering or a related field and have formal training in structural dynamics and demonstrated experience with the accepted design practices for blast resistant design. The specialist shall have a minimum of five years’ experience in performing dynamic analysis in blast resistant design. The résumé of the specialist must be submitted to the VA PM for review and approval prior to the concept phase of the project. The résumé must include a minimum of three projects during the previous two years with similar scope to the project being designed. The qualifications of the firm for whom the specialist works must also be submitted to the VA PM.

1.6 Budgeting and Programming for Physical Security

When establishing a design and a budget for a life-safety protected project, the key point is that physical security is fully integrated into the program, rather than an added requirement.

When physical security is seen as an add-on to an otherwise complete project, the costs for implementation will be higher and the results less satisfactory. As such, it is essential to establish the physical security goals within the capital investment project application phase of the project and to ensure that the budget is set to reflect the physical security requirements within the program goals.

1.7 Risk Assessment of VA Facilities

Risk assessments of existing VA facilities showed that the primary threats faced by the Department continue to be routine criminal activity and violence in the workplace; however, the proximity of some VA facilities to high vulnerability targets and the role of VA medical centers as backup to DoD and communities in the public health system elevate VA’s risks from both internal and external manmade threats.

It is not possible to eliminate all risk to a facility and every project will face resource limitations. Cost effective risk management is a requirement of every project. As part of the planning phase of a new life-safety protected facility or major alterations of an existing life-safety protected facility, a risk assessment must be performed, to determine project- or site-specific requirements or modifications to the physical security design requirements, taking onto account the Hazard Vulnerability Assessment (HVA) and Comprehensive Emergency Management Plan (CEMP) for the facility. Cost effective strategies must be implemented to make the facility capable of life-safety protected operation.

The first task is to identify the assets and people that need to be protected. Next, a threat assessment is performed to identify and define the threats and hazards that could cause harm to a building and its occupants. Threats and hazards shall be measured against the overall facility and each (if any) mission critical function and system it contains or supports. After threats and assets are identified, a vulnerability assessment is performed to identify weaknesses. Next, the consequences to the mission that would result from a hazard event or a successfully executed threat are defined. Using the results of the asset, threat, vulnerability, and consequences assessment, risk can be determined.

Comprehensive protection against the full range of possible natural hazards and manmade threats to VA facilities would be cost prohibitive, but an appropriate level of protection obtained through the use of these standards can provide for continued operation of life-safety protected facilities at a reasonable cost.

1.8 Document Distribution, Use, and Control

This manual is unclassified.

1.9 Administration and Enforcement

The provisions of these standards shall apply to all VA life-safety protected construction projects for which design is begun on or after the effective date of this design manual.

These standards apply to new construction, whether free standing structures, additions, or major alterations. Application of these standards does not extend to other spaces within the existing building, except where directed by VA. Existing facilities not undergoing renovation may be required to meet certain physical security standards defined in this design manual as determined by VA, based on funding considerations, prioritization, and other mission driven requirements.

At any campus where a new life-safety protected facility is to be constructed, the entire site shall be upgraded to conform to these standards, except when limitation of the project scope or insufficient funding makes it infeasible to do so. Where the entire site cannot be upgraded, the project shall be designed to incorporate achievable physical security elements in a manner that will allow enhancement of those elements in the future. The specific elements to be incorporated or omitted shall be determined, using the risk assessment of both the site and facility, by the VA PM with the concurrence of the VA AHJ for overseeing implementation of physical security requirements for the facility.

Newly constructed roadways and alterations to existing roadways, building access, site access, and site circulation shall be designed in compliance with these standards.

1.10 Interpretations and Exceptions

VA facilities that are not designated life-safety protected may be designated mission critical, which are required to remain operational in a natural or manmade extreme event or a national emergency. Physical security design requirements for mission critical facilities are covered in a separate manual.

Buildings of such occupancy type and floor area that would allow Type V construction as defined in the International Building Code are exempt from specific blast resistant design requirements for Building Envelope and Structural System. See Chapters 6 and 7 of this Design Manual for details.

Connecting corridor concourse and bridges, that are not the main entrance or required exit for the connected buildings, shall be exempt from the standoff distance requirements of Chapter 3 and the requirements of Chapters 6 and 7. Freestanding greenhouses shall be exempt from the requirements of Chapters 3, 6, and 7. Physical security requirements for temporary buildings shall be determined on a case-by-case basis by the AHJ for overseeing implementation of physical security requirements for the facility.

1.10.1 Exceptions

When a determination is made at the local level, that due to mission, function, location, or regional responsibility a facility should be down-graded from mission critical to life-safety protected (or vice versa), or when a waiver/deviation for the physical security requirements is sought, a request must be submitted and approved by the AHJ who is responsible for overseeing implementation of physical security requirements for facilities within his or her jurisdiction before the beginning of design.

1.10.2 Procedures for Waivers and Exceptions

The local facility may initiate the waiver and exceptions process. The request shall be submitted to the AHJ for review and approval. For VHA, the AHJ is the Deputy Under Secretary for Operations and Management (DUSHOM) within 10N, and requests shall be submitted through the Network channels to 10N for review. For NCA, the AHJ is the Under Secretary for Memorial Affairs. For VBA, the AHJ is the Office of Administration, Emergency, Preparedness, and Facilities.

1.10.2.1 Waiver or exception requests shall include a narrative with justification for the request. To the extent applicable, include the following information:

● Building category

● Design criteria to be waived

● Physical limitations on implementation imposed by existing conditions

● Programmatic limitations imposed by implementation of standards

● Alternative method of achieving equivalent level of protection or a schedule for phased implementation of standard as part of risk mitigation strategy (VHA only)

● Cost of implementation of design standard with a comparison cost of the proposed equivalent protection

● Funding sources

● Impact of waiver on design schedule, construction schedule, and future operations

● Detailed effects on HVA and CEMP (VHA only)

1.10.2.2 Review and approval procedures for waiver or exceptions shall be as follows:

● Obtain concurrence from the AHJ for overseeing implementation of physical security requirements for the facility

● Forward a copy of the approved waiver/deviation request to the Office of Facilities

Planning within the Office of Construction & Facilities Management in VA.

1.11 Master Planning

As part of the master plan development, VA will conduct risk and vulnerability assessments for the facility or campus being planned. The findings of these assessments shall be incorporated into the master plan.

For facilities that have master plans, these plans shall include physical security design guidelines and parameters consistent with those included in, or referenced by, this document. At a minimum, master plans shall include standoff distances, provisions for perimeter security, site access control, applicable CPTED principles, site utility entrances and distribution, a mass evacuation plan, and a schedule for implementation of design guidelines and parameters or approved risk mitigation alternatives.

2 GLOSSARY & ACRONYMS

The following terms and definitions are related to the mitigation of manmade and natural hazards and do not include terms related to general facility design, construction, and operation.

A/E: Architect(s) and Engineer(s) consultants

Alterations: Major alterations or renovations define a project where the area of renovation, including any associated addition, is equal to or greater than 50 percent of the area in the building in which the work is to be performed. In cases where renovations involve changes to the building systems, site work, or other work that does not involve the building interior, the local facility, with concurrence by the region/network and approval by the AHJ shall determine if the work qualifies as a Major Renovation.

Anti-ram: Tested for resistance to a moving load impact at a given velocity and rated in terms of kinetic energy or “K” rating in tests for certification under Department of State programs or “M” rating in tests for certification under ASTM F2656.

Authority Having Jurisdiction (AHJ): The physical security decision-maker for the facility, such as the administration head, assistant secretary, other key official, or deputy assistant secretary, who is responsible for overseeing implementation of physical security requirements for facilities within his or her jurisdiction.

Balanced Design: Controlled failure of a system with an established hierarchy of component failures, where connections are designed for the maximum strength of the connecting components and members supporting other members are designed for the maximum strength of the supported members. For window systems, the glazing shall fail before all other components. (ASCE/SEI 59-11 Blast Protection of Buildings)

Cache: A storage facility requiring a high level of security, often referring to facilities storing pharmaceuticals or other supplies for use in emergencies.

Charge Weight: The amount of explosives in a device in trinitrotoluene (TNT) equivalent.

Closed Circuit Television (CCTV): A video system in which an analog or digital signal travels from a camera to video monitoring stations at a designated location. Historically, the term for a security video system was closed circuit television (CCTV), a closed analog video system.

Very few video systems today are either closed or completely analog, making CCTV an antiquated term and leading the security industry to use various terms to describe a video system. Because security video serves two distinct purposes, assessment and surveillance, the term used here is video assessment and surveillance system or VASS. This provides a common term based on the functions the system serves, independent of technology.

Comprehensive Emergency Management Plan (CEMP)

Consequences: Consequences assessment looks at the value of a building’s critical assets, those that need to be protected, and the importance of the building’s operations, within a wider network of public or private activities. (FEMA 452)

Controlled Access Area or Controlled Area: A room, office, building, or facility area which is clearly demarcated, access to which is monitored, limited, and controlled.

Crime Prevention Through Environmental Design (CPTED): Design philosophy that effective use of the natural environment coupled with proper design of the built environment can lead to a reduction in the fear and incidence of crime.

Critical Assets: People and those physical assets required to sustain or support the facility’s ability to operate on an emergency basis.

Critical Infrastructure, Critical Space: Building area(s) required to sustain or support the facility’s ability to operate on an emergency basis.

Demarc: The separation point between utility-owned and VA-owned equipment.

Department of Agriculture (USDA)

Department of Defense (DoD)

Department of Health and Human Services (HHS)

Department of Homeland Security (DHS)

Detection and Screening System (DSS): DSS are used for the pre-screening of persons, packages, and personal items for detection of contraband, such as, weapons, drugs, explosives, and other potential threatening items or materials prior to authorizing entry or delivery into the building. DSS includes X-ray machines, walk-through metal detectors (WTMD), hand-held metal detectors (HHMD), and desktop and hand-held trace/particle detectors (also referred to a “sniffers” and “itemizers”).

Duress Security Phone Intercom (DSPI): DSPI systems are used to provide security intercommunications for access control, emergency assistance, and identification of personnel under duress requesting a security response.

Earthquake Zones: See seismic zones.

Electronic Security System (ESS): A sub-element of the physical security system, an electronic security system is comprised of Physical Access Control System (PACS); Intrusion Detection System (IDS); Video Assessment and Surveillance System (VASS); Duress, Security

Phones, and Intercom System (DSPI); and Detection and Screening System (DSS). The ESS is commonly integrated to support correlation of security activity between subsystems.

Essential Electrical System (EES): A system comprised of alternate sources of power and all connected distribution systems, fuel systems, and ancillary equipment designed to ensure continuity of electrical power to designated areas and functions of a health care facility during disruption of normal power sources, and also to minimize disruption within the internal wiring system.

Extraordinary Event or Incident: Events or conditions that exceed locally accepted design practice.

Federal Emergency Management Agency (FEMA)

Fire Command Center (FCC)

General Services Administration (GSA)

Hardening: Reinforcement of the building structure, components, and systems against impact of a blast, a ballistic assault, or ramming.

Hazard Vulnerability Assessment (Analysis) (HVA)

High Risk Area: A location where a threat may be introduced.

Hurricane Areas: Hurricane preparedness requirements apply to VA facilities located within 16 kilometers (10 miles) of the Atlantic Ocean or 16 kilometers (10 miles) of the Gulf of Mexico. These requirements also apply to all inland VA facilities in Florida, Hawaii, and Puerto Rico. Similar requirements, for preparedness against tropical cyclones in the Pacific Ocean, apply to VA facilities located in Guam, American Samoa, and the Philippines. See also ASCE 7- 10, section 26.2 Definitions, for Hurricane Prone Regions and Wind-Borne Debris Regions.

ID Check: Examination and verification of personal or vehicle identification visually or by other means.

Illumination Engineering Society of North America (IESNA)

Interagency Security Committee (ISC)

Intrusion Detection System (IDS): A system combining mechanical or electric components to perform the functions of sensing, controlling, and announcing unauthorized entry into areas covered by the system. The IDS is intended to sound alarms or alert response personnel of an actual or attempted intrusion into an area.

Itemizer: A trace particle detection device capable of identifying both explosives and narcotics.

Life-Safety Protected Facilities: VA facilities which are required to protect the life safety of the patients, staff, and visitors in case of an emergency; although indispensable to the mission of VA, are not required to remain operational in a natural or manmade extreme event or a national emergency.

Local Alarm: An alarm that is annunciated in the immediate vicinity of the protected premises.

Magnetometer or Metal Detector: A walk-through portal or hand-held device designed to detect changes in magnetic fields used to identify hidden metal objects.

Mantrap or Sally-port: A double-door booth or chamber that allows a person to enter at one end, undergo an access identification routine inside the booth, and when the routine is satisfied, the lock on the booth door at other end is released. A mantrap is used in high security environments where absolute access control is required.

Mission Critical Facilities: VA facilities that are required to continue operation during a natural or manmade extreme event or a national emergency.

Mitigation: Actions taken to reduce the exposure to and impact of a hazard.

Pedestrian Barrier: A fence, wall, or other structure designed to delay pedestrians from entering the site without using the gates provided for pedestrians where personnel screening may be performed. The pedestrian barrier may or may not be coincident with the vehicle barrier.

National Disaster Medical System (NDMS)

National Terrorism Advisory System (NTAS): formerly the Homeland Security Alert System

(HSAS).

Perimeter Barrier: A physical barrier used on the outside of a protected area to prevent, deter, or delay unauthorized entry.

Personal Identification Number (PIN)

Personal Identity Verification (PIV)

Personnel Screening: Examining persons and their possessions for contraband such as weapons, explosives, and chemical or biological agents using magnetometer, x-ray, search, or other device.

Physical Access Control System (PACS): A system combining mechanical or electrical components, such as card readers, keypads, biometrics, and electromagnetic locks and strikes, for the purpose of controlling access and monitoring building entrances, sensitive areas, mission critical asset areas, and alarm conditions.

Physical Security: That part of security concerned with physical measures designed to safeguard people, to prevent unauthorized access to equipment, facilities, material, and documents, and to safeguard against damage and loss.

Police Operations Unit: An area designed to facilitate the functions of the police and security services, which include the protection of patients, visitors, and employees; the protection of property; and the maintenance of law and order on property under the charge and control of the Department.

Protected Area: An area continuously protected by physical security safeguards and access controls.

Protection Level: The degree to which resources are used to defeat a threat.

Restricted Area: A room, office, building, or facility area to which access is strictly and tightly controlled. Admittance to this area is limited to personnel assigned to the area and persons who have been specifically authorized access to the area.

Risk: The potential for a loss of or damage to an asset.

Screened Vehicle: Motor vehicle that has been examined systematically to determine whether or not a security threat that needs to be mitigated is present.

Screening Vestibule: Designated space or area located for access control between the public building entrance and the lobby which shall be of sufficient space and be provided with power, telecommunications, and data connections for installation of access control and screening equipment that may be used should the need arise.

Secured Door Opening (SDO): A door opening that requires security hardware such as electric strike, door contact, card reader, forced entry rating, or similar feature.

Security Control Center (SCC): A location for security personnel to monitor VASS, alarms, and other security systems and devices. This may be in a separate space or, for small facilities, combined with a guard or reception desk at the entrance.

Seismic Zones: See VA H-18-8: VA Earthquake Design Requirements.

Select Agent: Select agents shall be as defined in Title 42, CFR, Part 73, including pathogens and toxins regulated by both HHS and USDA and non-overlap select agents of HHS.

Standby Electrical System: Generators, switchgear, fuel storage, and distribution equipment necessary to provide standby electrical power to the mission critical facility.

Standoff: Horizontal distance from event to target.

Terrorism: An action that is intended to cause death or serious bodily harm to civilians or noncombatants, when the purpose of such an act, by its nature or context, is to intimidate a population or to compel a government or an international organization to do or to abstain from doing any act.

Threat: The National Infrastructure Protection Plan (NIPP) defines threat as any “natural or manmade occurrence, individual, entity, or action that has or indicates the potential to harm life, information, operations, the environment, and/or property.” http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf

Underwriters Laboratory (UL)

Uninterruptible Power Supply (UPS): A device to provide battery power via an inverter to critical equipment during loss of utility power, or until the essential electrical system (EES) or standby generators are online.

Urban Area: A geographic area with a population of more than 50,000 or a population density of at least 1,000 people per square mile (386 per square kilometer) and surrounding census blocks that have an overall density of at least 500 people per square mile (193 per square kilometer).

Vehicle Arrest: Means of stopping a vehicle from breaching a defensive zone (perimeter).

Vehicle Barrier: A passive or active physical barrier consisting of natural or manmade features designed to keep a vehicle carrying explosives at the required standoff distance. This may or may not be coincident with a pedestrian barrier.

Vehicle Inspection: Examining vehicles for contraband such as explosives using physical search, K-9 searches, trace element sampling, x-ray, or other means.

Video Assessment and Surveillance System (VASS): Security video serves two distinct purposes, assessment and surveillance. The term video assessment and surveillance system or VASS is used here. This provides a common term based on the functions the system serves, independent of technology. Formerly referred to as Closed Circuit Television (CCTV).

Vulnerability: Susceptibility to physical injury to persons or damage to systems or functions.

Vulnerability refers to the expected outcome in terms of damage, casualties, and business disruption if a threat is carried out or a hazard occurs. Vulnerability is measured by assessing

Life-Safety Protected Facilities http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf features that would enhance or diminish building performance during a crime, terrorist attack, or a hazard event. (FEMA 452)

X-ray Screening System: A device or system that inspects the contents of a package or container for concealed explosives or contraband.

3 SITE CONSIDERATIONS

3.0 Scope, Purpose, and Goals

This chapter focuses on security design concepts, elements, and site planning strategies that influence the protection of the built and natural environments.

VA follows the principles of Crime Prevention Through Environmental Design (see www.cpted.net) in order to reduce or remove potential crime risks. CPTED principles should be incorporated into the site design to create and enhance the concentric circles or layers of security protection.

For guidance on construction requirements for site security, such as perimeter fences and other barriers, refer to the Uniform Facilities Criteria (UFC) UFC 4-022-02 and UFC 4-022-01 available on the Whole Building Design Guide (WBDG) (see http://www.wbdg.org).

3.1 Standoff Distance

No vehicle shall be parked closer than 25 feet (7.6 m) to any side of a life-safety protected VA facility, regardless of the building height.

No unscreened vehicle shall be permitted to travel closer than 25 feet (7.6 m) and no screened vehicle shall be permitted to travel within 5 feet (1.5 m) of any life-safety protected VA facility.

These minimum standoff distances are to be provided to the edge of the curb line demarcating the internal roadways and parking within a VA campus. For facilities not located within a campus with internal roadways or parking, the minimum 25 feet (7.6 m) standoff is to be provided to site perimeter fence.

3.2 Perimeter Fences

Perimeter barriers shall consist of fences, walls, a combination of these, and gates as needed for access. The perimeter barrier shall be contiguous around the entire facility or the campus within which the facility is located. The barrier shall be designed to resist forced or surreptitious entry using hand tools, such as by spreading bars of a fence to provide a passable opening. Fences shall have sufficient lateral support to resist overturning by manual force. The perimeter barrier, or pedestrian barrier, does not have to be anti-ram rated unless the barrier serves to mitigate a determined risk. Access gates shall be located to direct

3.1.1 Existing Facility – Standoff Distance

Requirements for standoff distance at existing facilities shall be the same as in section 3.1.

Life-Safety Protected Facilities http://www.cpted.net/ http://www.wbdg.org/ pedestrians and vehicles in ways that enhance the operational environment of the security force.

3.2.1 Location

The perimeter barrier shall be located as close as possible to (or along) the property line of the site on which the facility is located such that the standoff distance to the barrier is maximized and satisfies the minimum standoff distance requirements.

3.2.2 Height

The perimeter barrier shall have at least 8 feet (2.4 m) between potential horizontal footholds or designed with other anti-climb measures.

3.2.3 Material

Fences shall be metal and of heavy industrial-grade construction with bar spacing at a maximum of 5 inches (127 mm) on center. Chain link fences and gates shall not be used.

Walls shall be of reinforced masonry or concrete construction.

3.2.4 Gates

Gates shall be of the same or similar design and materials as the adjacent fences. Location of the gates shall have standoff from public streets to provide the security force with early warning of approaching pedestrians or vehicles. Gates shall be located away from known criminal adjacencies (such as prisons and high crime areas). The site adjacent to the gates shall provide transitional, non-silhouette lighting, and traffic calming features. Gates shall be access card operated from the outside or as prescribed by the AHJ.

3.2.4.1 Pedestrian…