Attachment 5 - FSL 2 Design Requirements.pdf

Southern Region | Physical Security

Facility Security Level II

DESIGN REQUIREMENTS

The Interagency Security Committee (ISC) requires that all newly constructed and remodeled facilities complete a Physical Security Assessment during the design phase. This requirement applies to both owned and leased Federal facilities.

Physical Security Assessments are completed in a systematic approach. First, an assessment must be completed to determine if the facility qualifies as a federal facility (see below), as defined by ISC. Once confirmed, an assessment is completed in which the facility is assigned a Facility Security Level (FSL). The ISC provides minimum Site Security Criteria (based on the FSL) that federal facilities are required to utilize during the assessment.

In order to ensure compliance, it is requested that Wesley McCall (Wesley.mccall@usda.gov), Regional Physical Security POC, be notified as soon as possible in the following conditions:

1) Lease negotiations (renewal, remodels, newly acquired)

2) FS owned (new construction, remodeling)

A certified Physical Security Assessor will be assigned to your project as Physical Security

SME.

Federal Facility: A facility in which an FS employee/contractor occupies for 50% or more of the time. Typically, this is Ranger Stations, Supervisors Offices, Regional Office, etc. However, we also complete assessments on Visitor Centers and Work Centers regardless of occupancy.

Campground restrooms, vault toilets, recreation areas, etc. are examples of what is commonly not defined a Federal Facility.

The following documents are being provided as a resource for project managers and designers (including contractors) after an assessment has been completed and approved by the Regional Physical Security POC.

12/21/2023

DESIGN CRITERIA

Landscaping:

Minimize areas of concealment in and around facilities. Plantings within 8’ of the perimeter of buildings should not restrict views or provide an area of concealment for an individual. Consider full growth and maintenance requirements during landscape planning.

Site Lighting:

Minimum 2.5 lux of lighting required in the following locations:

Building entrance/exits, including travel path to parking areas.

Parking Areas (employee, visitor, and government fleet) VSS Locations

Restricted Areas or Significant Areas and Assets:

Use trees, hedges, berms, fencing, or any combination of these elements to create buffer zones to separate public areas and other functions.

Signage-Sensitive Areas:

Prohibit signage identifying sensitive areas unless required by other applicable codes or standards.

Parking Areas:

Designate employee and visitor parking.

Minimize areas of concealment in and around parking areas.

Hazardous Material Storage:

Locate in a restricted area away from entrances, loading docks, and uncontrolled parking.

Receptacle and Container Placement:

Position trash containers, mailboxes, vending machines, or other fixtures and features that could conceal devices away from building entrances.

Blast Resistance-Façade and Structure and Progressive Collapse:

Use construction materials which have inherent ductility and are better to respond to load reversals. Alternatively, the implementation of site “hardening” to reduce the threat of an IED vehicle threat is acceptable if approved by the Designated Official.

Blast Resistance-Mail Screening and Handling Rooms:

Use construction materials which have inherent ductility and are better to respond to load reversals. Mailrooms shall be constructed with non-load bearing walls and shall not contain structural columns within. The room must be secured with doors equipped with closure hardware.

Blast Resistance- Interior Public Spaces Use construction materials which have inherent ductility and are better to respond to load reversals. Alternatively, securing areas to reduce access to columns, critical utilities, etc. is acceptable if approved by the Designated Official.

Burglary Resistance of Windows:

All operable ground floor windows must be provided with lock hardware and monitored by an Intrusion Detection System (IDS).

Protection of Air Intakes:

Provide emergency shutdown, shelter-in-place, and evacuation procedures. Secure air intake grilles from tampering and removal.

HVAC Control:

Secure equipment controls from unauthorized access.

All HVAC and exhaust systems shall be capable of being de-energized in the event of an emergency. The source shall be located within the interior of the facility.

Dedicated Outdoor Air System (DOAS) type units and ductwork must be secured within fencing.

Emergency Generator Protection:

If installed, secure against unauthorized access and locate the generator and fuel tank a minimum of 25’ from loading docks, entrances, and parking. Alternatively, designers may implement standoff, hardening, and venting methods.

Employee Access Control:

Provide means to secure employee entrance doors and verify the identity of persons requesting access prior to allowing entry into the facility by physical or electronic means.

Visitor Access Control:

Entrances are open to the public during business hours. After hours, visitor entrances are secured and have means to verify the identity of persons requesting access prior to allowing entrance.

Perimeter Doors and Door Locks:

Secure perimeter doors with high security mechanical or electronic locks and non-removable hinges. Utilizing historical Yale keys is prohibited.

Emergency Exit Doors:

Secure emergency exit doors using an automatic door closure and exit hardware that are compliant with applicable life safety codes and standards. Monitor all emergency exits via visual, electronic, or audible means.

Access to Non-Public Areas:

Use signage to designate nonpublic areas and establish procedures to prevent unauthorized access. If feasible, secure nonpublic areas with walls and doors.

Lobbies:

Areas with lobbies and “front facing” employees/contractors shall have a physical barrier a minimum of 5’ in height. Ballistic rated glass is not required and pass-thru openings are acceptable.

A door shall be provided within the employee workspace that allows immediate secure escape from the area in the event of an emergency.

Security of Critical Areas:

Secure communication, data centers, VSS/IDS control rooms, HVAC equipment, electrical rooms, and access to roof from unauthorized access. Doors shall remain closed at all times. It is common for these rooms to have warm temperatures which results in staff propping doors open.

Design HVAC accordingly.

Building Systems and Roof Access:

Secure utility, mechanical, electrical, telecom rooms, and access to the interior space from the roof with high security locks

Publicly Accessible Restrooms:

Control access to public restrooms. At a minimum, design to allow visual observation of people entering the restroom.

DESIGN CRITERIA

Publicly Accessible Restrooms:

Control access to public restrooms. At a minimum, design to allow visual observation of people entering the restroom.

Publicly Accessible Retail and Mixed-Use:

Accommodate publicly accessible and mixed uses by such means as separating entrances.

Video Surveillance System:

Provide VSS coverage of all entrances and exits.

Record VSS by digital medium.

Post VSS Advisory on all exterior doors.

Intrusion Detection System:

Provide IDS on all exterior doors and operable ground floor windows.

Monitor at central station with notification to a building manager or designated tenant POC.

Duress Alarms:

Install duress alarms at all lobby “front of office” locations. Duress alarms must notify the local law enforcement and FS law enforcement assigned to the facility.

Security System Integrity:

Security systems and access control hardware must be secure to prevent unauthorized access.

This includes components, controllers, and cabling.

Building Automated Control Systems:

Manage physical access to devices and cabling. Manage remote access, wireless access, and external system use; enforce least functionality. Disable all necessary web service.

Signage:

“Weapons Prohibited” signage at all points of entry (approved template provided below).

VSS Advisory at all points of entry.

Signage to restrict access to non-public areas.

Designated visitor/employee parking Restricted Areas to the public