ATTCH_A_-_Security_Requirements.pdf

ATTACHMENT A

PHYSICAL SECURITY REQUIREMENTS:

1. DOORS AND DOOR LOCKS: Doors are of 45 mm (1-3/4 in.) hardwood or hollow steel construction. Dutch or half doors are unacceptable. Removable hinge pins on door exteriors must be retained with set pins or spot welded, preventing their removal. All doors must be fitted with two lock sets. Doors with glass panes must have one lock set, key operated from the interior of the protected area. If a door is not set in a steel frame, one of the two locks must be a jimmy proof rim dead lock. Doors set in steel frames must be fitted with a mortise lock with a deadlock pin feature. One lock (the day lock) must be automatically locking on door closure;

requiring reentry to the room with key or lock combination and allowing egress from the room by use of an inside thumb latch. The day lock on the main door must be automatically locking, with a minimum 19 mm (3/4 in.) dead bolt and inside thumb latch. Combinations or keys to day locks will be restricted to authorized personnel and combinations changed immediately on the termination or reassignment of an employee. Medeco ™ high security locking device is recommended.

2. OTHER ROOM ACCESS MEANS: Interstitial overhead areas which enable entry into a secure room from an unsecured room must be barricaded by the installation of a suitable partition in the interstitial space which prevents "up and over" access. Ventilation grills on doors and air circulation ducts which exceed 0.06 m2 (100 sq. in.) in areas must be reinforced to prevent their removal from outside the room. Other possible access means such as dumbwaiter shafts, roof, or wall ventilator housings, trapdoors, etc., must be secured by appropriate means.

3. MOTION INTRUSION DETECTORS: An intrusion detection alarm system which detects entry into the room and which broadcasts a local alarm of sufficient volume to cause an illegal entrant to abandon a burglary attempt. Intrusion detectors must have the following essential features.

a. An internal, automatic charging DC standby power supply and a primary AC power operations.

b. A remote, key operated activation/deactivation switch installed outside the room and adjacent to the room entrance door frame and/or a central alarm.

c. An automatic reset capability following intrusion detection.

d. A local alarm level of 80 dB (min) to 90 dB (max) within the configuration of the protected area.

e. An integral capability for the attachment of wiring for remote alarm and intrusion indicator equipment (visual or audio). See installation notes below.

f. A low nuisance alarm susceptibility.

(Intrusion detector equipment which operates on the principle of narrow beam interception, door contacts, microwave, or photo electric eye is unacceptable).

Installation Notes:

• In addition to the locally sounding alarm, remote visual and/or audio annunciators must be designed to assure 24 hour monitoring. These annunciators will have the capability of identifying individually protected zones.

• In protected leased space, intrusion detector alarms will be remote to a commercial security alarm monitoring firm, a local police department, or a security office charged with building security and reported to the 24 hour monitoring station. The remote alarms will be in addition to locally broadcast alarms in the protected areas.

4. SAFES AND VAULTS: Safes, data cages or vaults which conform to the following specifications:

a. Safes will be General Services Administration (GSA) class 5 security containers weighing no less than 340 kg (750 pounds).

b. Vault specifications are as follows:

(1) Type I Vault. Enclosure constructed of steel security screen, woven mesh, 1.2 mm (0.04 in.) wire diameter alloy #304 stainless steel, with tensile strength of 29 kg/mm (1,600 pounds per lineal inch). Mesh 10 x 10 per 25 mm (inch) with main frame and sub frames of 2.4 mm (13 gauge) alloy #304 steel. In rooms with dropped ceilings, the vertical frames and mesh walls must meet the actual ceiling or a security mesh ceiling installed below the false ceiling. In lieu of security mesh screening enclosures, type I vaults may be constructed of 2.4 mm (13 gauge) steel wall partition material with corner brackets welded and floor/ceiling anchors firmly set to prevent disassembly. Mesh vaults may be enclosed with drywall or paneling with appropriate ventilation openings.

(2) Type II Vault. Constructed of walls, floors, and ceilings of minimum of 200 mm (8 in.)

reinforced concrete or other substantial masonry, reinforced vertically and horizontally with 13 mm (1/2 in.) steel rods tied 150 mm (6 in.) on center or other wall systems with equivalent or better performance criteria for forced entry and ballistics. Doors and day gates must meet GSA class 5 criteria. Vault ventilation and utility ports may not exceed 0.06 m2 (100 sq. in.) in area.

5. CLOSED CIRCUIT TV: Security Surveillance TV camera with motion detector feature on cameras and at monitor location.

6. SPECIAL KEY CONTROL: Room door lock keys and day lock combinations, where applicable, are Special Keys, and are not mastered.

7. ELECTRONIC ACCESS CONTROL SECURITY SYSTEM: For monitoring and controlling access to areas, the following specifications are among those to be considered for inclusion. Proximity card reader’s upgradeable to smart card technology is recommended:

a. Access Safeguard. To prevent learning codes through keypad observations or use of stolen or found access cards.

b. Time Sensitive. The ability to program access by user, shift, and day

c. Area Sensitive. The ability to program access by door and area for each individual user.

d. Fail-Safe. The ability to maintain access security if the system goes down (i.e. bypass key).

e. Access Record/Audit Trail. The ability to provide for periodic or on demand print-out of names and time/dates of individual accessing.

f. User Coverage. The number of individual access codes that the system will accommodate.

Guard Services:

A. Determining the Need.

(1) Introduction. A guard force is an effective and useful component of a facility’s physical security program. The effectiveness of alarm devices, physical barriers, and intrusion Detectors depends ultimately on a response by a skilled guard force. Guard services can be provided by a private company under contract.

(2) Criteria for Determining Need. Evaluating a facility for security guard requirements to include a security guard patrol is desirable for security Level II facilities, may be a standard based on a Building Security Committee facility evaluation for security Level III facilities, and is a minimum-security standard for Level IV facilities. The number of guards at any given time will depend on the size of the facility, the hours of operation, and current risk factors. Guard services are recommended under, but are not limited to, the following circumstances.

(a) At security Level III and IV facilities to meet visitor control and screening requirements.

(b) The mission of the facility is particularly critical.

(c) There is a high level of sensitivity of information handled at the facility, e.g., national security information.

(d) An in-house response capability is needed, e.g., the facility contains alarmed vaults or other sensitive operations, and off-site guards or police are not close enough for quick response.

(e) The facility is vulnerable to theft or damage, e.g. a facility location in a high crime area.

(f) Pedestrian or automobile traffic is heavy or congested and requires special controls.

ADDITIONAL REQUIREMENTS:

1) High Security Locks: The entrances to the building need to be High Security locks (Medico, Assa, and Alloi are some of the manufacturers of high security locks) installed. These locks also need to be installed at the server room door and at the telephone/security room door.

2) Alarm System: The alarm system needs to include intrusion alarms (break-in alarms) on the doors to the server room and the telephone/security room. It was recommended that these alarm sensors be "BMS" (equipment that monitors itself for tampering as well as for forced entry)

3) Card Access: The card access system needs to include a card reader at the doors to the server room and telephone/security room.

4) Cameras: The camera surveillance needs to cover the interior of the telephone/security room and access to it. Camera coverage should also include any areas where FEMA data is held after printing (WIP holding).

5) FEMA Server Security: In addition to being kept in the server room, the servers that access the FEMA network and hold data on the applicants needs to be secured inside a security cage.

The access to this cage needs a biometric (fingerprint is OK) controlled access. A small, server rack sized enclosure is all that is required. The biometric lock can be self contained, or maintained by a server in the secured rack.

6) A secured and controlled access area should be created to hold WIP documents. This includes documents that are printed and awaiting envelope-stuffing.