2. A Security Vulnerability Survey
By Kenneth Keener
ASecurityVulnerabilitySurveyisanobjectiveandcritical
onsiteanalysisof aclient'spropertyinorder todetermine
existingsecurity;toidentifydeficienciesanddeterminethe
bestcourseofactionneededtoenhanceoverallsecurity.
A Security Vulnerability Survey will involve the checking of every aspect of a
facility’s construction in order to prevent intrusion.
In the initial walkthrough security check of the facility it is good to look for
things that could possibly cause people to relate to crime such as cans and
bottles thrown all over the lawn and parking lot areas, overfilled trash and
garbage cans, graffiti written on walls and doors and areas where there are piles
of cigarette butts. (Cigarette butts also suggest people hanging around in that
particular area of the property.)
A full report of the initial security walkthrough check should be given to the
janitorial and or maintenance departments.
A Security Vulnerability Survey will include the checking of the: Perimeter/
Envelope/Building/ Doors / Windows/ Roof / Sky Lights / Lighting Controls /
Locking Controls and Vehicular movement / Employee and Visitor Controls /
Product Controls/Money Controls/Internal Controls and Proprietary
Information / Guard and Security Controls / Fire Controls, Alarm Systems and
Camera System Controls.
A survey list of all present tenants within the complex should be made in order
to ascertain what type of business each is conducting. Do any constitute an
increased risk to the facility such as a high-end jewelry store, liquor bar, disco or
a politically active organization?
Pg. 1
3. Pg. 2
Area Evaluation: Evaluate several blocks around the facility.
Check crime rates in the area.
Attach photos of the complex showing all four sides of the facility itself.
Observations of the facility should be made at various times of the day, night
and on weekends and off hours in order to observe customary activities and
establish patterns in activity.
A list should be made of emergency responders.
Evaluate the response time for each responder:
Emergency 911
Security Office: Phone:
Security Patrol Vehicle: Phone:
(Local) Police Dept. Phone:
Sheriff’s Dept.: Phone: _
Fire Dept.: Phone:
Hospital: Phone:
Maintenance Dept.: Phone:
Building Capacity
Parking lot capacity
4. Pg. 3
Security Survey
Facility Name: Address:
Phone:
Survey Date:
Facility Manager / Name: Home Phone:
Cell:
Second in Command / Name: Home Phone:
Cell:
Third in Command / Name: Home Phone:
Cell:
General functions of the facility:
Number of employees:
Operating hours:
Note to Survey Conductor: List the date and time each
section of the survey was completed. Print name and sign.
Building, Perimeter and Envelope Controls
Type of construction: Building / foundation / floors / walls / doors / windows /
roofs and skylights.
Door construction: Solid / Metal / Aluminum / Wood / Glass / Hinges / Hinge –
Pins / etc.
5. Pg. 4
What are the total number of perimeter entrances and exits?
Is there a pedestrian walk-in area?
Do security gates have a constructed barrier or large rock placed in front of
the structure for accident protection?
Are all entrances and exits supervised?
Are there perimeter fences? What type / height and distance from building.
Do fences have barbed wire on the top?
Is there a trench dug outside the fence perimeter?
Are there any overpasses or passageways?
What is the height of the windows from the ground?
How are windows protected?
Are there any roof openings or entries?
Are there any floor grates or ventilation openings?
Are skylights protected by bars, screens or intrusion alarms?
Any materials stored outside building?
Is there a lock on manholes, skylights and roof hatches?
Are doors and grates in place so that the frame cannot be pried off?
Are roof doors securely locked?
Are all air conditioning ducts, ventilation shafts and fan openings protected?
Are transoms properly protected by bars or screens?
Was the adjacent occupancy checked?
What is the distance from the adjacent property to the surveyed facility?
6. Pg. 5
Notes:
Date:
Time:
Print Name: Signature:
Lighting Controls
Is perimeter lighting provided?
Is perimeter lighting adequate?
Is there an emergency lighting system?
Are all doorways sufficiently lighted?
Is lighting in use during night hours?
Is lighting directed the perimeter?
Is lighting adequate for the parking areas?
How is lighting checked?
Is interior lighting adequate for surveillance by night guards?
Are guard posts properly illuminated?
Notes:
7. Pg. 6
Date:
Time:
Print Name: Signature:
Locking Controls
Does the facility have control and adequate records for all keys?
Is there a master key system in use?
How many keys are issued?
Are keys marked “Do not duplicate”?
What types of locks are used in each particular area?
Are all extra keys places in a locked drawer, locker or container?
What are the total numbers of safes within the facility?
Last time combination changed?
If a combination is recorded where is it stored?
What is the total number of employees who have access to the combination?
Does facility use electronic keypad, Wegan or biometric locking systems?
Are there procedures for securing sensitive information, money or precious
metals, etc.?
Who performs the lock smith functions for the facility?
Company Name: _ Address: _
Phone:
8. Pg. 7
Is there a key inventory taken?
Are locks rotated after every incident?
Are locks changed when keys are lost or stolen?
Notes:
Date:
Time:
Print Name: Signature:
Vehicular Movement
Are security gates manned with security guards?
Does the facility issue the use of vehicle passes, decals or bar codes?
Is there employee parking within the perimeter?
Are cars parked abutting interior fences?
Are parked cars abutting any roofs?
Are cars parked near entrances or loading docks?
Are cars parked near dumpsters?
Are there adequate stop signs, regulatory signs and speed bumps within the
facility?
Are crosswalks needed within the facility?
Notes:
9. Pg. 8
Date:
Time:
Print Name: Signature:
Employee and Visitor Controls
Do employees have access to cars during working hours or lunch breaks?
Is a daily register or security log of employees and visitors maintained?
Is there a control to prevent visitors from wandering the facility?
Do employees use identification badges?
Are visitors issued identification badges?
Are there color coded identification badges utilized to denote the particular
area or section I.D. was issued?
List what type of visitor will enter the premises?
List what type of visitor will enter the premises during down hours and
weekends?
Do the employees know what to do in case of a robbery?
Do employees know what to do in case of a fire?
Do employees know what to do in case of equipment failure?
What types of employee screening are utilized within the facility?
10. Pg. 9
Does the recruiter use a check list?
Do any company’s employees other than employees working within this
facility have access to the facility?
LIST COMPANY NAMES:
Phone Numbers:
TYPE OF SERVICE:
Vendors / Restaurant workers / Janitorial Workers / Service workers / etc.
Are controls over temporary help adequate?
Notes:
Date:
Time:
Print Name: Signature:
Personnel Security
Are background checks conducted on all employees?
Is a background check conducted on all employees handling products?
Is a background check conducted on all employees handling cash?
Is a background check conducted on all employees working in sensitive
areas of the facility?
If background checks are conducted who conducts the investigation?
Is there a drug screening program instituted prior to employment?
11. Pg. 10
Are new employees given security or awareness orientation?
Are exit interviews conducted upon termination of employees?
Is there a program followed to ensure return of keys, credit cards, ID cards,
manuals, computers, cell phones and other company property?
Notes:
Date:
Time:
Print Name: Signature:
Product Controls
Are all thefts, shortages or other possible problems reported immediately?
Is there someone to inspect and review controls for shipping area.
Is there someone to inspect and review controls for receiving area.
Is supervision in attendance at all times?
Are truck drivers allowed to wander about the area?
Is there a waiting area segregated from the product area?
Are there toilet facilities nearby?
Is the water cooler or pay telephone nearby?
Are shipping and receiving doors used by employees to enter or leave the
facility?
12. Pg. 11
How are loaded trucks waiting for shipment protected?
Are all trailers secured by seals?
Are the serial numbers checked against shipping papers?
Are locks controlled to be sure that the right lock is on the right trailer?
Are kingpin locks used on trailers?
Is there a separate area used for overages, shortages, damages and take
backs?
Is parking (employee and visitor vehicles) prohibited from areas near loading
docks, doors, windows etc.?
Is there any material stored in the exterior of the building? Are fences,
guards, or CCTV utilized in protection?
Are shipments or trailers received after closing hours?
Are all loaded trucks or trailers parked within a fenced area?
Is there a review of the facility’s product inventory?
LOSS BREAKAGE RETURNS
MONTHLY AVERAGE:
Notes:
Date:
Time:
Print Name: Signature:
13. Pg. 12
Money Controls
Do procedures require a back-up person to wait out in the parking lot while
the manager opens or closes the facility?
How much cash is maintained on the premises?
Is there a list of the departments having access to cash?
Is cash in registers kept at a minimum at all times?
Are cash receipts deposited daily?
What is the location and type of depository?
What protective measures are taken for money deliveries to the facility?
What protective measures are taken for money deliveries to the bank?
Is there an armored car service utilized? List name, address and telephone
number.
Name of company:
Address: Phone:
Does the facility have procedure to control cashing of personal checks?
Are checks immediately stamped with a restricted
endorsement?
Are employee payroll checks properly stored in a locked safe until
distribution?
Is there an established route for transportation of cash receipts to the bank
to help deter robbery?
Is there a back-up vehicle to follow the vehicle transporting cash?
14. Pg. 13
Notes:
Date:
Time:
Print Name: Signature:
Internal Controls
Is a national investigative service used for pre-employment screening?
Are surprise audits or inventories conducted periodically?
Is valuable equipment marked with the store logo or identification number?
Is a record kept of serial numbers on company equipment?
Are cash registers emptied and kept open after closing?
Are employees required to take a vacation?
Is there a task analysis taken in order to evaluate employee performance?
Are relations with local police department maintained?
Does the organization have access to the use of fidelity bonds, surety bonds
and comprehensive 3-D insurance policies?
Notes:
15. Pg. 14
Date:
Time:
Print Name: Signature:
Proprietary Information
What type of proprietary information is possessed at this facility?
How is information protected?
Are computer codes changed on a regular basis?
Are computer codes changed bi-yearly or yearly?
Are computer codes changed when a problem arises?
Are employees instructed in how to protect computers and information at
home?
Are employees instructed in how to protect computers and information in
automobiles, air planes or in travel?
Do employees use cellular phones while talking about sensitive information?
Does the facility use encryption controls?
Does company use VOIP or DigiGone?
Is information protected by the initiation of an acoustical surveillance
policy?
Is the information marked restricted use?
Does site have a clean desk policy?
16. Pg. 15
Are safeguards followed for paper waste, collection
and destruction?
Are dumpsters surrounded by fences?
Do dumpster fences have locks on them?
Are there maintenance personnel tasked to lock and unlock dumpsters?
What hours are the dumpsters in use? A.M. P.M.
Notes:
Date:
Time:
Print Name: Signature:
Guard and Security Controls
Does the facility use proprietary, contract or hybrid security?
Is there a guard service employed to protect this facility?
Name of Company: Address: _
Phone:
Number of guards Number of posts
Are guards armed or unarmed?
What type of training do the guards receive?
17. Pg. 16
Does the facility have written instructions for the guards?
Do guards keep a daily log sheet?
Are incident or theft reports kept locked in a safe place for statistical
records?
Is there a property pass utilized?
Are guards involved in traffic control?
Are items of company property clearly identified with a company logo or
identification number that cannot be removed?
Is there a review of guard patrols and frequency?
Does the facility security team use a patrol vehicle?
Are guards instructed to keep a vehicle log?
Is there someone to gas up the vehicle?
Is there someone to check the oil and tire pressure?
Is there a credit card log sheet kept for patrol vehicle use?
Are yard areas and perimeter areas included in guard coverage?
Are all guard tours recorded?
Are proximity cards issued to guards?
Are package controls exercised?
Are personnel last leaving building charged with checking doors, windows,
cabinets and etc?
Notes:
Date:
18. Time:
Print Name: Signature:
Fire Controls
Are fire drills conducted?
Is the number of fire extinguishers adequate for the facility?
Are there monthly inspections of fire extinguishers and fire equipment?
Are all exits marked correctly?
Are light bulbs checked inside the Exit signs?
Are all exits unobstructed?
Are sprinkler systems tested annually?
Are employees involved in fire awareness programs?
Do firefighters visit for annual inspections?
Do employees know how to react to a bomb threat?
Notes:
Date:
Time:
Print Name: Signature:
Pg. 17
19. Alarm Systems
Does facility utilize alarm devices?
Name of alarm manufacturer: Phone:
What is the total number of alarms?
What type of alarms?
Are alarms of central station type?
Are alarms connected to the police dept. or outside alarm service?
Is there someone to call when systems go down?
Name: Phone:
Is there an emergency, repair or service I.D. number?
I.D. Number:
Is there an authorization list or personnel authorized to open and close the
alarmed premise up to date?
Are local alarms used on exit doors?
Are procedures established upon receipt of alarm?
Notes:
Date:
Time:
Print Name: Signature:
Pg. 18
20. Pg. 19
Camera Controls
Does the facility use CCTV, closed circuit or other types of camera systems?
Are camera systems connected to the internet?
What type of camera systems are they?
What is the name of the manufacturer?
Phone:
Is there someone to call when the systems go down?
Name: Phone:
Is there an emergency, repair or service or I.D. number?
I.D Number: _ _
Are there procedures established in case of an event?
What is the total number of cameras on the premises?
Where are the cameras systems mounted?
Do security personnel and back-up personnel know where the cameras are
mounted in relation to the LCD computer monitor?
Notes:
Date:
Time:
Print Name: Signature:
21. Pg. 20
Safety Controls
Does your company have access to drug and alcohol screening to aid in the
reduction of workplace violence?
Does your company have a safety awareness guide or safety manual?
Are there first aid stations throughout the facility?
Are employees aware of first aid stations and inventory?
Is personal protection equipment in use at this facility?
Does you facility support the use of masks, hoods, safety glasses, hearing
plugs and footwear?
Are provisions made for an eye wash, safety shower, fans and air blowers?
Are safety guard and equipment in use while employees use power tools and
specialized equipment?
Are safety audits conducted at this facility?
Are safety records kept?
Do security guards or managers initiate a security and safety walk through
check in order to prevent accidents or damage to the facility?
Are all floors and walkways checked for unwanted debris or items that may
cause an incident?
Are floors checked for puddles of water or liquid on walking areas or
areas where a person may stand?
Are all power tools and machinery unplugged and stored safely at night?
Are all trash receptacles emptied and far from heated areas that may cause
a flame?
22. Pg. 21
Are all ceilings, walls and floors checked for cracks that may warn of a flaw
in the buildings superstructure?
Are all electrical plugs and receptacles checked?
Are all electrical, fuse and timer boxes closed, hinged and properly locked?
Are all ceilings, walls and floors and carpeted areas checked for water spots
or leaks?
Are there any open and unsecured wires visible throughout the facility?
Are all doors, windows and garage doors checked to see that they are tight
and secure?
Are all windows without cracks?
Are all lighting systems checked during the walk through?
Are all fire stair wells checked to see that they are free of all debris and
graffiti?
Are all elevators periodically checked and free of all debris and graffiti?
Do all management, security and maintenance personnel know exactly
where the elevator key is kept in case of an emergency?
Are all cabinets, desks and chairs checked to see that all are clean and in
good working condition?
Are all closets and small rooms checked for fire-loading?
Are cameras set up in pump rooms, chiller units and areas where expensive
equipment is in use or stored?
Are lunch rooms checked on a daily basis?
Are all counters cleaned and free of food and debris?
Are all appliances cleaned and in good working order?
Are refrigerators checked for cleanliness?
23. Pg. 22
Is tainted food that may cause a health problem thrown out?
Is there someone designated to clean the lunch room?
Are all restrooms checked to see that everything is clear, clean and in good
working order?
Are restrooms tiles secure?
Are restrooms free of broken mirrors?
Are there any porcelain problems that may cut an unsuspecting patron?
Are all drains in good working throughout the facility?
Is machinery checked outside the facility?
Are all air-conditioners, generators, pumps and motors secured by fencing?
Notes:
Date:
Time:
Print Name: Signature
Final comments for survey:
Does the facility have an Incident Management System (IMS)?
If so name of contact person: Phone:
Does the building have an evacuation Plan?
Does the organization have an off-site storage area for valuable information?
24. Pg. 23
It is a good idea to have new employees draw a map of the facility they are
working in. It immediately familiarizes them with their new post in order to
function within professional perameters.
If an incident occurs the facility should have a map available for police and
fire personnel.
