Assess the physical security risks at a site and prepare an action plan. You decide which measures to prioritise and consider how they can be implemented. The plan supports internal review, commissioning and budgeting. Work with your organisation or a course case.
Develop a physical security action plan for a site. Examine access routes, assets and existing safeguards, and assign responsibility for the proposed measures. Consider how visitor flows and the availability of response staff affect operations.
In the course case, compare two designs: how quickly is an access attempt detected, how long is it delayed and when can a responder arrive? Account for ongoing staffing and examine why an extra camera without alarm monitoring cannot ensure a timely response. Detailed technical design and site inspection remain part of subsequent specialist planning.
What you will work on
You document protection objectives, threat assumptions and valuable assets for a selected site.
You prioritise security controls by effectiveness, feasibility, dependencies and residual risk.
You compare two protection designs against available response time.
Who it is for
Site managers
Security managers
Facilities and operations leads
Topics
Site boundaries, mandate and protection objectives
Access, assets, critical processes and threat scenarios
Control effect, operational impact and implementation dependencies
Prioritisation under budget and organisational constraints
Ownership, commissioning and approval boundaries
Residual risk, open points, review and escalation
Your result
Your site security plan records assets and responsibilities. The timing comparison shows whether detection, delay and the available response fit together.
Prerequisites
Basic knowledge of security or risk management. For your own case, you need information about a site, its uses, critical processes and existing controls. If this information is missing or confidential, use an anonymised case or a course case.
Format and approach
Planned as five to six hours of self-paced study with templates, a continuous case and self-checks with explanations.
When digital and physical disruptions happen together, security, IT and crisis leaders need to work together. For one site, you determine who assesses reports, coordinates protective measures and decides when priorities conflict.
Create an alerting and handover procedure for a site and work through a night-time emergency report. Establish who receives the report, who takes over if the first contact is unavailable and what information should be passed to external responders. Use your site’s arrangements or a fictional case.
Plan the annual information security programme for your area: which objectives and risks come first, and what actions and resources are needed? A management review template helps you present the decisions and supporting evidence to leadership.