026 Guide to the Application of Physical Security Zones 1.
1 Purpose and Scope The physical environments of facilities can be designed and managed in order to reduce the risk of unwanted events. Zoning is one component of physical security designed to reduce such risk. It should not be considered as a means that will eliminate risk, nor should it be considered as the only method to address risk. Instead, it should be viewed as an integral component of the overall risk management strategy. This document provides information to assist departments in the application of the (GSP) and the Operational Security Standard on Physical Security (OSSPS) as they relate to zoning. 1.2 Roles and Responsibilities The (Section 10.8 Access Limitations) stipulates that must limit access to classified and protected information and other assets to those individuals who have a need to know the information and who have the appropriate security screening level Operational Security Standard on Physical Security (Section 6.2 Hierarchy of Zones) states that must ensure that access to and safeguards for protected and classified assets are based on a clearly discernable hierarchy of zones guide should be reviewed in conjunction with the Threat and Risk Assessment (TRA) in order to develop an effective zoning strategy for each facility. Departments are responsible for the implementation of this guideline and can contact the RCMP Technical Security Branch (the lead agency) to obtain safeguards above baseline threats based on a TRA. The RCMP is responsible for the development, approval and issuance of this guide and for advising on its application. 2.1 Design Strategy Zones, when appropriately integrated, should contribute to the overall security environment of a facility. The security environment may be defined as those physical and psychological measures that contribute to a reduction in criminal activity and ray ban aviator new model the fear of crime. Zoning should promote a sense of ownership or territorial reinforcement, provide opportunities for natural surveillance and establish a clearly defined sequence of boundaries through which a visitor or departmental employee may or may not pass. Before a person proceeds from one zone to another, they should perceive the zoning boundary (implied or actual) ray ban in usa and understand the rules / limitations associated with crossing it. The departmental functional space requirements must also be taken into consideration when establishing zoning boundaries. Zoning should not be implemented by simply adhering to the prescribed technical requirements for zones (refer to Section 3.4 for baseline zone requirements), or by integrating zones into the plan based solely on functional space requirements. Security measures that are excessive, inappropriate or that have not taken into account a department functional space requirements will eventually be bypassed and become ineffective. While personnel screening levels may grant access to certain levels of sensitive information, application of the need to know principle restricts access within those levels to specific items, topics or types of sensitive information. Personnel are not entitled to access merely because it would be convenient for them to know or because of status, rank, office or level of clearance. An effective way of implementing / maintaining the need to know principle consists of segregating and controlling access to the sensitive assets through the effective use of zones. 2.3 Zone Selection In order to determine the appropriate zone(s) for the processing, storage or destruction of sensitive assets, it is first necessary to establish the minimum baseline requirements. The zone selection made at this point is the baseline minimum requirement. Examples include electronic intrusion detection systems or someone guarding a particular point on a constant basis. The forgoing definitions do not preclude the establishment of a temporary restricted zone either inside or outside a controlled area. For example, a temporary security zone could be established around a seized vessel or truck under continuous guard. It could also be a desk in an open office area that normally functions as an Operations Zone, as price ray ban wayfarer long as the person processing sensitive information and assets in that area controls access to the asset on a need to know basis. The first two zones (Public, Reception) establish access conditions for the three restricted zones (Operations, Security, High Security). The minimum requirement stipulates that access be controlled in Operations Zones and higher. Since no two facilities are identical, the locations where Operations Zones begin will also be different from one facility to another. The following examples, however, illustrate some generic facility types. The building in this example is a single purpose government building on government land. The Public Zone consists of the grounds around the building. Although departments may wish to monitor this area, there is no requirement to control access. A Reception Zone is located at the front entry. Within this zone there is a means for the public to make initial contact and exchange information. This may happen at a reception desk, where there will be personnel present to monitor the space. Entry beyond the Reception Zone is required to be restricted to those who have a need to access. There ray ban usa sale should be a recognizable perimeter such as a doorway or an arrangement of furniture which clearly demarcates the entrance to the restricted access area. Access should be controlled from this point on. Access should also be controlled at every other point which enters into an Operations or Security Zone. The building in this example is a multi storey building in which the government is a tenant on one or more floors. The Public Zone includes the main floor lobby as well as the elevator and corridors on each floor. There is a Reception Zone located adjacent to the Public Zone on one side of the floor. The remaining office areas are Operations Zones. Control of access is required at all entry points into the Operations Zones. In this example it is possible to enter an Operations Zone from either a Reception Zone or a Public Zone (the corridor). Typically this is done with signage which should also direct the individual to the location of the Reception Zone. In addition to meeting this minimum requirement, departments may wish to establish additional levels of restricted access areas in order to further limit access within a facility. The requirement for Security or High Security Zones within a facility will depend upon the levels of information handled, as well as the specific threats to the department assets. Zones should be implemented in a progressively restrictive manner, proceeding from the least restrictive (Public) to the highest zone required, so that sequential entry points must be passed through. 2.4.4 Example 3 An entry point is a design feature that channels traffic in such a way that effective control of access is possible at that point.
Entry points between zones should be clearly identifiable. The boundary of the zone cannot permit access except at an entry point. The floor plan below illustrates the relationship between zones.
Prev: wayfarer ray ban
Next: buy sunglasses ray ban