Physical Security Management Training Course

Participants can conduct and document a proportionate physical security risk assessment.

• ISO 31000 principles applied to physical security risk assessment
• Assets classified by people, information, property, operations and reputation consequences
• Threat, vulnerability and consequence statements written with clear causal logic
• Risk matrix calibrated through likelihood definitions and consequence criteria
• Existing controls assessed for design, implementation and operating effectiveness
• Risk register records owners, treatments, due dates and residual ratings

Participants can evaluate credible threats and convert information into protective priorities.

• Threat assessment separates intent, capability, opportunity and target attractiveness
• Source evaluation uses reliability and credibility ratings before dissemination
• Crime patterns, protest activity and insider indicators analysed for relevance
• Terrorism, espionage, sabotage and workplace violence threat scenarios distinguished
• Threat statements link adversary methods to specific asset vulnerabilities
• Intelligence requirements define collection priorities, reporting routes and review cycles

Participants can rank assets and establish proportionate protection priorities.

• Asset inventory captures critical people, processes, spaces, records and equipment
• Business impact analysis identifies maximum tolerable disruption and recovery priorities
• Criticality ratings consider safety, financial, legal, operational and reputational impacts
• Crown-jewel analysis identifies assets requiring enhanced protective measures
• Protection zones assigned according to asset value and threat exposure
• Risk appetite informs acceptance, treatment, transfer and avoidance decisions

Participants can complete a structured security survey and report actionable findings.

• Site survey scope defines buildings, boundaries, processes and assessment assumptions
• Walkthrough observations record entry points, sightlines, lighting and concealment
• Vulnerability assessment tests deterrence, detection, delay and response measures
• Photographic evidence, annotated plans and observation logs support findings
• Security survey interviews test actual procedures against documented requirements
• Findings prioritised through risk ratings, quick wins and capital requirements

Participants can design a layered physical protection system matched to assessed risks.

• Deter, detect, delay and respond model structures protective-system design
• Layered protection connects site perimeter, building shell and internal zones
• Detection-to-response timeline tests whether controls provide sufficient intervention time
• Security-in-depth principles prevent single points of protective failure
• Protection measures selected against threat method, consequence and operational constraints
• Concept design records assumptions, dependencies, costs and residual risks

Participants can specify perimeter and environmental measures that improve deterrence and observation.

• CPTED principles apply natural surveillance, access control and territorial reinforcement
• Perimeter survey evaluates fencing, gates, barriers, drainage and adjacent land
• Lighting design considers illumination levels, glare, maintenance and camera performance
• Landscaping managed to preserve sightlines and reduce concealment opportunities
• Vehicle controls address hostile approach, parking, loading bays and delivery routes
• Signage communicates boundaries, restrictions, monitoring and reporting arrangements

Participants can create access control rules for people, spaces and security exceptions.

• Access zoning classifies public, controlled, restricted and high-security areas
• Least-privilege access rules link roles to approved spaces and times
• Access authorisation workflow separates request, approval, provisioning and review
• Exception procedures address emergencies, executive access and temporary operational needs
• Anti-passback, tailgating prevention and door-propping controls assessed for suitability
• Access reviews remove inactive, excessive and expired permissions promptly

Participants can select and administer credentials appropriate to site risk and user groups.

• Credential options compare keys, cards, mobile credentials, PINs and biometrics
• Identity proofing requirements set evidence standards before credential issuance
• Credential lifecycle covers issue, activation, replacement, suspension and revocation
• Lost-card procedures define reporting timeframes, deactivation and investigation steps
• Biometric deployments assess privacy, consent, false-match and accessibility issues
• Key control registers track issue, return, duplication and periodic reconciliation

Participants can establish controlled processes for visitors, contractors and deliveries.

• Visitor management process verifies identity, host approval, induction and escort requirements
• Contractor access integrates permits, competence checks, badges and supervision
• Delivery screening addresses vehicle arrival, manifests, loading zones and handover
• Temporary passes include expiry controls, visible identification and return procedures
• Reception staff apply challenge protocols for unescorted or suspicious individuals
• Visitor records retained according to privacy, investigation and audit requirements

Participants can define operational requirements for electronic security systems.

• Operational requirement defines surveillance purpose, coverage, evidential quality and response
• CCTV camera selection considers field of view, resolution, lighting and retention
• Intrusion detection compares contacts, motion sensors, glass break and volumetric sensors
• Duress alarms specify activation methods, monitoring paths and response protocols
• Alarm zoning reduces nuisance activations and speeds operator assessment
• Maintenance schedules test uptime, fault reporting, evidential playback and calibration

Participants can organise control-room operations and manage alarm response consistently.

• Control-room operating procedures define monitoring, logging, dispatch and escalation duties
• Alarm response protocols classify priority, verification, dispatch and notification actions
• Operator workload assessed through alarm volume, staffing levels and shift patterns
• Situation reports use verified facts, actions taken, needs and next updates
• Communications plans establish radio discipline, call signs and emergency channels
• Control-room audits review logs, recordings, response times and procedural compliance

Participants can set guard-force duties, performance expectations and supplier controls.

• Post orders define duties, authority limits, reporting lines and emergency actions
• Patrol plans vary routes, timings, checkpoints and observation priorities
• Guard deployment matches risk periods, access points and operational activity
• Shift handovers document incidents, equipment status, access exceptions and outstanding tasks
• Supplier contracts specify staffing, training, vetting, supervision and performance measures
• Guard-force inspections test appearance, knowledge, equipment and post compliance

Participants can manage security incidents from initial report through investigation and corrective action.

• Incident classification distinguishes suspicious activity, breach, crime, violence and emergency
• Initial actions prioritise life safety, scene control, notification and evidence preservation
• Incident command roles establish control, operations, planning and communications responsibilities
• Witness accounts gathered using open questions, contemporaneous notes and statement templates
• Evidence handling maintains chain of custody for recordings, documents and physical items
• Root-cause analysis identifies control failures, contributing factors and corrective actions

Participants can integrate physical security procedures with wider emergency and continuity arrangements.

• Emergency plans align security actions with fire, medical and evacuation procedures
• Lockdown, lockout and shelter procedures matched to credible threat scenarios
• Crisis management escalation defines authority, communications and executive decision points
• Business continuity priorities guide security support during disruption and recovery
• Liaison arrangements coordinate police, fire services, medical teams and regulators
• Post-incident debriefs capture lessons, actions, owners and completion evidence

Participants can identify cyber, privacy and data-protection requirements affecting physical security systems.

• NIST SP 800-53 physical controls connected with electronic access systems
• Networked cameras and access controllers assessed for cyber-security exposure
• System administrator privileges controlled through role-based access and audit logs
• Video retention schedules balance operational need, privacy and legal requirements
• Data protection impact assessments address biometric and visitor-data processing
• Vendor remote access governed through approval, logging, time limits and review

Participants can measure security performance and drive corrective improvement through assurance processes.

• Security assurance plan schedules inspections, tests, audits and management reviews
• Leading indicators track training completion, access reviews, alarm faults and patrol compliance
• Lagging indicators analyse incidents, losses, response times and repeat events
• Key performance indicators distinguish activity volumes from protection outcomes
• Corrective-action registers assign owners, deadlines, verification and closure criteria
• Management reports present risk trends, investment cases and unresolved exposures

Participants can plan security improvements and justify investment decisions to management.

• Security improvement roadmap sequences policy, process, people and technology actions
• Options appraisal compares effectiveness, cost, implementation risk and operational impact
• Capital proposals identify equipment, installation, maintenance and lifecycle cost assumptions
• Implementation plans define milestones, dependencies, acceptance tests and accountable owners
• Change-management communications prepare users for revised access and reporting procedures
• Benefits realisation measures expected risk reduction after implementation

Participants can build, review and present a complete physical security management plan for a defined site or facility portfolio.

• Site profile defines assets, stakeholders, operating constraints and security objectives
• Risk register prioritises credible threats, vulnerabilities, consequences and treatment owners
• Protection design integrates access control, perimeter measures, surveillance and response
• Operating model specifies guard duties, control-room procedures and incident escalation
• Implementation roadmap sets priorities, costs, governance milestones and assurance measures
• Peer review tests plan logic, proportionality, feasibility and residual-risk acceptance