Facility Assessment Tool
Organizatoin
Address
Street Address
Street Address Line 2
City
State / Province
Postal / Zip Code
Please Select
Afghanistan
Albania
Algeria
American Samoa
Andorra
Angola
Anguilla
Antigua and Barbuda
Argentina
Armenia
Aruba
Australia
Austria
Azerbaijan
The Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belgium
Belize
Benin
Bermuda
Bhutan
Bolivia
Bosnia and Herzegovina
Botswana
Brazil
Brunei
Bulgaria
Burkina Faso
Burundi
Cambodia
Cameroon
Canada
Cape Verde
Cayman Islands
Central African Republic
Chad
Chile
China
Christmas Island
Cocos (Keeling) Islands
Colombia
Comoros
Congo
Cook Islands
Costa Rica
Cote d'Ivoire
Croatia
Cuba
Curaçao
Cyprus
Czech Republic
Democratic Republic of the Congo
Denmark
Djibouti
Dominica
Dominican Republic
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Estonia
Ethiopia
Falkland Islands
Faroe Islands
Fiji
Finland
France
French Polynesia
Gabon
The Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guadeloupe
Guam
Guatemala
Guernsey
Guinea
Guinea-Bissau
Guyana
Haiti
Honduras
Hong Kong
Hungary
Iceland
India
Indonesia
Iran
Iraq
Ireland
Israel
Italy
Jamaica
Japan
Jersey
Jordan
Kazakhstan
Kenya
Kiribati
North Korea
South Korea
Kosovo
Kuwait
Kyrgyzstan
Laos
Latvia
Lebanon
Lesotho
Liberia
Libya
Liechtenstein
Lithuania
Luxembourg
Macau
Macedonia
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Marshall Islands
Martinique
Mauritania
Mauritius
Mayotte
Mexico
Micronesia
Moldova
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Myanmar
Nagorno-Karabakh
Namibia
Nauru
Nepal
Netherlands
Netherlands Antilles
New Caledonia
New Zealand
Nicaragua
Niger
Nigeria
Niue
Norfolk Island
Turkish Republic of Northern Cyprus
Northern Mariana
Norway
Oman
Pakistan
Palau
Palestine
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Pitcairn Islands
Poland
Portugal
Puerto Rico
Qatar
Republic of the Congo
Romania
Russia
Rwanda
Saint Barthelemy
Saint Helena
Saint Kitts and Nevis
Saint Lucia
Saint Martin
Saint Pierre and Miquelon
Saint Vincent and the Grenadines
Samoa
San Marino
Sao Tome and Principe
Saudi Arabia
Senegal
Serbia
Seychelles
Sierra Leone
Singapore
Slovakia
Slovenia
Solomon Islands
Somalia
Somaliland
South Africa
South Ossetia
South Sudan
Spain
Sri Lanka
Sudan
Suriname
Svalbard
eSwatini
Sweden
Switzerland
Syria
Taiwan
Tajikistan
Tanzania
Thailand
Timor-Leste
Togo
Tokelau
Tonga
Transnistria Pridnestrovie
Trinidad and Tobago
Tristan da Cunha
Tunisia
Turkey
Turkmenistan
Turks and Caicos Islands
Tuvalu
Uganda
Ukraine
United Arab Emirates
United Kingdom
United States
Uruguay
Uzbekistan
Vanuatu
Vatican City
Venezuela
Vietnam
British Virgin Islands
Isle of Man
US Virgin Islands
Wallis and Futuna
Western Sahara
Yemen
Zambia
Zimbabwe
Other
Country
Survey Conducted On
Click to edit...Lead
Kevin Parker
Loyd Olson
Rick Klopp
Steve Herlocher
Zach Olson
None
Kevin Parker
Loyd Olson
Rick Klopp
Steve Herlocher
Zach Olson
Back
Next
Penetration Testing
Was the tester able to gain "unauthorized" access to the facility?
Please Select
Yes
No
Penetration Testing Results
1. Unable to gain access through various approaches – either escorted off of the premises or law enforcement contacted (this would of course be blocked by key personnel aware of the assessment.)
2. Unable to gain access through various approaches – asked to leave and visibly observed leaving the premises.
3. Unable to gain access through various approaches – asked to leave without any follow up.
4. Able to gain access to facility, took more than 3 attempts or questioned and confronted within 1 minute.
5. Able to gain access to facility within 3 attempts, questioned and confronted within 3 minutes.
6. Able to gain access to facility within 3 attempts, questioned and confronted between 3 and 10 minutes.
7. Able to gain access to facility within 3 attempts, questioned and confronted between 10 and 20 minutes.
8. Able to gain access within 3 attempts – free access throughout questioned once attempting to gain access to critical information or questioned multiple times without an ability to avoid confrontation.
9. Able to gain access on first attempt – free access throughout facility and able to obtain “critical” information. Questioned less than 3 times, able to easily avoid any confrontation.
10. Able to gain access on first attempt – free access throughout facility and able to obtain “critical” information. Left without any confrontation or questioning.
Additional Considerations
Additional Considerations Modifier
Penetration Testing Score
Penetration Testing Score
Notes
Back
Next
Exterior Considerations
Lighting
1. Great Lighting: No points of darkness or “danger areas”
2. Good Lighting: Only points of darkness are in “non-use” areas.
3. Poor Lighting: at least 25% of “danger areas” and points of darkness in at least 25% of “high-use” areas.
4. Inadequate Lighting: at least 50% of “danger areas” and points of darkness in at least 50% of “high-use” areas.
5.Critical Lighting: at least 75% of “danger areas” and points of darkness in at least 75% of “high-use” areas.
Lighting Score
Outside Visibility (Offices)
1. Great Visibility: Less than 10% of offices are visible – visibility from less than 3 angles off campus
2. Good Visibility: Less than 50% of offices are visible – visibility from less than 3 angles off campus
3. Poor Visibility: More than 50% of offices are visible or visibility of more than 25% of offices from more than three 3 angles off campus
4. Inadequate Visibility: More than 75% of offices are visible or visibility of more than 50% of offices from more than three 3 angles off campus
5. Critical Visibility: 75% of Offices are visible from multiple angles off Campus.
Outside Visibility Score
Outside Visibility (Entrances / Egress)
1. Great Visibility: Less than 10% of E&E are visible – visibility from less than 3 angles off campus
2. Good Visibility: Less than 50% of E&E are visible – visibility from less than 3 angles off campus
3. Poor Visibility: More than 50% of E&E are visible or visibility of more than 25% of E&E from more than three 3 angles off campus
4. Inadequate Visibility: More than 75% of E&E are visible or visibility of more than 50% of E&E from more than three 3 angles off campus
5. Critical Visibility: 75% of E&E are visible from multiple angles off Campus.
Outside Vis (Ent / Eg) Score
Concealment Points
1. No Danger Areas: No areas that would permit concealment for nefarious intent.
2. Minimal Danger Areas: less than 5 areas that would permit concealment for nefarious intent.
3. Few Danger Areas: between 5 and 10 areas that would permit concealment for nefarious intent.
4. Excess Danger Areas: between 10 and 20 areas that would permit concealment for nefarious intent.
5. Critical Danger Areas: Greater than 20 areas that would permit concealment for nefarious intent.
Concealment Points Score
Additional Considerations
Additional Considerations Modifier
Exterior Considerations Score
Notes
Back
Next
Tiered Entry and Egress Considerations
Layers of Entrance
1. Secured: Minimum of two layers of access.
2. Neutral: NA
3. Unsecured: Only one layer of access.
Layers of Entrance Score
Barriers to Entry
1. Secured: Both layers have some form of controlled entry.
2. Neutral: Single layer controlled entry.
3. Unsecured: No controlled entry.
Barriers to Entry Score
Personal Presence & Location
1. Secured: Personal Presence during all hours in which employees are present in facility. Presence has ability to communicate with key personnel immediately.
2. Less Secure: Personal Presence during normal business hours. Or presence during all hours without the ability to communicate with key personnel immediately.
3. Unsecured: No personal presence or personal presence less than 50% of normal business hours.
Personal Presence & Location Score
Environmental Design
1. Secured: Environmental design increases security posture.
2. Neutral: Environmental design has no impact on security posture.
3. Unsecured: Environmental design decreases security posture.
Environmental Design Score
Additional Considerations
Additional Considerations Modifier
Tiered Entry & Egress Consideration Score
Notes
Back
Next
Facility Layout Considerations
Accessibility to Critical Areas: (Critical Areas will be determined before the assessment during an interview with Executive Team. Typical areas are Server Rooms, Executive work areas, Payroll and Human Resources and any other areas that should have more tightly controlled access.)
1. Unable to access any critical areas.
2. Able to access critical areas through some form of nefarious means – Presence identified and questioned.
3. Critical areas not publically identified. Free access to at least ½ of the critical areas in question
4. Critical areas publically identified with free access to at least ½ of the critical areas in question OR Critical areas not publically identified with free access to every critical area. No question of presence in areas.
5. Critical areas publically identified & Free access to every critical area. No question of presence in areas.
Accessibility to Critical Areas Score
Danger Areas – Any area deemed a “Danger” to those inside based on entry / egress challenges, lack of ability to secure the area or visibility considerations that greatly add to the risk of the area.
1. 10% or less of the facility is deemed dangerous.
2. 25% or less of the facility is deemed dangerous.
3. 40% or less of the facility is deemed dangerous.
4. 65% or less of the facility is deemed dangerous.
5. More than 65% of the facility is deemed dangerous.
Danger Areas Score
Fatal Funnels
1. 10% or less of the facilities hallways are deemed Fatal Funnels.
2. 25% or less of the facilities hallways are deemed Fatal Funnels.
3. 40% or less of the facilities hallways are deemed Fatal Funnels.
4. 65% or less of the facilities hallways are deemed Fatal Funnels.
5. More than 65% of the facilities hallways are deemed Fatal Funnels.
Fatal Funnels Scorre
Safe Zones – Safe zones dramatically increase the defense posture of a given area, either through multiple safe exit points or a greater ease of defensibility.
1. More than 65% of the facility is considered a safe zone.
2. 65% or less of the facility is considered a safe zone.
3. 40% or less of the facility is considered a safe zone.
4. 25% or less of the facility is considered a safe zone.
5. 10% or less of the facility is considered a safe zone.
Safe Zones Score
Additional Considerations
Additional Considerations Modifier
Facility Layout Considerations Score
Notes
Back
Next
Structural Considerations
Exterior Structure
1. All sides of the exterior structure is of a hardened and protective nature.
2. 75% or less of the exterior structure is of a hardened and protective nature.
3. 50% or less of the exterior structure is of a hardened and protective nature.
4. 25% or less of the exterior structure is of a hardened and protective nature.
5. 10% or less of the exterior structure is of a hardened and protective nature.
Exterior Structure Score
Interior Wall Construction
More than 75% of the interior structure is of a hardened and protective nature.
2. 75% or less of the interior structure is of a hardened and protective nature.
3. 50% or less of the interior structure is of a hardened and protective nature.
4. 25% or less of the interior structure is of a hardened and protective nature.
5. 10% or less of the interior structure is of a hardened and protective nature.
Interior Wall Construction Score
Door Construction
1. All of the facilities doors (internal and external) are protective in nature.
2. 75% or less of the facilities doors (internal and external) are protective in nature.
3. 50% or less of the facilities doors (internal and external) are protective in nature.
4. 25% or less of the facilities doors (internal and external) are protective in nature.
5. 10% or less of the facilities doors (internal and external) are protective in nature.
Door Construction Score
Additional Considerations
Additional Considerations Modifier
Structural Considerations Score
Notes
Back
Next
Critical Area Considerations
Notes
Critical Area Consideration Modifier
Back
Next
Physical Security Considerations
Access Control
0. No Access Control.
1. All points of initial access have single point access control. No additional access control throughout facility.
2. All points of initial access have single point access control & Critical Areas have additional access control.
2. All points of initial access have multi-function access control but Critical Areas do not have additional access control.
3. All points of initial access have multi-function access control & Critical Areas have additional access control.
Access Control Sc
Access Control Active During Business Hours
Please Select
Yes
No
Hours Modifier
Access Control Score
Surveillance Equipment
0. No Surveillance Equipment.
1. Surveillance Equipment covers minimal initial access points and zero critical areas.
2. Surveillance Equipment covers all access points but no critical areas.
2. Surveillance Equipment covers all access points and minimal coverage of critical areas.
3. Surveillance Equipment covers all access points and all critical areas.
Surveillance Equipment Basic Score
Surveillance Equipment Monitoring
Please Select
Surveillance Equipment is not monitored.
Surveillance Equipment is monitored remotely – monitoring is not 24/7.
Surveillance Equipment is monitored 24/7 remotely.
Surveillance Equipment is monitored locally during normal business hours.
Surveillance Equipment is monitored locally during normal business hours & monitored remotely 24/7.
Surveillance Equipment is monitored locally 24/7.
Monitoring Modifier
Surveillance Equipment Score
Additional Considerations
Additional Considerations Modifier
Physical Security Modifier
Notes
Back
Next
Adjacent Organizations Considerations
Notes
Adjacent Organizations Modifier
Back
Next
Risk Matrix
Native Threat Index Score
Security Index Score
Threat Assessment Expert
Please Select
Kevin Parker
Zach Olson
Loyd Olson
Steve Herlocher
Submit
Should be Empty: