REPORT NUMBER
ATTACHMENT 2: FINDINGS AND RECOMMENDATIONS

1. ACOUSTICAL SECURITY
   
   FINDING: The serviced area did not meet the desired acoustical standards of a sensitive area in that conversations taking place inside the facility could be overheard outside the area without the aid of electronic equipment. Ideally, the serviced area should meet a minimum standard of 45 decibels of sound attenuation over the normal voice frequencies of 300 to 3000 Hertz. This criteria is met when loud speech can be heard, but is hardly intelligible. Normal speech can be heard only faintly if at all with the unaided human ear.
           OR
   when loud speech can be faintly heard but not understood. Normal speech is inaudible with the unaided human ear.
   
   This condition was caused by
   
   RECOMMENDATION_______: Fill all holes in the wall(s) and gaps around ducts, pipes, wiring, etc. with a material equal in strength and density as the existing wall(s).
           AND/OR
   Treat the wall(s) with a sound absorbent material that will reduce sound transmissions down to the desired level.
           AND/OR
   Install neoprene gasketing between the door and the door frame, and install an acoustic sweep at the bottom of the door.
           AND/OR
   Remove the window(s) and fill the resulting hole(s) with a material equal in strength and density as the existing wall. If this is not practical, then cover window(s) with sound absorbent material or heavy drapes.
           AND/OR
   Remove the vent(s) from the door and fill the resulting hole with a material equal in strength and density as the existing door.
           AND/OR
   Install baffling inside the duct(s) on the interior side of the serviced area near the point where the duct(s) exit the area.
           AND/OR
   Extend the walls to the true ceiling with a material equal in strength and density as the existing wall.
   
   
2. PHYSICAL SECURITY.
   
            DOORS
   
   FINDING: The entrance door to the facility did not meet the requirements for a security area in that
   
   RECOMMENDATION __: The entrance door should be of solid wood construction and not less than 1.75 inches thick.
           AND/OR
   The entrance door should be equipped with a built-in Group I combination lock and have an inside escape mechanism.
           AND/OR
   The door should be equipped with a heavy duty pneumatic door closer.
           AND/OR
   Door hinges that are located on the exterior of the facility should be secured by peening the hinge pins, or securing the pins with set screws that are inaccessible when the door is closed.
           AND/OR
   To preclude using the vault-type entrance door for controlling access to the facility, install a day access door between the vault-type door and the interior of the facility. The access door must be equipped with a heavy-duty pneumatic door closer. The access door may be equipped with an access control device for use as a convenience during working hours.
   
   FINDING: The surveyed area was equipped with secondary doors that did not meet the requirements for a security area.
   
   RECOMMENDATION __: Normally there should be only one entrance to a security area. If safety or other considerations require more than one door, only one door should be used as the entrance access control point. All other doors should be designated Emergency Exit Doors and secured from the inside with either bars and brackets, or sliding dead bolts, and/or dead bolt panic hardware. Except for the manner in which they are locked, these doors should be constructed and installed like the entrance door.
   
            WINDOWS
   
   FINDING: The windows of the facility did not meet security area specifications in that
   
   RECOMMENDATION __: All windows should be removed and the resulting openings filled with a material equal in strength and density as the existing wall. If removal is not practical, the windows should be permanently sealed to prevent their being opened. Additionally, the windows must be barred from the outside with hardened steel bars not less than 1/2 inch in diameter. The bars must be welded on center, not more than 6 inches apart, both vertical and horizontal. The bars must be mounted in such a manner so as to prevent their removal without showing physical evidence of such removal.
           AND/OR
   The windows should be made opaque or equipped with blinds, drapes or other suitable covering to preclude optical surveillance.
   
            WALLS
   
   FINDING: The perimeter walls of the serviced area did not provide adequate physical security in that they did not provide a means to detect forced or surreptitious entry.
   
   RECOMMENDATION __: Extend the wall to the true ceiling with a material equal in strength and density as the existing wall. As an alternative, install a wire mesh (9-11 gauge) with openings not greater than 1/2 inch between the top of the existing wall and the true ceiling.
   
           AIR VENTS/DUCTS
   
   FINDING: Unsecured air vents and/or ducts exceeding 90 square inches in diameter exited the serviced facility into uncontrolled areas.
   
   RECOMMENDATION __: Any opening larger than 90 square inches should be protected at the outer face of the perimeter wall by hardened steel bars. The bars should be 1/2 inch in diameter, mounted five inches on center vertically and horizontally and welded at all intersections. The bars should be installed so as to prevent their removal without showing physical evidence such removal. Additionally access ports should be installed to facilitate inspection of any installed security devices and to permit examination of the interior of the vent and duct runs for the presence of unauthorized objects.
   
           INTRUSION DETECTION SYSTEMS
   
   FINDING: The serviced area did not meet the intrusion detection systems (alarms) requirements for a security area in that
   
   RECOMMENDATION __: All openings exceeding 90 square inches wherein one dimension is at least 6 inches in diameter should be equipped with an alarm device of the type approved for use. It should be installed adjacent to the interior side of the perimeter wall. No part of the alarm device or wiring thereto should be located on the exterior side of the serviced facility.
           AND/OR
   All perimeter doors should be equipped with balanced magnetic door switches of the type approved for use.
           AND/OR
   The interior of the serviced area should be equipped with motion detection sensors which have been approved for use.
           AND/OR
   The area between the false ceiling and the true ceiling should be equipped with an approved volumetric alarm system.
           AND/OR
   The area between the false floor and true floor should be equipped with an approved alarm system
           AND/OR
   All windows should be equipped with an alarm system of the type approved for use.
           AND/OR
   The main entrance and interior alarm system should be on a separate zone from all other alarm devices. Alarms on windows, secondary doors, air vents and ducts, and false ceilings and floors should remain in the "secure" mode at all times, even when the area is occupied.
           AND/OR
   The alarm control box should be located inside the serviced facility.
           AND/OR
   Alarm transmission lines that leave the serviced facility must be equipped high line supervision or encased in conduit with standard line supervision.
           AND/OR
   The system should be capable of operating on commercial AC power and equipped with an emergency power system capable of operating for a minimum of four hours.
           AND/OR
   Alarm sensors and control units should be equipped with tamper switches.
           AND/OR
   All sensors in the alarm system should be tested at least once a month. Facility personnel should maintain a detailed written record of such tests. The written record should contain the date of the test, persons conducting the test, persons participating in the test, results of the test, and any corrective actions taken. Any component tested on a daily basis need not be included in the monthly test.
           AND/OR
   A periodic check of the guard force's response to an alarm should be conducted to ascertain whether the response is adequate. Immediate action should be taken to correct any noted deficiencies.
   
   
3. TECHNICAL SECURITY
   
   FINDING: The telephone system servicing the facility did not meet the requirements of a security area in that_______
   
   RECOMMENDATION_______: Remove the currently installed instruments and replace them with single line telephone instruments of the type approved for use, such as the Western Electric Company (WECO) Model 2504BMW. If multi-line service is deemed necessary, current telephone instruments should be replaced with a type approved for use, such as WECO Model 2568HUMW. As an alternative for single line service, any US manufactured instrument can be used in conjunction with a manual disconnect device (plug and jack) fitted with an audible alarm to warn facility personnel that the unused instrument is still connected to the line. Alternative key telephone service can be provided through the use of any US manufactured key telephone in conjunction with an approved type key strip such as the WECO Model 6050 or Model 6051.
   
   Additionally, each telephone instrument handset must be replaced with a handset of the type approved for use, such as the WECO Model G10-F handset. It is not necessary to replace the handset on multi-line instruments equipped with the hold feature, provided that the hold feature is engaged to return all line selector buttons to the up or unused position whenever the phone is not in use, or the instrument has to be left unattended during the course of a telephone conversation.
   
   Further, disconnect and remove the factory installed telephone ringer and install an external non-resonant ringer of the type approved for use, such as WECO Model R1A Telephone Ringer. As an alternative, the factory installed ringer can be used in conjunction with an approved type ringer isolator kit, such as the WECO Model R2, D180414 Ringer Isolator Kit.
           AND/OR
   All telephone wires and or cables servicing the telephones should enter the facility through one opening and placed under control at that point. Each conductor should be accurately accounted for through labeling or log entries. The precise use of each wire should be noted. All unused wires should be stripped, bound together and connected to a low impedance ground.
           AND/OR
   Disconnect and remove the speaker phone. If the speaker phone is deemed essential, insure that it is installed in such a manner that none of the wires or controls servicing the speaker phone leaves the serviced facility.
           AND/OR
   The Key Service Unit servicing the telephone instruments in the surveyed area should be located inside the facility. No instrument serviced by this Key Service Unit should be located outside the security area.
   
           VENTS, DUCTS AND PIPES
   
   FINDING: Metal vents, ducts and/or pipes posed a threat to the audio security of the serviced area in that conversations taking place inside could possibly be retrieved outside the area through the use of electronic equipment.
   
   RECOMMENDATION___: Break the vent, duct, or pipe at a point immediately adjacent to the interior side of the perimeter wall, remove a section of the pipe or vent and replace it with a section of non conducting material. As an alternative, wrap the vent, duct or pipe with a sound absorbent material throughout the length of the run inside the serviced area.
   
            EXCESS WIRING
   
   FINDING: The serviced area contained unused and/or excess electrical wiring (above the false ceiling). This posed a threat to the audio security of the area in that unused/excess wiring provided a ready means to pass classified information to areas outside the security area.
   
   RECOMMENDATION __: Remove all unused/excess electrical wiring from the serviced area.
   
            ELECTRONIC EQUIPMENT
   
   FINDING: The serviced area contained personal radios, tape recorders, etc.      Policy prohibits the introduction of these items into security areas due to their inherent ability to pass audio outside the confines of the secured area, either through component failure, system design or manipulation.
   
   RECOMMENDATION __: Remove all personally owned radios, tape recorders, Televisions, etc. from the serviced area.
   
   FINDING: The serviced area contained a (cover) music system which posed a threat to the audio security of the area because it was not properly installed.
   
   RECOMMENDATION __: Unless the music system is installed to enhance the audio security of the serviced area, it should be removed from the security area.
           AND/OR
   If the cover music system is deemed an operational necessity, it should meet the following installation criteria:
   
   The program source must not be of commercial origin (radio station, Muzak, etc.). If the program source is a tape deck or recorder, it must not be capable of recording (equipped with playback heads only), and should be capable of playing continuously.
   
       All wiring and components of the system must be contained within the security area.
   
      All speakers must be installed without individual volume controls. Balance and adjust the entire system to the optimum level of amplitude for masking.
   
      All cables and or wiring must be shielded or run in electro magnetic tubing (EMT).
   
       Mount the speakers as close to and oriented toward the structure (door, window, utility opening) requiring audio masking.
   
       Have the system inspected by qualified TSCM technician upon completion of the installation and periodically thereafter.