2023-653-E-AMS-CTCH Security Business Consulting-Facility Assessment

Browse Search

P a g e 16 Orange County Facilities Security Assessment RFP#: 367-OC 5403 CTCH Security Business Consulting – www.ctchconsulting.com the decentralized sites. The kickoff meetings would occur through the use of tele/video conferencing with OC stakeholders. Incident Report Evaluations: In preparation for the on-site assessments, the team will gather tactical threat data, inherent threat data and security incident reports in order to create a preliminary threat assessment for each site. The threat assessment will identify tactical and inherent threats that are associated with each site based on services, locality and past incidents; which will be used to support the cost-benefit evaluations for recommended security measures. Tactical threats that will be evaluated are those threats that exist within a one-mile radius of each site. Inherent threats are those threats that are based on the nature of business associated with each site. Threat/Crime/Incident Report data will be obtained by working with OC stakeholders to obtain data that spans over the last three-years. The team would request copies of all incident reports (and supporting documents) that are related to each site under review in an effort to identify site specific security issues. The team will be able to use this data to identify any vulnerabilities that may exist within current policies and procedures, to identify existing vulnerabilities within the stakeholder’s security postures during the on-site assessments and to evaluate the infrequent/seasonal affects that site services have on each site. Most importantly, this data will immediately identify sites that are plagued with higher security risks/threats. Security Policy, Procedure, Training and Operations Review: In an effort to gain an initial understanding of the current CPTED posture, the team will request electronic copies of OC current Security Management Plans, Comprehensive Emergency Management (CEM) Plans and Security Standard Operating Procedures/Quick Reaction Checklists. By evaluating these documents, the team will be able to identify the policies and procedures that are in place and how these policies and procedures support/hinder the security operations at each site. CEM plans are an integral part of organizational training goals. If CEM plans are non-existent or out of date OC could be exposed to high level of security risks due to its operating environments/nature of business. By evaluating the CEM plans, the team will be able to identify how security incidents are addressed and how frequently these CEM plans should be tested/updated; based on each sites risk exposure. To identify OC’s current Security Training Goals, the team would request copies of the current Security Training Plans. By evaluating the current Security Training Plans, the team will be able to measure the personnel competency levels required under the DocuSign Envelope ID: CCAAE303-70FA-49DE-B23A-944301EA0EEB