2023-653-E-AMS-CTCH Security Business Consulting-Facility Assessment

Browse Search

P a g e 30 Orange County Facilities Security Assessment RFP#: 367-OC 5403 CTCH Security Business Consulting – www.ctchconsulting.com business that each site conducts and based on temporal and spatial analysis of foot traffic associated with each site. By publishing and comparing these security risk levels, the team can help OC prioritize security mitigation efforts in order to correct security vulnerabilities in the form of a mitigation matrix (Critical, High Priority, Moderate Priority, Low Priority or Administrative in Nature). A chart ranking all sites by Final FSL ratings and security risk ratings will be published within this section of the Master Plan in an effort to enable OC to prioritize security funding and create a future assessment schedule. Administrative Vulnerabilities: Based on past assessments, the team understands that each site could have different security requirements and that administrative polices/procedures are the back bone of all security programs. These policies/procedures help publish security roles, security role competencies, security response procedures, incident reporting processes and outline administrative review processes. Within this section, the team will publish administrative vulnerabilities based on priority and will publish mitigative recommendations (to include cost) that will help reduce security risk associated with administrative vulnerabilities. The team will recommend administrative plans and training that would be applied through the use of ‘Leverage’ in an effort to reduce security administrative risks across each areas operating environment; and will then focus on ‘Phased Mitigation’ strategies (to include cost) which would reduce security risks to even lower levels. Physical Security Vulnerabilities: The team realizes that as it completes the on- site assessments different physical security vulnerabilities will be identified. These physical security vulnerabilities will more than likely be the result of original site design flaws, changing industry CPTED guidelines, changing site requirements, the identification of new threats and/or due to degradation of physical/electronic security components. The team would publish a physical security mitigation priority matrix that would be based on the overall security risks ratings. Physical/Electronic Security recommendations would be addressed through ‘Leverage’ methods and through the use ‘Phased Mitigation’ practices; and would also outline cost estimations associated with recommendations. 3 Year (36 Month) Schedule: The 3 Year (36 Month) Schedule would be used to implement and monitor security vulnerability mitigation efforts. The first 1 to 3 months of the schedule would outline all ‘no cost’ Administrative Recommendations that should be implemented. Within a parallel timeline of 1 – 6 months all Administrative Recommendations that have a cost association that should be DocuSign Envelope ID: CCAAE303-70FA-49DE-B23A-944301EA0EEB