Security Measures in the Laboratory - Research Paper Example

Report based on security in a CDC laboratory Executive Summary The report provides a clearer picture of the proposed design. The structure chosen for the report and the presentation is a CDC laboratory. Such a facility has security high on the priority followed by the cost of the entire project. The research method used in the report is a secondary approach that uses information from others in the design and describing the components and how they achieve the target of the entire facility. The initial section of the body provides an overview of the layout with clear diagrams that highlight the different designs in the entire facility. The methods of controlling vehicles is deliberated and hydraulic barriers are used in the main entrance and exit to ensure that there is no forced entry into and out of the building. The perimeter fence is also surrounded by a large ditch that can immobilise any vehicles that seek to force their way into the facility. When consideration pedestrian control, turnstiles are used to ensure that no unauthorised access is used. Barbed wire and a large fence on the perimeter ensures that the facility is protected. There are numerous security teams all around to ensure security of the design. Swipe card credential readers are used in the main building to restrict movement of people into levels that they have not been assigned. In addition to this, the main security office and the level three section have biometric sensors that ensure that unauthorised access is limited. Routers with firewalls and an intrusion prevention system are used to ensure the network in the facility is protected from external and internal threats. Table of Contents Executive Summary 1 Introduction 2 Research methods 3 Findings and proposed design plan 4 Planning 4 Site Selection 7 Physical security of the facility 8 Access and circulation routes 8 Vehicle control 9 Pedestrian control 10 Service Control 11 Parking placement 12 Vehicle and Pedestrian Barriers 12 Locking Devices 13 Credentials and readers 14 Communication and software in the facility 14 Control and communication layout 14 Software security 16 Conclusion 17 References 18 Appendix 20 Introduction Laboratory security is not an important factor especially for laboratories that handle contagious or radioactive materials. The risk in laboratories is twofold. First, the risk can be caused by human error. Human error is mostly caused by unauthorized handling of these hazardous materials. The second cause of laboratory breach is intentional sabotage by terrorists or malicious individuals. This means that laboratories need to be protected enough. At the same time, the cost is always a consideration when dealing with security. There are numerous different security measures, and all of them have different costs.[ CITATION Rob13 \l 2057 ] Proper planning involves picking the right amalgamation between security and cost. This paper provides a report on the security measures in the proposed laboratory based on the initial plan provided in the presentation. Research methods When conducting any type of research it is important to utilize a specific methodology. One of the first things that has to be considered is whether to conduct a primary or a secondary study. A primary study is a study that collects information that has not been used in any other study. This type of study that involves collection or raw data, analysis. It is restricted to areas of study that have access to data collection. The alternative is a secondary study. This type of research collects information that has already been used or published by other researchers. This is the easiest type of information that can be collected because it is readily available. It is also inexpensive unlike primary research that requires time and money to conduct. Secondary research is the best type of research for someone who is in still in university [ CITATION NKJ082 \l 1033 ]. For this reason the approach used in a secondary research approach in the development of the laboratory. The second important consideration in any study is whether to conduct an exploratory, explanatory or a descriptive study. An exploratory study is a study that seeks to investigate a phenomenon that has not been investigated by others. It is the most complicated type of research and is mainly left for peer-reviewed journal articles or advanced dissertations. An explanatory study investigates cause and effect phenomenon. This type of study expounds of the exploratory studies done by others. Finally, a study can be descriptive in nature. This involves the description of subject matter adequately using other sources as a point of reference. This is the research approach used in the study. The research is done using books and recognized web sources [ CITATION RPa041 \l 1033 ]. This allows the creation of a report that is well researched and supported by documents. Findings and proposed design plan Planning The planning of a laboratory needs to be done based on the two main security threats that have been highlighted. Internal safety is a consideration while threats from external sources are based on different levels of protection[ CITATION Mes06 \l 2057 ]. The following diagram provides an aerial view of the design of the laboratory. The aerial view shows a compound that has two main buildings. The car park which is a two storey building and the main laboratory that is a five storey building. Security is the main priority for the laboratory, and the compound is heavily secured. Seven different security teams protect the entire compound. The initial security is provided at the entrance. The entrance and the exit are all made up of the top of the line security measures that ensure that the facility is well protected. The design shows two different layers of security. These layers of security are well highlighted in the other sections of the study. The proposed plan is very secure with different measures set to ensure that the greatest security is offered at the site[ CITATION The03 \l 2057 ]. In addition to the aerial plan, there is a vertical plan that highlights the security measures within the main laboratory building. The vertical measures in the organization are made up of different layers that offer security to the people in the organization. In the first place, the car park is simply made up of two storeys that go up but the laboratory is made up of five storeys[ CITATION Moh08 \l 2057 ]. The structure of the main security building is given in the following diagram. The line moving across the entire diagram provides the ground level. It is clear that the main security building has one entry and exit point. The secure entry and exit is the same as the one in the aerial view. The main entrance provides access to the reception area. The security guards that are at this part ensure that everyone is checked when entering the building. This minimizes the security risk that exists. The ground floor is the reception area and the maintaining lounge. Here any visitors can sit and wait for their appointments in the different sections of the laboratory[ CITATION Geo07 \l 2057 ]. This is where the badges are provided for visitors and the corporate officers. The first floor of the building houses the corporate offices. Any administrative, financial or legal offices are housed on the first floor. In addition to this, the main security area is housed on this floor of the facility. There are three other floors in the facility. These are the first underground floor, the second underground floor and the third underground floor[ CITATION Les04 \l 2057 ]. This is important these floors house the laboratories where dangerous and contagious material are held. The greater the level, the more dangerous the materials are. Each of these levels has a security office where the clearance of the individuals is checked when entering and leaving the security room[ CITATION Tho09 \l 2057 ]. The combination of the aerial and the vertical view provides a clear view of the security measures in the organization. Site Selection Selection of the site is based on three main things. The first is the standard of living of the area and the security of the staff in the facility and finally the cost of acquiring the land in the area. There are three main areas considered for the location of the site. These are Detroit, Boston, and Chicago. When looking at land prices, Detroit has the cheapest land. This is because Detroit has been undergoing a decrease in the population due to the failure of many manufacturing firms. Boston has the second most expensive land prices. This is because Boston has had a relatively steady growth rate, and the prices of land have not fluctuated too much. Chicago has the most expensive land prices. This is because Chicago has had the greatest increase in land prices as well as population among the three towns[ CITATION HAE111 \l 2057 ]. The simple solution is that when it comes to cost, Detroit has the most favorable land prices. The standard of living is another significant aspect of the selection of the site. Detroit has the worst standard of living. The Detroit town council has been struggling with providing amenities for decades due to the decline of the main manufacturing businesses. This has led to poor standards of living in the deteriorating neighborhoods. Boston offers a better standard of living. There is a good standard of living in the town regardless of the social class one belongs. This means that both casual workers in the facility and well-paid individuals will have access to good standards of living. Finally, Chicago offers a good standard of living. However, the difference between the rich and the poor is greater when it comes to facilities. However, it is still a lot better than what is being offered in Detroit[ CITATION HAE131 \l 2057 ]. When it comes to the standard of living, Boston offers the closest median standard of living. Finally, the crime rate is another important factor. Since the facility will have its security, the security of the people working in the facility is important in the selection of a site. Detroit has been having a steady rise in the crime rate. This is because many youths are joining gangs due to the lack of employment opportunities. Boston has an average crime rate that is similar to most cities in the United States. However, Chicago has a very low crime rate. The crime rate in Chicago is lower than in all other cities in America. This has been one of the main causes of the high land rates or the high population growth[ CITATION Ric09 \l 2057 ]. Based on the three factors, the tables in the appendix provide the selection matrix used for the site selection. Based on the score sheet used in the study, Boston has the highest total score and Boston is selected as the site for the laboratory. Physical security of the facility Access and circulation routes When it comes to the access and the circulation of the routes in the organization, there are several aspects that need to be considered. First is the main area where the facility will be located. The facility needs to be located close enough to Boston town to enjoy the facility and increase accessibility by the staff while having to be far enough from easy access by all members of the public including malicious individuals. The facility will be located in Boston’s industrial area at the edge where there is limited access to all members of the public. The facility has a very large compound with another large amount of land around. The preferable location is on a slight gradient that means that access can only be found on one road. Having one road means that anyone who wishes to access the area needs to use the main security entrance into the facility. Circulation occurs close to or at the facility. Any vehicles or pedestrians that do not get access to the facility have to turn around and use the same road down the gradient. Those exiting the facility re-join the road while leaving. Circulation within the facility is also limited[ CITATION HAE111 \l 2057 ]. The compound has only one entry and one exit. This ensures that both areas are monitored by the by the security teams at the entrance and exit. The car park is spacious enough to accommodate over 70 vehicles in the parking area. The entrance of the building also has two parts; the first is a security scan while entering the building and a security scan leaving the building. While the circulation of the compound is slightly limited, it is to ensure that there is adequate safety of all in the facility. Vehicle control When creating the facility, one of the main threats is the threat of forceful entry into the compound using vehicles. Malicious individuals or terrorists may wish to gain access to the facility forcefully using vehicles to ram the gate. There are two measures taken to prevent forceful entry into the facility. The first is the perimeter fence around. The perimeter fence is created in a way that limits entry by motor vehicles. First the perimeter fence is made with a stone wall of three feet. In addition to this, there is a barbed wire of four feet that limits the entry by pedestrians. However, a vehicle can charge at the perimeter fence at full speed and access the compound. However, a clever measure has been implemented to prevent this from happening. There is a two feet, and three feet deep trench all around the perimeter fence[ CITATION Ant01 \l 2057 ]. This will immobilize any vehicles that seek to gain forceful entry into the facility. The second measure is protecting the front and exit gates from unauthorized entry and exits. This is done by using barriers. There are three main types of barriers that can be used. The first type of barrier is the commercial barrier that is commonly used in car parks and commercial buildings. This is effective in stopping cars for checks, but cars that seek to force entry into the facility can do this without ease since these commercial barriers are not strong. The second type of barrier is the commercial manual barrier. This has heavy barriers that can stop even a large truck that seeks to force entry into the compound. However, this type of barrier requires manual moving to allow access to authorized personnel and vehicles. This is a limitation since the process of allowing vehicles in and out is quite slow. This limits the access and circulation within the facility. The third are the high-security hydraulic barriers. These barriers offer the effectiveness of stopping moving vehicles while allowing ease of access because they can be lowered and raise using the hydraulic systems[ CITATION Kär08 \l 2057 ]. This is a good way of ensuring that there is adequate security in the entrance and exit while allowing the movement of people and other individuals along the way. The restriction of access to the main building through vehicles is limited to ambulances and fire engines that may be required in cases of an emergency. However, all other vehicles are restricted to the car park. Pedestrian control Pedestrian control is an important part of the entire process of controlling the access and entry or the facility. While barriers are effective in limiting access by vehicles, people are easily able to climb over barriers, and there is a need to limit the access by pedestrians. This is done in two ways. As highlighted above, the perimeter fence is made with a stone wall of three feet. In addition to this, there is a barbed wire of four feet that limits the entry by pedestrians. The barbed wire is made of steel barbs that are used in the military. This is more effective than the traditional barbed wire that is easy to cut or climb above. In addition to this, the perimeter fence is manned by the different security teams that are all around the compound[ CITATION Geo09 \l 2057 ]. They will monitor the fence and ensure that those who breach the perimeter fence are captured as fast as possible. The second way of controlling pedestrians is by limiting access to the entry and exit gates. When considering pedestrian control, the first check will be done at the entrance gate where the pedestrian names will be checked to determine whether they are employees or visitors with an appointment. If cleared the pedestrians will be allowed to head to the main building security site where they will be rechecked along with those who entered using motor vehicles. One important consideration is that the entrance to the main building will review the clearance and of pedestrians along with those who came using motor vehicles[ CITATION Dav09 \l 2057 ]. The check in the main building entrance also provides passes for the clearance levels. Service Control Service control refers to reviewing the different methods that are used to control the access of security and cleaning staff in the building. This part of the company is controlled by the main security office that provides clearance levels or the non-essential staff in the facility. This is important because the greatest risk is posed by the non-essential staff in the organization. In addition to this, the security officers have weapons and combat training that can cause great harm when the wrong people are selected. The chief security office performs a background check on all the people in the organization. This background check is important in ensuring all those working in the facility have no prior convictions[ CITATION Ric11 \l 2057 ]. There are different levels of clearance, and this is determined by the number of years that the individuals have worked in the organization. This is important especially to those who will be working in the second and third level laboratories as cleaning and security guards. This will ensure that there is security in service control in the laboratory. Parking placement Parking placement refers to the parking protocols that are used in the organization. Parking is important because it determines the ease of access organization. The first consideration is the security offered by having the top parking floor occupied by employees in the organization. This ensures that those who are upstairs are well protected. Parking placement is done based on a hierarchy scheme. This is important in ensuring that those in the organization are well protected. All employees are required to park on the first floor of the parking lot except for the security officers. The security officers are required to park at the bottom. The importance of the different parking system is that there is adequate protection of the main building from vehicle bombs[ CITATION Ken14 \l 2057 ]. The design also does not allow an underground parking structure. Vehicle and Pedestrian Barriers Vehicles are the main threat of entry into the compound of the laboratory. There is a need for a way to stop the forceful entry of unwanted vehicles. The best way is by using a hydraulic barrier. Hydraulic barriers offer protection from entry while allowing ease of lowering of the barrier when clearance is authenticated. Vehicles are also prevented from forcing their way into the compound using the fence. This is achieved by trenches around the fence. Any vehicles that try to access will get stuck in the two-foot trench. When it comes to pedestrians, barriers are harder to erect because they can jump over normal barriers. The first gate has a normal turnstile that restricts entry as well as armed security that deter any people on foot. The main entry uses full height turnstiles that limit entry into force[ CITATION GHo00 \l 2057 ]. Turnstiles are relatively cost effective, and full height offer extra security that does not use electricity of other resources. Locking Devices When considering security, it is important to consider the different types of locking devices that will be used. A locking device is a device that offers security for a door or entrance. Standard locks have three main problems. First, the standards locks are easy to duplicate. This makes it easy for people to get access without authorization. Secondly, most standard locks can be easily picked open. This is not adequate security when dealing with security in a high-level laboratory such as the CDC. Finally, standard locks are easily opened using drilling. These vulnerabilities are not acceptable in the project [ CITATION Shi11 \l 2057 ]. The alternative is by using high-security locks that are drill proof, pick proof and patented for restricted duplication. Different sections will use different locks. The administrative offices will use wall mounted locks that limit access to the locks by different individuals. This is an important invention because it ensures that there is safety. The second section is the entrance and exit gates. These will use pick proof padlocks that ensure that no one can pick their way into the compound. Another section that needs unique locks is the security offices, main entrance and exit to the building, elevators and the laboratory levels. This requires key card swipe locks that determine the level of clearance that the individual has been given. The swipe locks are important because only those with the necessary cards will be allowed to gain access to certain sections of the building. The final advance locking device that will be used is a biometric lock that will be used in the third level of the laboratory and the chief security office. Biometric locks offer the highest level of security[ CITATION Jon12 \l 2057 ]. The third level has the greatest contaminants, and hazardous materials and protection is important in this section. The chief security office also has the credentials and cards stored each night as well as the network and database office. These are all sensitive to the organization, and a biometric scan is used for access to this section of the security office. Credentials and readers When it comes to entry, all the doors on the different levels need to be designed with card access that limits access to the facility levels. The turnstiles and elevators only work when the cards are swiped. This limits access to certain sections at the point of entry. Swipe cards are the cheapest method of providing limited access to a building. Different cards will be restricted to different sections of the institution. Visitors can be offered swipe cards with very basic access, and this ensures the security of the laboratory. However, as highlighted, the swipe cards are all given and returned to the entry and exit part of the building. In addition to this, radio frequency identification devices are attached to the swipe cards to give a location of the holders when they are within the building[ CITATION Sto13 \l 2057 ]. Swipe cards are used except in the third level laboratory and the chief security building where biometric scans are used to provide entry. Communication and software in the facility Control and communication layout Communication and control of the entire security system are done from the chief security office. This is the most important part of the security office, and there are armed guards at the entrance. Communication is done in three main ways. The first way is through the public address system that can be heard in the entire facility. This allows messages to the entire facility to be done in real time. The public address system can also be used to communicate to specific levels in the facility. This also provides confidentiality to those with certain levels of clearance. The second is single user communication used by the security officers in the facility. This allows communication with the chief security office to seek the guidance of warn of irregularities that may have occurred in the organization[ CITATION The12 \l 2057 ]. This is important because it offers personal communication with the security team that is important in the case of an attack. The third type of communication is using the virtual private network in the facility. All mobile devices, computers, and portable communication devices use the facilities virtual private network in communication within and outside the facility. A virtual private network is important because it allows monitoring of communication within and outside the facility to ensure that there is no leaking of important information or any plan of an attack on the facility. The virtual private network allows communication between different individuals in the organization. The other aspect is control. There are certain control overrides that exist in the organization. This is the entry and exit gate barriers, the turnstiles in the main building entrance and the elevator access. These can all be controlled by the individual security teams present, or overrides can be used in the chief security control office. This ensures that security breaches are handles, and the facility can be locked from one central location. Apart from communications, there are cameras all over the facility that are constantly monitored by the chief security office[ CITATION Ale11 \l 2057 ]. This allows all things in the facility to be monitored to allow early detection of irregularities. The security measures ensure that there is proper control of the facility while allowing communication through secure methods. Software security Apart from physical security, the facility will also be at risk of attacks from hackers and phishers who want to access confidential and sensitive information from the laboratory. There are several security measures that prevent the access of the facilities virtual private network by hackers. The first is by using firewalls. A firewall is a computer software or hardware that protects computers or networks from hackers, viruses, and phishers. Firewalls are of two main types. The first type is a program that screens what is going in and out of a computer. This is very effective for personal computers, but it is vulnerable in a network. The second type is a hardware firewall that is incorporated in the router used by a facility. The router screens all the information leaving and entering a network to ensure that there is no breach in security. The use of a hardware firewall on its own is not sufficient because attacks can come from inside when employees connect their devices from home. For this reason, a combination of hardware and software is required in the facility. Each computer will be protected with a software firewall while a hardware firewall will protect the entire network[ CITATION JMi13 \l 2057 ]. The CISCO IOS firewall router will be used as the main virtual private network hardware security while personal firewalls that come with Apple, Windows or Linux operating systems will be used for personal security. Firewalls alone are not enough because there are hackers who are skilled enough to bypass any firewall system that is set in place. For this reason, there is a need to use an intrusion prevention system. An intrusion prevention system is a software that examines the information going in and out of a network to determine whether there is any vulnerability of any person entering the network without permission[ CITATION Ear06 \l 2057 ]. In the past, a company would hire skilled computer experts who would scan the network to determine whether there was any intrusion. However, this software is faster and more effective at detecting any intrusion. The intrusion protection software can drop any malicious data that may be targeting vulnerable areas in security. This offers a sieve that sifts through the entire network[ CITATION Mic05 \l 2057 ]. This is the best security measure because it is more advanced than anti-viruses because it prevents all forms of intrusion including hacking. The Intrusion protection system used in the facility will be the CISCO IPS technology. This is the best extra layer is security. Conclusion The approach used in the design seeks to ensure that there is maximum safety at the least cost. Boston is selected over Detroit because of better amenities and better safety for the workers. However, Boston is selected over Chicago due to the cost of the land and running the facility. Security is maintained by separating the car park and the main building. Hydraulic vehicle barriers and pedestrian turnstiles ensure that unrestricted entry is prevented. Different clearance levels for security and service personnel ensure safety from employees. The use of swipe keys is important in the organization because it allows the credentials to be determined by the card readers. The locking devices are different for different sections of the facility. Padlocks are used in the entry and exit gates, but the padlocks are of high quality. Swipe locks are used in the entry to different sections or levels of the main building. However, the chief security office and the third level laboratory will require biometric scans because they are very sensitive. In a laboratory such as the CDC, there is a need to ensure that there is adequate security. Despite this, costs need to be saved in different sections. First, biometric scans are only used in the third level instead of the entire facility. This saves cost because these scans are very expensive. Turnstiles are used instead of pedestrian gates to save on cost. Trenches are used around the facility fence instead of barrier that are only used at the main gate. Apart from physical security, data security is also an important consideration in the organization. Data security refers to securing the network. This is done using router firewall as well as personal computer firewalls. This protects the computer from internal and external attack. In addition to this, an intrusion prevention system is used to ensure that any intrusions that bypass the firewalls are recognized and removed as quickly as possible. Overall all the physical measures and the software measure create a laboratory design that can be used by the CDC is securing important information and harmful contagions from the general public. References CITATION Rob13 \l 2057 : , (Radvanovsky & Brodsky, 2013), CITATION NKJ082 \l 1033 : , (Jha, 2008), CITATION RPa041 \l 1033 : , (Panneerselvam, 2004), CITATION Mes06 \l 2057 : , (Benantar, 2006), CITATION The03 \l 2057 : , (The American Institute of Architects, 2003), CITATION Moh08 \l 2057 : , (Boubekri, 2008), CITATION Geo07 \l 2057 : , (Elvin, 2007), CITATION Les04 \l 2057 : , (Wertheimer, 2004), CITATION Tho09 \l 2057 : , (Russ, 2009), CITATION HAE111 \l 2057 : , (Eiselt & Marianov, Foundations of Location Analysis, 2011), CITATION HAE131 \l 2057 : , (Eiselt & Sandblom, Decision Analysis, Location Models, and Scheduling Problems, 2013), CITATION Ric09 \l 2057 : , (Richard L. Church, 2009), CITATION Ant01 \l 2057 : , (Chrest, 2001), CITATION Kär08 \l 2057 : , (Hess, 2008), CITATION Geo09 \l 2057 : , (Craighead, 2009), CITATION Dav09 \l 2057 : , (David, 2009), CITATION Ric11 \l 2057 : , (Peacock, Kuligowski, & Averill, 2011), CITATION Ken14 \l 2057 : , (Christopher, 2014), CITATION GHo00 \l 2057 : , (Honey, 2000), CITATION Shi11 \l 2057 : , (Chin & Older, 2011), CITATION Jon12 \l 2057 : , (Jones & Bartlett Learning LLC, 2012), CITATION Sto13 \l 2057 : , (Stonybrook, 2013), CITATION The12 \l 2057 : , (The Committee on Prudent Practices in the Laboratory, 2012), CITATION Ale11 \l 2057 : , (Moraes, 2011), CITATION JMi13 \l 2057 : , (Stewart, 2013), CITATION Ear06 \l 2057 : , (Carter & Hogue, 2006), CITATION Mic05 \l 2057 : , (Rash, Orebaugh, & Clark, 2005), Appendix Detroit Very bad Bad average Good Very good score Cost of land 0.5 Standard of living 0.3 Crime rate 0.2 total 1.0 Boston Very bad Bad average Good Very good score Cost of land 0.4 Standard of living 0.4 Crime rate 0.4 total 1.2 Chicago Very bad Bad average Good Very good score Cost of land 0.2 Standard of living 0.4 Crime rate 0.5 total 1.1 Read More