An outline for a physical security design should include program categories and the necessary countermeasures for each. What category do locks and access controls belong to?

A.
Assessment

B.
Deterrence

C.
Response

D.
Delay

Explanation:
D: The physical security program design phase should begin with a structured outline that lists each category of the program: deterrence, delaying, detection,
assessment, and response. The outline evolves into a framework, which is fleshed out with the necessary controls and countermeasures. The intent behind the
delay category is to stall intruders to help ensure they get caught. Examples of countermeasures that belong to this category are locks, defense-in-depth
measures, and access controls. Other types of delaying mechanisms include reinforced walls and rebar. The idea is that it will take a bad guy longer to get through
two reinforced walls, which gives the response force sufficient time to arrive at the scene and stop the attacker. Of the categories listed in the answer options,
detection is missing. Detection refers to the determination or awareness that an intrusion has occurred. Examples of detection controls include external intruder
sensors and internal intruder sensors.
A is incorrect because assessment countermeasures include security guard procedures and communication structure (calling tree). When an incident occurs,
the assessment team (or security guard) is first on the scene to determine what has taken place and what needs to happen next; for example, a call to the police
or fire station, management, a security service, etc. The assessment determines what type of response is needed.
B is incorrect because deterrence refers to those controls that will discourage potential intruders from conducting criminal activity. Examples include fences,
warning signs, security guards, and dogs. Another example found in residential areas is a “Neighborhood Crime Watch” sign that is erected in neighborhoods or
even in home windows. The idea is that a casual intruder will be less likely to attempt an intrusion if he thinks that the neighborhood is making a concerted effort to
watch for criminals and that he may be caught.
C is incorrect because response refers to an organization’s processes and the personnel it assigns to react to intrusions and disruptions. Controls in this
category include a response force, emergency response procedures, and police, fire, and medical personnel.