Security Vulnerability Assessment (SVA)

• Document No.

• Audit Title

• Client / Site

• Conducted on

  Date

• Prepared by

• Location
  Address

• Personnel

Site Details

• Site Address & Phone Number
  Address

• Site Description & Type Of Facility

• Number Of Employees

• General Plot Map

  Drawing

• Location Of Site

  Urban

  Suburban

  Rural

• Socioeconomic Environment

  Residential

  Industrial

  Commercial

  Agricultural

• Area Crime Rate

  High Risk

  Med Risk

  Low Risk

• Loss Event History (Internal/External Theft, Burglary, Robbery, Vandalism, Property Loss, Crimes Against Persons)

• Local Law Enforcement Contact (Dept, Phone, & Address)

• Dept Distance From Site

Perimeter Fence

• Does the site have a perimeter fence, wall or other physical barrier around facility?

  Yes

  No

  N/A

• Is the fence line in good repair with no holes, areas where ground was washed away, or broken barb wire strands/arms?

  Yes

  No

  N/A

• Is a "clear zone" maintained around fence line with no debris or other vegetation that could block view or allow undetected intrusion?

  Yes

  No

  N/A

• Are "No Trespassing" signs posted along the perimeter at 100' intervals or a minimum of 3 signs per side?

  Yes

  No

  N/A

Required Signing

• Does the site have "No Weapons" signing posted at entry points?

  Yes

  No

  N/A

• Does the site have "No Smoking" signing posted at entry points?

  Yes

  No

  N/A

• Does site have "No Soliciting" signing posted at entry points?

  Yes

  No

  N/A

Gates

• Are gates in good repair and function properly?

  Yes

  No

  N/A

• Are gates motorized?

  Yes

  No

  N/A

• Does the site have rail road gates?

  Yes

  No

  N/A

Employee/Visitor Parking

• Is a designated Employee Parking Area & Visitor Parking area established?

  Yes

  No

  N/A

• Are employee personal vehicles parked in loading areas, shipping/receiving areas or other unauthorized areas?

  Yes

  No

  N/A

• Is there adequate lighting in the parking areas & building exterior?

  Yes

  No

  N/A

• Is the Visitor Parking Area signed as required?

  Yes

  No

  N/A

• Is a dedicated Employee Entrance used?

  Yes

  No

  N/A

• Type of Employee Entrance security used?

  Select Open/Unlocked Card Access Key Control Biometric Man-Trap (Unlocked exterior door with locked interior door) Turn Stiles

  • Open/Unlocked
  • Card Access
  • Key Control
  • Biometric
  • Man-Trap (Unlocked exterior door with locked interior door)
  • Turn Stiles

Visitor Security

• Does the building have a Visitor entrance?

  Yes

  No

  N/A

• Is the Visitor entrance secured?

  Yes

  No

  N/A

• Type of Visitor entrance security?

  Select Open/Unlocked Card Access Key Control Biometric Man-Trap (Unlocked exterior door with locked interior door) Turn Stiles

  • Open/Unlocked
  • Card Access
  • Key Control
  • Biometric
  • Man-Trap (Unlocked exterior door with locked interior door)
  • Turn Stiles

• Is a Visitor Sign-In log in use?

  Yes

  No

  N/A

• Are Visitors required to wear a Visitor Badge while on site?

  Yes

  No

  N/A

• Do new Visitors attend safety orientation detailing emergency evacuation, staging areas, alarms, hazmat, required PPE use, etc?

  Yes

  No

  N/A

Key/Access Control

• Does the site maintain a Key Log or have access to Card Access reports?

  Yes

  No

  N/A

• Are interior office & shop/storage room doors kept closed and locked when not occupied?

  Yes

  No

  N/A

• Are offices, storage areas, shops, etc signed as required?

  Yes

  No

  N/A

• Does the site have a secured IT/TELCOM room?

  Yes

  No

  N/A

• Are Chemicals of Interest (COI) secured as required by Department of Homeland Security (DHS)?

  Yes

  No

  N/A

Intrusion Detection System (IDS)

• Does the site have a working burglar alarm system? If YES, enter type of system & monitoring company name

  Yes

  No

  N/A

• Enter date of last full system test

  Date

• Does the system provide full coverage of site building(s)?

  Yes

  No

  N/A

• Does alarm have a battery backup in case of power failure?

  Yes

  No

  N/A

• Does alarm have cellular or other RF backup in case of phone line loss?

  Yes

  No

  N/A

• List managers/employees on call list

• Monthly monitoring fee

• Contract expiration date

• Attach picture(s) of alarm keypad & main panel

  Media

CCTV

• Does the site have a functioning CCTV system?

  Yes

  No

  N/A

• Type of system

  VCR

  DVR

  Networked DVR

  NVR

• Recording Capacity (TB and days)

• Does the system have the proper date & time?

  Yes

  No

  N/A

• Number of cameras

• IP address if networked

• CCTV viewing/client software

• Attach picture(s) of DVR and camera example

  Media

• Map of CCTV cameras

  Drawing

Cash Controls

• Does the site maintain any cash? If YES, how is the cash secured?

  Yes

  No

  N/A

• Amount of cash on hand

• List employees who have access to cash

Segregation Of Duties (SOD) Controls

• Are accounts payable & purchasing duties kept separate? If YES, describe control process. If NO, note required controls

  Yes

  No

  N/A

• Does the site process payments and/or pay vendors locally? (i.e. company checks or local payroll processing)

  Yes

  No

  N/A

Materials Shrink

• How are raw materials damage or shrink accounted for? Note process & controls

• What is the YTD shrink?

• Does the site have a dedicated process for processing open raw materials bags to prevent cross contamination?

  Yes

  No

  N/A

Site Access

• Does the site restrict truck access to shipping/receiving?

  Yes

  No

  N/A

• Describe controls to verify driver before access is granted

Receiving

• Does site have a dedicated process for receiving deliveries? If YES, describe controls. If NO, detail required controls

  Yes

  No

  N/A

• Does site have a dedicated process for receiving smaller packages or FedEx/UPS deliveries?

  Yes

  No

  N/A

Shipping

• Does site have dedicated process for verifying outgoing shipments?

  Yes

  No

  N/A

Site Details

• Add location
  Address

• Site Manager name & contact information

• Site Map

  Drawing

• Attach picture(s) of off site location

  Media

Security Equipment & Controls

• Does the offsite storage have secured entrances/exits?

  Yes

  No

  N/A

• Does the offsite storage have an Intrusion Detection System?

  Yes

  No

  N/A

• Does the offsite storage have a CCTV system?

  Yes

  No

  N/A

• Provide details on inventory control & management (Cycle counts, physical inventory, unannounced counts, etc)