1

Appendix BInitial Briefing Template

2

Site X Vulnerability Assessment (VA)

Presenter namePresenter organization

Presenter phonePresenter phone/email

3

Overview

Purpose Scope Assumptions VA Methodology Schedule Questions

4

Purpose & Scope

Complete a VA of Site X Evaluate the PPS as required by <insert

policy reference or other basis> Establish baseline performance of the

system and propose functional upgrades if not effective

5

Assumptions/Limitations (examples)

Uses previously defined threats and assets

Risk level must be less than <specify level>

Considers installed system, not planned upgrades

Limited time for VA—5 days

6

Defined Threat Describe threat spectrum or single defined threat. For example:

Level Tactic Weapons/Equipment Number

Low Theft Unarmed, Hand Tools 1-2, no insider

Medium Sabotage handguns, Hand & Power Tools

2-4, possible insider

High Sabotage Armed, Hand/Power Tools, Thermal tools, Explosive Charges

3-5, possible insider

7

Assets

List assets that are targets of VA: Target 1 Target 2 etc

8

VA Methodology

9

ConceptsDefined protection objectivesPerformance-basedEvaluate PPS

Detection DelayResponse

Analyze integrated system, not individual components

10

Benefits of Performance-based Assessments

Based on performance, not mere presence, of components

Clearly shows effects of vulnerabilities Links solutions to effectiveness Better risk management and resource

utilization

11

Protection Principles

Detection before delay Alarm assessment ends detection Balanced protection Protection-in-depth Immediate response required for critical

assets

12

Relationship of PPS Functions

BeginAction

TaskComplete

FirstAlarm

Detect Respond

T0 A

TC

TTI

Time

Ala

rm A

sses

sed

Ad

vers

ary

Inte

rru

pte

d

Adversary Task Time

PPS Time Required

Delay

13

Analysis

Qualitative or quantitative analysis Performance measure

Interruption, neutralization, system effectiveness, risk

Tools used Data collection Tests Path analysis Scenario analysis

14

VA Schedule

Day 1 Initial briefing Facility tour Workspace setup

Day 2 Collect necessary maps & drawings Data collection—sensors, video system

Day 3 Data collection—entry control and AC&D Begin analysis

15

VA Schedule

Day 4 Data collection—delay and response Finish analysis Prepare briefing

Day 5 Brief results Depart site

16

Questions/Discussion

???