Security assessment frameworks and methodologies

Security assessment is done to provide a picture of a business's security readiness. Only after conducting one can it clearly be seen where the gaps are and what needs to be done to close them. It needs to be determined what security threats are lurking, the areas where one is most vulnerable, and the best ways to mitigate the business risk (Conducting a Security Assessment, 2009). An effective security plan should address the multiple avenues of risk, as threats can emerge from almost anywhere. The first step is to simply acknowledge that there is risk present. Then to take a realistic look at the vulnerabilities and prioritizes efforts to address them (To Secure Your Business, Consider the Access Points, n.d.).

Recently a security assessment was performed at a local methadone treatment center. The goal of a methadone maintenance treatment center is to reduce illegal heroin use and the crime, death, and disease associated with heroin addiction. Methadone is often used to detoxify heroin addicts. The goal of a treatment center is to reduce and even eliminate heroin use among addicts by stabilizing them on methadone for as long as is necessary to help them avoid returning to previous patterns of drug use. The benefits have been established by hundreds of scientific studies, and there are almost no negative health consequences of long-term methadone treatment, even when it continues for twenty or thirty years (Methadone Maintenance Treatment, 2009). Because of the nature of the business that they are in it is very important to make sure that security is as tight as it can be.

During the security assessment, the following hazards and deficiencies were identified: the key control system within the facility is lacking definition and control, the signage at the facility needs to be updated, and the information security processes need to be revisited. Due to the nature of there being controlled substances on the premises it is very important that all of these security issues be evaluated and updated.

This is a relatively new business and some standard operating procedures have yet to be defined and recorded. One of these procedures has to do with the key to the facility. Everyone in the facility has a key. There are six full time employees in the facility. Since the opening of the business there have been a couple of positions that have experienced turn over. No one in the facility is quit sure what happened to those people's keys when they left. Due to the fact that these keys are now missing, it is recommended that new locks be installed and all new keys be issued to the current employees. A key sign-out/assignment system needs to developed and put into place. This would consist of a master key list with each person assigned a specific key and kept by the site manager. New locks for the entire facility along with new keys would run approximately $500.

The next problem that needs to be addresses is that of the signage in both the parking lot and the building itself. The clients of the facility are required to park in certain spaces in front of the building. The security guard that is on duty must record each client's license plate number when they arrive. If the clients fail to park in the appropriate spaces, the guard is unable to obtain the needed information without leaving his post and going outside. This leaves those clients that are inside unsupervised while the guard is outside. There is also a lack of signage inside displaying rules and regulations along with directions. This propagates a lot of unnecessary questions being asked of the surety officer on duty. In order to alleviate these issues it would be essential to place distinct parking signage outside in order to help facilitate clients parking in the correct spaces. It is also necessary to place directional signage within the facility along with general rules and policies. All of these signs together would cost approximately $1,000 to install.

The last security issue that needs to be addressed is that of the security information processes that is in place. As each client arrives at the facility, their license plate numbers are recorded and they are then assigned a number. They are seen by the appropriate medical personnel based upon the order in which they are signed in. Each day a list is generated that contains personal and confidential information on each client. There are currently no processes in place to make sure that this confidential information is not breached. The hard copies of the lists are kept in a desk drawer for the required amount of time at which point they are then destroyed. The solution to this problem would be to install a computer terminal at the security officer's station in which he could utilize to record the required information. A network would need to be installed to link all computers in the office together so that confidential information could be accessed by anyone in the office in a secure and private way. Installation of this type of system would run approximately $5,000.