Physical Security Assessment at Raytheon Company

Company Background and History

Raytheon Company is an innovation and technology pioneer with expertise in security, defense, and civilian markets across the globe. With a background spanning 92 years of development, Raytheon produces advanced electronics, integrated mission systems, and capabilities in sensing, weapons, command and control, intelligence and communication systems, as well as services in mission support.

Raytheon was formed in Cambridge, Massachusetts—home of the Massachusetts Institute of Technology—on July 7, 1922, originally as the American Appliance Company. The founders were Vannevar Bush, who eventually became dean of MIT's School of Engineering; engineer Laurence Marshall; and researcher Charles G. Smith, who worked in the field of electrical properties of gases. Their key innovation was the S-gas rectifier tube, a device that replaced unwieldy batteries used to power home radios. The tube transformed the radio into an economically viable, sought-after device that could be powered directly from a wall socket, making the entire world accessible to Americans in the comfort of their homes.

Raytheon soon took a leadership role in the electronics technology industry. During World War II, Raytheon workers contributed significantly to the war effort. They supplied nearly 80 percent of the magnetron tubes used in U.S. radar systems and radar systems made by the UK, and created several components for critical fuses in antiaircraft weapons and other supplies. After the war ended, Raytheon began offering consumer products, the microwave being among the most well known. Raytheon engineer Percy Spencer discovered microwave cooking when, as he stood near an operating magnetron, a piece of candy in his pocket began to melt. Intrigued, he obtained popcorn—and it began to pop. This discovery led to the development of the modern microwave oven. In the decades that followed, Raytheon representatives would expand on the company's commitment to innovation and technological advancement.

Today, Raytheon maintains its position as a worldwide engineering pioneer, particularly in homeland security, defense, and critical governmental markets. The company works closely with customers in a consulting capacity across an extensive variety of businesses and worldwide markets. As one of the world's largest and most respected engineering and training services providers, Raytheon offers services in more than 100 nations and 28 languages. The company's worldwide presence, strategic focus, scale, and speed are among the best in the industry.

Raytheon Company had annual revenues of twenty-four billion dollars and a workforce exceeding 63,000 employees spread worldwide. With a background of development spanning over 92 years, Raytheon provides integrated mission systems, advanced electronics, and diverse capabilities in sensing, weapons, command and control, intelligence and communication systems, cybersecurity, and an extensive range of mission support services. Riding on the dedicated work and commitment of countless employees across the globe, Raytheon is well positioned to address the needs of its clients in more than 80 nations—presently and well into the 21st century.

Physical Security Vulnerabilities Identified

An on-site inspection revealed the following critical security concerns:

Perimeter Protection: Boundary fencing does not meet required standards. The perimeter fence consists of wired rope, which cannot effectively stop intruders. Installation of cameras, sensors, electrified fencing, and adequate lighting fixtures is currently not feasible under existing infrastructure.

Physical Security Assessment Methodology

Surveillance Coverage Gaps: Cameras are not present on each flight of stairs. Compounds within the company premises lack camera coverage. In the lobbies of certain buildings, cameras have not been installed. Cameras are placed only at the main gate, not at secondary exits. Some entrance buildings have windows on facing walls, making break-ins easier. The two main cafeterias lack security features or surveillance systems.

Inconsistent Technology: Security technology is inconsistent across the entire campus, creating blind spots and complicating emergency response coordination.

Access Control Deficiencies: Some office areas do not adhere to government regulations. Legacy doors do not meet current standards. Badge readers are absent in many access points. Walls are too thin, allowing conversations to be overheard. The facility is required to have CDX-09 locks but currently uses standard padlocks. Ceilings are required to have barred security ceilings but have raised ceilings instead. No motion sensors are installed inside closed areas. The intrusion detection system (IDS) is not installed, and alarms cannot be armed.

Security Clearance and Hiring: Background checks are overly elaborate and tedious, causing delays in hiring security personnel and raising operating costs. Current practice requires security guards to pass through two separate security checks, creating inefficiencies.

A physical security assessment is a comprehensive evaluation of the general physical security posture of structures, offices, and facilities. A qualified assessment evaluates all physical security controls in place at the locations under review, including access control systems, security monitors, CCTV cameras, locks, access badges, fences, security lighting, and other significant features.

The Physical Security Assessment is a non-intrusive walkthrough evaluation guided by the customer's on-site security staff. In contrast, a Physical Attack and Penetration Test is an intrusive evaluation in which security consultants attempt to "break into" the site or office under assessment. The Physical Security Assessment is most effective when conducted in conjunction with a Physical Attack and Penetration Test. Key benefits of professional assessment include the following:

Many organizations never formally assess the physical security controls in place at their facilities. Companies often spend heavily on security systems, yet implementation may fall short of requirements. Improper physical controls are relatively easy to breach. Cameras and alarms may not be positioned in optimal locations and can be easily avoided. Professional assessment uses a detailed, customer-guided methodology to evaluate existing controls and technologies against industry standards.

The following outlines the comprehensive assessment methodology:

Pre-Visit Information Gathering: Before visiting the site, the assessment team requests various reports needed for evaluation. These typically include site and building layouts, documents of current security policies and procedures, procedural forms in use, company phone directory, employee handbook, and other comparable materials. The team uses what is currently available; if certain information is not accessible, that is acceptable.

Staff Selection and Coordination: The assessment team works with the client to identify staff members to be interviewed. The objective is to obtain a solid cross-representation from major support and operating divisions within the organization. This typically includes senior management (CEO, CFO, CIO, etc.), division and department heads, and personnel directly responsible for security implementation, such as building receptionists, security officers, and delivery/receipt staff. The average interview session should last between 30 and 45 minutes.

Recommended Security Improvements

In-Depth Security Administrator Interview: The assessment begins by acquiring detailed information from the facility's security administrator—an officially appointed security chief, facility manager, or individual responsible for security. This session covers numerous aspects of security systems and implementation and typically takes 2 to 3 hours. Following this meeting, the security administrator provides a guided walkthrough of the premises.

Individual Staff Interviews: The team conducts individual interview sessions with each identified staff member. Depending on company size, this methodology may take one, two, or more days. Once interviews are completed, the team conducts thorough assessments of specific zones, including the lobby, loading and unloading areas, and shipping areas. Particular attention is given to areas requiring close monitoring. The team assesses light intensity and coverage during evening hours, particularly in parking areas, boundaries, and open spaces. The team also observes general movement and activity during after-hours and evaluates security features at nightfall.

Initial Findings Presentation: After the site visit, the team meets with the client to provide preliminary findings and observations based on collected data. At this stage, only primary and basic observations can be offered, as comprehensive analysis requires additional time. The team then carries all information to the office to begin formal work on the Security Assessment Report, which involves identifying critical resources, analyzing potential risks and threats, auditing loss history, studying crime potentialities, assessing existing protective efforts, and recognizing shortcomings and improvement opportunities. The report typically takes two to three weeks from the completion of the site visit.

Draft Report and Follow-Up: While drafting the report, the team may identify factors requiring further examination, potentially necessitating revisits to conduct additional interviews or detailed analysis. The team may also request supplementary records or data from the organization. Once the draft Security Assessment Report is completed, it is sent to the client for review. After the client has reviewed the report, the team meets personally or via video conference to discuss findings thoroughly and address any questions or concerns.

Final Report and Implementation Support: After incorporating client feedback, the team prepares the final Security Assessment Report. A formal presentation of the report to senior management can be provided if desired. Upon completion of the evaluation process, the assessment team remains available to assist with implementing recommendations. This assistance can include identifying suppliers and service providers, exploring security solutions, developing security strategies and procedures, training delivery, and various forms of ongoing support.

Alarm System Management: Organizations that deploy alarm anunciators should test them daily for proper function. An alarm system that does not work is worthless to the organization. Facilities should also have an emergency backup generator in case of electrical failure. Effective alert anunciators will report emergencies either to the organization's security station or to local police. Such systems should be protected by the manufacturer's warranty. Office keys should not be given to all staff. Only personnel whose employment duties require office keys should be given access. Personnel responsible for key management should be qualified and maintain records of all distributed keys. Office keys should be marked "Do Not Copy" and should be collected from all employees upon termination.

Restricted Area Controls: Critical premises—areas that must remain accessible at all times, including surveillance stations and emergency service areas—should be confined to authorized staff during normal operating hours. These areas should be secured with locks, fences, and warning signs to keep the general public out. Access seekers should be verified through human or automated security mechanisms. Personnel entering restricted areas should be required to wear identification badges and other forms of identification.

Wireless Security Camera Systems: Wireless security cameras offer numerous options, each with associated costs. The most common choices are black-and-white or color cameras. In most security applications, color cameras are not strictly required. Many wireless security cameras include night vision, allowing footage capture even in darkness. This feature is crucial for organizations needing to capture activity outside their facility during evening hours. Cameras can include motion-sensing settings that activate recording only when motion is detected. Cameras can also pan across a room if necessary. Wireless cameras typically operate on battery power; if not properly charged, footage may be lost. Consider deploying wireless cameras with DC power outlets to ensure continuous operation while maintaining wireless functionality. Placement recommendations include the following:

Perimeter Fencing Upgrades: Upgraded fencing systems provide layered boundary protection. Some boundaries may be equipped with electrical fencing to prevent unauthorized access. Electrical fencing is available in different voltage capacities: some are set to deliver a shock for deterrence without serious injury, while others are designed to incapacitate or be lethal. Low-voltage electrical fencing is used to keep stray animals away. High-voltage electrical fencing is deployed in correctional facilities to prevent escape attempts. Electrical boundaries derive power from batteries or other high-voltage devices present on the premises.

Chain-link fencing is commonly used to reduce costs and for ease of installation. It effectively barriers both people and stray animals. Chain-link fencing is used on athletic fields to demarcate perimeters and keep objects within bounds. Chain-link comes in various sizes, making it harder or easier to climb depending on design. Smaller, thick chain-link that is difficult to climb or cut is regularly used in correctional facilities. Barbed wire is often mounted on chain-link fencing to prevent scaling. The best fencing solution for the organization should be determined through proper evaluation.

Contract Security Services: Security guards can be provided through contracted security agencies. Under a flat-rate contract, security firms dispatch guards on an hourly basis. The fees paid to contract security personnel are managed by the security agency to cover overtime, sick days, and vacations. Security agencies also provide guards with uniforms, badges, and firearms. Insurance and health care become the responsibility of the security agency rather than the organization contracting for services.

Contracting for security services offers several advantages over maintaining an internal security force. Organizations need not bear the costs of recruiting, training, and managing private security personnel. The contracted security firm uses its own staff, financial resources, and assets to provide comprehensive training, which may include stricter trial periods. Security agencies use standard recruitment measures—such as advertising and conducting job fairs—to identify qualified employees and are better equipped to execute critical functions like background verification and record checks. Because the work schedules of contract security personnel are managed by the security agency, facility managers save time on scheduling.

Contract security personnel provide organizations with enhanced security through additional services and staffing, including loss prevention, patrolling, surveillance, and armed security. Contract guards are trained and experienced in monitoring and recording entry and exit times for staff and guests, particularly in sensitive facilities. Many contract security personnel are required to have CPR certification, better positioning organizations to manage medical emergencies. This arrangement ensures that facilities are better equipped to handle incidents such as medical crises.

Streamlined Background Check Process: Current security hiring procedures should be simplified to reduce delays and operating costs. A single comprehensive background check should replace the existing two-stage verification process. A new security agency should be selected that conducts only a single-stage background investigation. Responsibility for historical verification, training, and preparation should be placed on the contracting organization, making the security firm accountable if one of its personnel has a criminal history that poses risk. Alternatively, the organization should contract with local law enforcement for off-duty officers. Police departments provide reliable personnel whose officers have undergone thorough background screening. Such officers bring experience in crowd management and are better equipped to handle crises and dangerous situations.