I have no idea where to even ask this so if /k/ aint it, please have mercy on me, mods.

In a nutshell, I need information regarding physical security/risk/vulnerability assessments for large private organizations and communities. What do they typically entail? How much do they typically cost? Is there reading material out there about these assessments?

I work and worship at a very large church here in the south and we’ve started the process of looking into our physical security here on the church campus and what we need to improve. Many of these tasks have fallen on me and if I’m being honest I feel like I don’t know enough about this subject and I’d like to educate myself before we spend a bunch of money on one of these companies for their assessments (they’re talking really high sums of $$$ just to look at our current security stance).

I’d like to see if there’s information out there about security assessments so I can read up on them.

Thanks for reading. Sorry if this is OT, didn’t know where else to ask.

>>64017517 (OP)
Google it.

>>64017517 (OP)
lol fuck your culty megachurch

>>64017517 (OP)
What do you mean, assessment? Make sure your security cameras are modern and monitored. Put someone in charge of security who is former law enforcement or a combat veteran. Start a program where members sign up to volunteer on a physical security team. Make sure they have a concealed weapons permit and design some kind of training course / competency test based on the FBI Q qualification for pistol / carbine. Rent a range out for a day and have quarterly training sessions. Hire an accredited instructor if you have to. Make sure there are at least a 1 to 100 ratio of armed concealed security during service. Use radios for communication. There should be patrol rifles of some kind available in the security room for active shooter threat response. Use rapid deployment “security” banners for anyone carrying concealed so that nobody gets confused who is the good guy in the event of an active shooter.
https://dsmsafety.com/product/security-yellow-green-safety-banner/
Advise your congregation that there will be armed plain clothes security in the event of an emergency and they will deploy the banners. Check large bags and backpacks and people who you think are suspicious. That’s about it. It’s very simple.

>>64017564
>Make sure your security cameras are modern and monitored.
this is the only non retarded thing in your entire post. everything after is is both stupid and a huge liability

>>64017517 (OP)
The consultants are probably bilking you, but you also don't know shit and should assume that any specific ideas you get from /k/ are wrong.

Reach out to your PD, Sheriff's Department, or FBI office and they'll probably have a pamphlet to point you in the right direction. I don't why your Church put someone who doesn't know jack about shit in charge of this, but that probably means you are in no danger and are spending money for no reason.

>>64017517 (OP)
>What do they typically entail?
Training, Checklist, Certifications, sometimes college degrees and military, security and police experience.
With hardware your mostly looking for security cameras and someone actually watching them. This includes actual storage of the recordings at secured placed at site.
>Guns
If someone's going to be carrying a gun, you want them to have their Armed Guard II on them while at work. You'll also want to inform your local PD about who you are the level of Security you'll be providing.
>security assessments
Basically doors with locks that aren't falling apart and windows. This includes unobstructed fire exits and fire extinguishers. They also want to see protocol on how you deal with emergencies.

t. airport security

>>64017615
>I don't why your Church put someone who doesn't know jack about shit in charge of this
It's probably a mega church, they never look for qualified people to save money.

>>64017580
This.
All this memeing about tactical combat bullshit
Not one single mention of auditing who has keys

>>64017657
Churches fall into two categories: they're either rich as shit megachurches, or they're dilapidated shitholes that depend entirely on volunteers for nearly everything, including things like fixing the roof, because they can't afford to hire anyone for anything.

lol, just make some shit up.
>yeah we installed double-length crossbolts in all the doors and set up IR floodlights. we've also contracted out with a security company to provide 24/7 on-call support
people talking about "active shooters" or whatever the fuck are high on crack. the only thing you actually need are cameras, so that when you get robbed or arsoned you can send the footage to your insurance company.

>>64017580
>everything after is is both stupid and a huge liability
NTA but it's actually quite good until there's an actual shooting and the cops start being nosy. Because that's when the stuff becomes a liability.

>>64017564
Autist like you are unemployable

>>64017695
Because the doofus that becomes a rentacop is more likely to rough up grandma or shoot himself in the leg. If you want to go that route, go get an off duty cop and pay the bribery rate that any other big event has to.

>>64017695
>NTA but it's actually quite good
it's not, and anyone with half a brain would dismiss that idiot for having such a huge emphasis on shooting

>>64017517 (OP)
Make sure the security cameras are working. Make sure any area that humans can be in is illuminated (thieves love the dark). Make sure you can lock the entrances, lock any rooms with key infrastructure (don't want a vandal cutting all the power), and lock any rooms with valuables; furthermore, keep track of who has keys for anything locked. Make sure that you guys are up to date and up to code on carbon monoxide detectors, smoke detectors, fire hydrants, fire alarms, etc.

>>64017710
It is though. It will succeed at providing attendees and staff with a misplaced trust in the "security" they are being provided.
>>64017705
If the doofus is a regular from the church he won't be violent against other regulars, that's a pointless worry. He will shoot himself in the balls given a sufficient amount of time spent unsupervised, however. Bribing an actual cop is just as much of a liability if nothing is square and official.

>>64017725
We're talking about an Audit dude, firearms shouldn't even be on the list

>>64017725
No, retard. I'm talking about how big events are forced to hire off duty cops. It's basically grift by the city. I don't mean to actually bribe cops, I mean to pay the rate to have an off duty cop be there.

Even then, that's way down the list of priorities compared to knowing who's supposed to lock up, making sure alarms work, having cameras and storage, keeping the parking lot well lit.

Having a guy with a gun around for an exhorbitant rate is one of the last things you need to concern yourself with.

>>64017739
It's probably some backwoods mega church built on the county line, Alabama has a shit of those

>>64017735
Yes, but the first anon originally went on a tirade on preparing the congregation against a potential attack and with minimal 3rd party professional expertise involved, not advice on how to successfully get audited.
>>64017739
So things ARE square and official faggot. And why are you raving about actually making the congregation safe ? Can you not read ? That was not the area of excellence I purported to it. Sorry for that last sentence, I'm ESL.

>>64017725
My reaction to seeing a church as armed to the teeth as that anon wants would be "This place is ghetto as hell, I'm never coming back."

>>64017769
But you would FEEL a sense of SAFETY with an armed man behind you while you sing an ave maria wouldn't you ?

>>64017792
No. Because I know the kind of dumbasses that become security guards.

>>64017792
>But you would FEEL a sense of SAFETY
With some obese autist breathing down your neck as he finger fucks his trigger guard

>>64017808
>I know
Well most churchgoers don't, no problem.
>>64017816
The original poster proposed a 1 to 100 ratio, so while you would be unnerved in this situation, 98 of your fellow worshippers would not.

>>64017832
You're as retarded and unemployable s he is if you think it's good security theater, and not a hoe scaring waste of money.

>>64017869
>if you think it's good security theater, and not a hoe scaring waste of money.
But I don't. Your reading comprehension is just absolute horseshit.

>>64017895
You are literally arguing that it makes people feel safe - that it's good security theater. Do you not recognize your own argument?

>>64017904
No I don't. Because you're baselessly equating making people feel safe implies the security provided is good. You're equating feeling to fact, which I have not done. But I did say the first anon's recommendations would excel at making churchgoers feel safe during events.

>>64017933
That's security THEATER. Security THEATER are measures that make people feel safe or look like they're doing something, where it's unclear it's actually making them safer. Read the words in front of you.

>>64017517 (OP)
Infosec anon here - what you're asking is frequently included with penetration testing. Find a Cybersecurity consulting firm and talk to them.

>>64017958
If that what you mean by theater then yes, I believe it makes for a good security theater. You fail to consider the public at those events : it's pretty much going to be fudds. Religious to a degree, but fudds. Fudds all the way down. And soccer moms. Those types would feel safe with armed retards behind them for no good reason because they're easily convinced that it actually does make them safer.

>>64017517 (OP)
>(they’re talking really high sums of $$$ just to look at our current security stance).

Pretty much certain they are gas-lighting you with FUD and I can't imagine they'd be able to tell you anything you haven't figured out.

"Keep doors locked and make new keys and do Key Control, that will be $5,000 plus tip and travel time".

Mostly they wont be able to do anything but HR Cunt take on real shit, like who is actually a threat, because it will be politically incorrect.

98% of Security anything is run and done by lazy retards, and any Security firm will blow hot air up your ass. Find one of these companies existing sites and see what goes on.

I'd say the real Risk/Threat has to do with your church's politics, which outsider wont address.

>physical security, wut do
Nothing posted so far is even close. Lots of keyboard warriors, lots of shitty ideas.
OP, you're facing a field that's deep in domain knowledge and remarkably broad.
>doors
>locks
>access control (keys & key cards)
>LPR at all ingress/egress points
>auditing
>cameras
>look to federate (magic term) your cameras & LPR to local PD / Sheriff
>monitoring
>procedures (you know the difference between lockdown and lockout, right?)
>rules of engagement
>table top exercises
>simulations up to and including Simunition-style events
>executive buy-in
>budget
>any two-man areas in the church? (maybe where the cash is kept? maybe main entrance to daycare / bible school?)
>resources (people and money)
>trusted resource(s) to install all this shit
That's just a start.
But the key is to get started. Don't suffer from analysis paralysis. Perfect is the enemy of good. Start now. Do what you can, identify where you are short, seek solutions. Realize there is no "done".
>very large church
If that's true, your congregation probably has resources you don't know about. Put a note in the bulletin. Go to the Men's and Women's bible studies. Get up, ask for help. Not "join muh committee" but legit domain expertise. Look for physical security types, executive protection, low-voltage installers. Leverage your resources.
t. in the access control / video surveillance field

>>64017517 (OP)
dont even use consultants. its so basic a child with a crayon can do it for you. high fences with razor wire on top. surveillance cameras. doors with passcodes on them. at least 2 guard tower structures. entry control point with armed guards. whats to consult? add duel layer of fence with dogs patrolling the middle. add a crocodile moat and drawbridge if budget permits. Saddam had all this.

>>64017580
Ok retard. I worked security for a 20,000 member church with 4 services weekly and that’s exactly how we did it. Not everyone working security was armed but if you were you had to go through a training course, have a valid ccw, and prove you were competent with a firearm and trained for emergencies. If you don’t think people who concealed carry are capable of defending someone in an emergency then you don’t believe in concealed carry in the first place. Cops take hours to show up. And every church I’ve been to already has a massive portion of the congregation who concealed carry as it is. The point is to recruit them so they’re actually volunteering vs paying off duty cops hundreds of thousands of dollars a year. Cops are more likely to shoot the wrong person and cause collateral damage than your average concealed carrier anyway. They have net zero firearms training and mag dump everything.

>>64020290
>Cops are more likely to shoot the wrong person and cause collateral damage than your average concealed carrier anyway

I did a bit of this sort of thing a little while ago. It can be a little difficult to find a company to do it just due to the different terms that can be used to describe it - physical penetration testing (don't laugh) and physical security audits are probably the closest.
It's not cheap to get someone who's good at it.
There's also not much info and reading around on it. What I did was largely learned on the job as I'm a locksmith by trade. Seeing how people break into places and what needs to be fixed. Access control and camera setups etc mostly just need common sense, thinking like a smart criminal and picking blind spots, making sure access passes are restricted to their appropriate areas etc.

Cheap isn't good, and good isn't cheap. Would take me a full day just to audit the locks and key system of a medium sized office building, and that's not to fix the problems, just to go around and see what problems there are. I almost always found something though. Camera systems typically aren't that important unless there is 24/7 onsite security. Alarms are great but they're typically easy to defeat and often broken too.

>>64018920
>lpr
What the fuck is license plate recognition going to do? Alert the repo man that someone hasn’t made their car payment? Get someone arrested for a bench warrant? I already said hire someone who is ex law enforcement or combat veteran who knows physical security to run the thing and then use volunteers for the rest. You could outsource simunitions training for your security team but it would be very, very, expensive. The rest of it is just procedures which should be planned by someone who actually knows what the fuck they’re doing, not someone who comes on the internet to ask for advice. There are enough people who already work in law enforcement / security / military in the congregation to form a decent volunteer team as long as they’re overseen by someone who is competent and paid specifically to manage church security. You’re not going to get around paying someone with expertise, but it’s better to have them employed by your church full time than waste a shitload of money on consulting firms and off duty cops.

>>64020295
You’ve never watched police activity or looked at FBI shooting statistics for concealed carriers vs police officers, have you? Cops have qualified immunity and unlimited tax payer money to pay for wrongful deaths. Your average citizen is much less likely to dump a magazine into a crowd of innocent bystanders than a police officer. But keep going, I’ve only worked in this exact scenario as a volunteer and in executive protection as my full time job. If you can pass an FBI Q qualification you are more than capable of defending human lives in an emergency with a firearm. It’s one of the most extensive firearms quals in law enforcement outside of air marshal / secret service. You can’t fake a passing grade. So no, it’s not bubba with an itchy trigger finger. The point is to weed those dudes out.
https://youtu.be/eEFdvpEo8O4?si=HI04tfZ7bQjiEE7Z

>>64017517 (OP)
>In a nutshell, I need information regarding physical security/risk/vulnerability assessments for large private organizations and communities.
Simple answer, most places don't give a shit and will go with the lowest bidder so they can have insurance cover the loss.
>I work and worship at a very large church here in the south and we’ve started the process of looking into our physical security here on the church campus and what we need to improve.
If it's a construction site, get cams for every entrance, one for the materials, and maybe one armed guy that patrols the area overnight until the workers show up if it's a really bad spot, you can either contract a remote security company or have someone who works with you already do the cams provided they can pay attention long enough.
Also, make sure everything is fenced, wont always keep people out but makes it clear they shouldn't be there, and expect to have to follow up with the police to get anyone that stole stuff since they have dogshit response times across north america to anyone calling in from security companies.
t. remote security

>>64020295
He's right though. The entire culture of almost all modern police forces is around "magdump first make excuses later", that's literally their incentive structure. They are almost 100% perfectly shielded from all liability at multiple levels, not just in court but even if they don't manage to get immunity there somehow their unions have their backs. The "warrior cop" mindset is all about how everyone is constantly trying to kill them and they are the thin blue line between anarchy blah blah. If you spend decades doing that then the habits aren't breaking.

Civilians, even very well trained civilians in a security field, actually have to think about consequences, and rightfully so. Incentives. That said:
>>64020290
>>64017564
Not talking about insurance is kind of a surprise, for any serious organization that's going to be a big driver. There are real standards for security and liability and seeking information from your carrier should be part of your initial pathfinding (and "we need to find a different carrier" could also be part of the answer). Don't wait until after you've spent a lot of money.

>>64020374
>The entire culture of almost all modern police forces is around "magdump first make excuses later",
you get all your info from youtube videos