Site & Facility Design — CISSP Study Guide

Bundled into the existing Certified Information Systems Security Professional premium course — no separate purchase.

Included in this chapter:

Strategy	Design goal	Typical design cues	Failure it prevents
Natural surveillance	Make legitimate occupants able to observe the space without effort	Window placement, lighting, clear sightlines, low landscaping	Offenders acting unseen in blind spots
Natural access control	Channel movement through deliberate, limited entry points	Defined paths, fencing, gates, landscaping that steers approach	Unrestricted or ambiguous approach to the asset
Natural territorial reinforcement	Signal ownership and that the space is watched and cared for	Signage, boundary markers, transitions from public to private space	Spaces that read as unowned and therefore safe to misuse
Maintenance	Sustain the cared-for appearance over time	Upkeep schedules, prompt repair, removing graffiti and overgrowth	Visible neglect that signals no one is paying attention

Cheat sheet

Physical security is layered defense-in-depth, with the site as the outermost ring
Design the environment first so purchased controls reinforce a plan, not patch a bad site
CPTED designs the built environment to reduce both crime and the fear of crime
Natural surveillance makes legitimate occupants able to observe a space without effort
Natural access control channels movement through deliberate, limited entry points
Natural territorial reinforcement signals ownership so a space reads as watched
Maintenance sustains CPTED because visible neglect invites intrusion
In CPTED, "natural" means surveillance and access control as a by-product of layout
Site selection weighs hazards, surroundings, and visibility
A high-value facility is usually safest when it does not advertise its function
NIST PE-23 requires planning the facility location considering physical and environmental hazards
NIST PE-18 places system components to minimize damage and unauthorized access
Defensible space arranges the facility as concentric zones of decreasing public access
Put the secure core at the interior, never against an exterior wall or public corridor
For a new facility, assess site and hazards FIRST, before specifying controls
Site and facility design stays at the layout altitude; specific controls are a separate subtopic

Unlock with Premium — includes all practice exams and the complete study guide.