Security Issues Have Been Reported at Federal Buildings

The 1995 domestic terrorist bombing of the Alfred P. Murrah Federal Building in Oklahoma City, Oklahoma, aroused governmentwide concern about the physical security of federal buildings. Protection, Detection, and Reaction are Integral Security Concepts

Countermeasures identified through the risk management process support the three integral concepts of a holistic security program: protection, detection, and reaction. Table 1 provides a high-level description of access control technologies that can be deployed to protect federal facilities. Many of these technologies are mature and have already been deployed in various federal facilities, where their capabilities and effectiveness have been demonstrated. The price for the smart card itself can range from about $3 to $30 each.
What GAO Found

The terrorist attacks of September 11 have heightened concerns about the physical security of federal buildings and the need to protect those who work in and visit these facilities. These concerns have been underscored by reports of long-standing vulnerabilities, including weak controls over building access. There are several commercially available security technologies that can be deployed, ranging from turnstiles, to smart cards, to biometric systems. Although many of these technologies can provide highly effective technical controls, the overall security of a federal building will depend on robust risk management processes and implementing the three integral concepts of a holistic security process: protection, detection, and reaction.