8.1 Physical Security: Locks, Alarms, CCTV
Key Takeaways
- Physical security works in layers (defense-in-depth) — perimeter, exterior, building shell, and interior — so no single lock, alarm, or camera failure leaves a facility exposed
- Locks are delay devices, not guarantees: pin-tumbler, wafer, lever, and electronic/keycard locks each slow entry differently, and master-key systems trade convenience for concentrated risk
- Alarm systems detect and report — contact switches, motion (PIR) sensors, and glass-break sensors trigger a signal that is only useful if it reaches a monitored central station or a person who responds
- CCTV records and deters but does not physically stop anyone; Florida law prohibits recording in areas with a reasonable expectation of privacy (restrooms, changing areas) regardless of posted notice
- A Class D officer's core physical-security duty on patrol is to verify locks, alarms, and cameras are functioning and report any defect immediately — hardware only works when someone checks it
Physical Security: Locks, Alarms, CCTV
Quick Answer: Physical security is built in layers — perimeter fencing and lighting, exterior doors and windows, locks and hardware, alarm systems, CCTV, and access control — so that no single device failure leaves a facility exposed. A Class D security officer does not design these systems, but is the person who walks the property, confirms every layer is actually working, and reports damage or malfunction before it becomes a breach. No lock, alarm, or camera protects anything on its own; each is only as good as the officer who checks it and the response behind it.
Defense-in-Depth: Security as Concentric Rings
Professional physical security is planned as concentric rings around whatever is being protected, not as a single barrier. The outermost ring is the property perimeter — fencing, gates, natural barriers, and exterior lighting that make unauthorized approach visible and slow. The next ring is the building's exterior shell — doors, windows, loading docks, and roof access points, each a potential entry point that must be locked, alarmed, or both. Inside that is the interior ring — hallways, stairwells, and sensitive rooms protected by additional locks, motion sensors, or access-control readers. The innermost ring protects the specific asset itself: a safe, a server room, a cash drawer, a pharmacy cage. The value of this layered approach is that a single failure — a propped door, a burned-out light, a disabled sensor — does not automatically defeat the whole system, because the rings behind it are still intact. Security officers are trained to think in these rings during patrol: checking the perimeter first, then the shell, then interior access points, rather than assuming one strong front door is sufficient.
Locks and Locking Hardware
Locks are delay devices — they slow an intruder and create the time a monitored alarm or a responding officer needs to react; no ordinary lock is truly "pick-proof" or "unbreakable." Common types include:
| Lock Type | How It Works | Typical Use |
|---|---|---|
| Pin-tumbler | Spring-loaded pins of varying length must align with the key's cuts to release the cylinder | Standard exterior and interior doors |
| Wafer lock | Flat wafers instead of round pins, more compact | Cabinets, desks, vehicle ignitions |
| Lever lock | Levers must be lifted to precise heights by the key | Safes, older mailboxes, some padlocks |
| Deadbolt | A solid bolt thrown into the door frame, independent of the door handle/latch | Primary exterior door security |
| Electronic/keycard | Motor or solenoid releases the bolt when a valid card, fob, or code is presented | Offices, hotels, restricted areas |
Master-key systems let one key open many locks at different access levels, which is convenient for a large facility but concentrates risk: a single lost or duplicated master key can compromise every door under it. Facilities managing master keys track every copy issued, re-key promptly after a loss, and restrict master-level keys to the smallest number of people who genuinely need that access. A security officer who finds a door unlocked that should be locked, a deadbolt that will not fully throw, or hardware that has been tampered with reports it immediately rather than assuming someone else will notice.
Intrusion Detection and Alarm Systems
An alarm system's job is to detect an unauthorized event and transmit a signal — it does not physically stop anything by itself. Common sensor types include contact (magnetic) switches on doors and windows that break a circuit when opened, passive infrared (PIR) motion sensors that detect the heat signature of movement across a room, and glass-break sensors that listen for the specific acoustic frequency of breaking glass. Duress or panic alarms, often a hidden button or foot pedal, let an employee silently summon help without alerting an aggressor in the room.
How an alarm signal is handled matters as much as the sensor itself:
- Local alarm — sounds a siren or strobe on-site to scare off an intruder and alert anyone nearby, but sends no signal anywhere else; if no one is present to hear it, it accomplishes little
- Central-station monitored alarm — transmits the signal to a monitoring company staffed around the clock, which verifies the alarm and contacts the property, the responsible officer, and/or law enforcement
- Direct-connect alarm — routes the signal straight to a police or fire dispatch center, typically reserved for high-priority locations
Security officers responding to an alarm activation follow their post orders exactly: approach cautiously, avoid entering alone if a break-in is suspected, and treat every activation as real until confirmed otherwise — false alarms are common, but treating them casually is how a real intrusion gets missed.
Closed-Circuit Television (CCTV) and Video Surveillance
CCTV documents activity for later review and deters some misconduct simply by being visible, but a camera cannot physically intervene — it only records what an officer, or a monitoring center, later watches or reviews. Modern systems are largely IP-based (network video transmitted digitally) rather than the older analog coaxial systems, and use a mix of fixed dome cameras, bullet cameras for direct-line views, and pan-tilt-zoom (PTZ) cameras an operator can actively control. Effective placement covers entry/exit points, cash-handling areas, parking lots, and blind spots identified during a security survey, supported by adequate lighting — a camera pointed at a dark, unlit area produces unusable footage.
CCTV use carries real legal limits. Florida law prohibits recording video in any place where a person has a reasonable expectation of privacy — restrooms, locker rooms, and changing areas — regardless of posted signage or employer policy; installing a camera in those spaces is a criminal offense, not just a policy violation. Recording audio along with video raises a separate concern: Florida's wiretapping law generally requires all-party consent to record a private conversation, so systems that capture audio (not just image) need proper notice and, in many settings, consent. Officers who monitor live CCTV feeds should know their post's specific review and retention procedures and immediately flag anything suspicious rather than passively watching a screen.
Access Control Systems
Access control restricts who can enter a space and creates a record of who did. Card readers, key fobs, PIN keypads, and biometric readers (fingerprint, palm, or iris scanners) each verify identity before releasing a lock, and most log every entry attempt — successful or denied — with a timestamp. Physical access-control hardware such as turnstiles and mantraps (a small interlocking chamber that only opens one door at a time) prevent "tailgating," where an unauthorized person follows an authorized person through a single valid access event. Security officers supplement these systems by watching for tailgating in person, verifying credentials visually at staffed posts, and escorting visitors who lack their own access credentials.
The Security Officer's Role and Exam Traps
A Class D officer is not expected to design or repair security hardware, but is the human check that keeps every layer functioning: confirming locks actually engage during a lock-check patrol, verifying alarm zones are armed as scheduled, watching CCTV feeds attentively rather than as background noise, and documenting and reporting any defect — a broken light, a propped door, a camera pointed the wrong way — the moment it is found. Common exam traps include assuming a camera or alarm alone prevents crime (it only detects or deters), assuming any locked space is secure regardless of how weak the lock is, and forgetting that recording in a restroom or similar private space is illegal even with a sign posted.
What is the core idea behind a layered, 'defense-in-depth' approach to physical security?
What is the key functional difference between a local alarm and a central-station monitored alarm?
A facility manager wants to install a CCTV camera inside an employee restroom, with a sign posted stating recording is in use. Is this legal under Florida law?
During a routine patrol, a security officer notices an exterior deadbolt that no longer fully throws into the door frame. What is the correct action?