5.3 Plans, Schematics & Environmental/Site Factors

Reading Plans, Schematics, and the Site You Actually Walk

Drawings tell you what someone once intended. The site tells you what is true tonight. Independent OpenExamPrep teaching for published PSP Domain 1 Task 4 knowledge on plans, schematics, and environmental factors is that a vulnerability assessment reads floor plans, reflected ceiling plans, door hardware schedules, riser diagrams, device legends, and north arrows, then walks the ground because as-builts lie when they are not updated. Fire-egress overlays and security intent collide on doors. The parcel's location, grade, lighting, landscaping, entrances, and loading docks create hiding spots and approach paths no interior door schedule will mention.

Floor plans

A floor plan shows rooms, doors, occupancy labels, and often wall types. Use it to locate critical assets, to count openings into a suite, and to see whether a pharmacy, cage, or data hall has a back door the lobby story omitted. Confirm scale and revision date. A plan marked permit set 2019 is a hypothesis. Walk every door into a vault or mantrap even if the plan shows one. Occupancy labels drift: a room still titled storage may now be a pharmacy anteroom or a cage. The plan is a map for the walk, not a substitute for the walk.

Reflected ceiling plans

A reflected ceiling plan (RCP) looks up: lights, diffusers, ceiling-mounted devices. Cameras, motion sensors, and sometimes readers appear here rather than on the furniture-plan floor sheet. If you only carry the floor plan, you will miss the camera that supposedly covers a corridor from a position that actually views a soffit. Use the RCP to build a device list before the walk, then confirm aiming in the field. Ceiling height and fixture type preview lighting quality; they do not replace a night lighting observation. A beautiful RCP with camera icons in every corridor still needs a night walk-test at the asset.

Door hardware schedules

The hardware schedule is where lock function, closer, exit device, electric strike, maglock, delayed egress, and card reader are specified per opening. Function numbers tell you storeroom versus classroom versus exit-only. Delayed-egress and request-to-exit notes tell you how the door is supposed to behave in fire versus in security. The schedule is not a substitute for grabbing the leaf. Schedules list what was specified; facilities may have swapped a storeroom function for a passage set so nurses could move faster. Bring the schedule, then operate the door.

Riser diagrams

Access-control, video, and intrusion risers show panels, head-end, power, and backbone—not the aiming of a lens. Use them to see whether a building is on a single controller that dies as a unit, whether camera power is centralized, and whether intrusion zones match the rooms you care about. A riser that shows camera 12 at the loading dock does not prove camera 12 can identify a plate. It proves someone intended a device at that node. Pair the riser with the RCP and the night walk, or you will report coverage that is only a label.

Device legends and north arrows

Device legends decode the triangles, camera icons, and door contacts. Vendor to vendor, a triangle might mean motion, glass-break, or a speaker. Do not assume last year's legend. Match the legend on this sheet to the icons on this sheet, then confirm the device in the ceiling or on the frame.

North arrows orient the site for sun, weather, and vehicle approach. Lighting that looks adequate on a south-facing canopy can fail on a north loading dock. A vehicle threat that seems to come from the main road may actually come from the unprotected east service drive once you rotate the sheet to true north. Grade arrows and topographic notes, when present, show who looks down into a courtyard and who is hidden in a cut. If the north arrow is missing, establish north in the field before you judge lighting or vehicle paths.

Fire-egress overlay versus security

Life safety and security share doors and fight over them. A fire-egress overlay shows exit paths, delayed-egress locations, stair re-entry, fail-safe versus fail-secure power loss, and occupant load. Security wants a locked stair, maglocks that hold, and infant or patient-elopement delays. Fire wants a path out. The overlay plus the hardware schedule is how you see the collision before you recommend a maglock that an authority having jurisdiction will reject, or a delayed-egress device that nursing has already taped over because it fought the required path.

Worked hospital example: delayed egress on the infant unit is both a security control and a life-safety device. If the overlay shows a required exit and the hardware has been shunted, you have a dual finding: security residual and a life-safety residual. Do not fix it by chaining the door.

Worked warehouse example: a fire exit at the back of a pick module is on the egress overlay as an unobstructed outswing. Operations has stacked pallets in front of it and added an unrecorded hasp. The drawing still shows a legal exit. The walk shows a security hole and an egress hole at once.

Site environment: what drawings under-sell

Location is the neighborhood, the adjacent occupancies, and the public roads you cannot fence. A data center next to an uncontrolled frontage road has a vehicle approach the floor plan never shows. A hospital on a transit corridor has foot traffic the hardware schedule cannot address. Adjacent uses matter: a school, a nightclub, a freight rail spur, or a vacant lot changes who approaches and when.

Architectural barriers—walls, courtyards, berms, parking structures—channel people. They also create climb paths and hiding spots. A decorative screen wall that blocks camera view of a door is an architectural barrier working against security. A courtyard that looks protected on plan may be a trap if the only camera views the fountain.

Lighting is a site factor, not a lobby finish. Walk at night. Note dark pockets at grade changes, under tree canopies, at dock seals, and at staff entrances. Lighting that exists on a photometric drawing from 2016 may have lost lamps or grown trees. Identification lighting at the asset is the test, not whether a drawing once showed a fixture.

Entrances include the ceremonial front, the staff badge door, the emergency-department ambulance bay, the loading dock, roof hatches, and the generator-yard gate. Count them on the plan, then count them on the walk. The extras are usually the vulnerability.

Grade (slope) decides whether a fence is six feet on one side and four on the other, whether a vehicle can reach a facade, and whether a camera looks down or into the sky. A loading dock at the low point of the yard can hide a person between trailers. Walk the low side of every fence.

Landscaping hiding spots: untrimmed hedges at windows, berms at fence lines, ornamental grasses at cash machines, and tree lines along a campus path. Landscape architects are not adversaries; overgrown plantings still give concealment. Note line-of-sight from posts and cameras, not only whether the planting was once on a landscape plan.

Loading docks concentrate goods, outsiders (drivers), and openings. Dock seals, trailer gap, empty-yard parking, driver restrooms that connect inside, and the office with a view—or without one—belong in the survey even when the floor plan labels the area warehouse. Docks are site environment and process at once.

How a drawing lie becomes a vulnerability

An as-built that is not updated is a drawing lie. The sheet still shows a solid wall; the walk finds a hollow-core door cut for a construction trailer, never put on the hardware schedule, never given a contact, never given a camera. The sheet shows camera 12 on the dock; facilities moved it to cover the new dumpster and never changed the riser. The sheet shows a continuous fence; a panel was removed for a crane and the opening remains. The sheet shows a reader on the secure leaf; someone swapped the door and the reader is now on the unlatched leaf.

Each lie becomes residual vulnerability if the assessor trusts the PDF. The workflow is documents first so you know what to look for, walk second so you can contradict the documents, gap list third so the report is not a memory test.

Worked campus example: as-builts from a renovation show the research-lab loading door as filled, rated wall. The night walk finds the wall was never filled; a roll-up remains, unlocked from 22:00 to 05:00 for a janitorial cart. The drawing lie hid the highest-consequence opening on the floor.

Read the documents. Walk the site. List the gaps. That sequence is the survey. Trusting sheets without a walk is how unrecorded doors stay unrecorded until an incident writes the next revision.