2.1 Understanding Perimeters and Choke Points

Understanding Perimeters and Choke Points

The structure of physical perimeters, how choke points concentrate security resources, and how operators identify and exploit the gaps between them.

Multiple Perimeters: Layers of the Physical Envelope

Most facilities do not have a single perimeter but rather multiple nested perimeters, each representing another boundary an attacker must cross. Understanding this layered structure is the first step in planning any physical assessment, because each perimeter has its own vulnerabilities and its own opportunities for bypass.

The outer perimeter is the property boundary: the fence line, wall, vehicle barriers, and gate access points that separate the organization’s property from public space. This perimeter is designed to control vehicle and foot traffic at the macro level. Weaknesses here include gaps in fencing, unmanned vehicle gates during off-hours, and the common failure to extend barriers all the way to adjacent physical structures like walls of neighboring buildings.

The building envelope is the exterior shell of the structure itself. Exterior walls, entry doors, windows, roof access points, and utility penetrations where pipes and cables enter the building all form part of this perimeter. The building envelope is often more penetrable than it appears. Window glass provides no meaningful security against a determined attacker. Utility penetrations, particularly around HVAC equipment and electrical conduits, frequently have gaps that are unsealed or sealed with materials that provide minimal resistance.

Internal barriers divide secured space within the building. These include department divisions, secure rooms like data centers and executive suites, mantraps, and server room walls that should, but do not always, extend from the structural floor to the structural ceiling above. Internal barriers are where the security zone model is physically implemented, and they are where construction shortcuts most frequently create vulnerabilities.

Choke Points: Concentrated Control

A choke point is a designed chokehold on physical movement: a specific location through which all legitimate traffic must pass, enabling monitoring and access control at a single point. The main entrance lobby, elevator banks, stairwell access doors, and vehicle gatehouses are all choke points. Their purpose is to concentrate security resources at predictable transition points.

From a defender’s perspective, choke points are efficient: one guard at the main entrance can observe everyone entering. From an attacker’s perspective, choke points are signals about where security is concentrated and, by implication, where it is not. The facility that has a well-monitored main entrance and a loading dock with a propped door has a choke point that accomplishes very little.

Effective choke point analysis identifies all the alternative routes that bypass them. Emergency exits that must be passable from inside but may not be properly alarmed. Service corridors that bypass the lobby entirely. Delivery entrances that operate on different access control rules than main entries. These bypass routes are the primary finding in many physical assessments: the choke point is secure, but the attacker simply never needed to use it.

Mapping the Perimeter: Operator Methodology

Before any physical test begins, the operator must map the facility’s perimeter structure systematically. This reconnaissance phase determines entry point options, identifies the weakest boundary, and enables route planning that accounts for monitoring and response capabilities.

Document every entry point: main entrances, emergency exits, loading docks, service entrances, rooftop access, and any other physical penetrations in the building envelope. For each point, assess the lock types present, camera coverage angles and any blind spots, whether guards are present and how attentive they appear, and what credentials are required for authorized access.

Identify the weakest links: unmonitored areas that lack camera coverage, time-based gaps where security presence is reduced (typically early morning, lunch periods, and late evening), and entry points that operate under different rules than the main entrance, such as loading docks that trust vendor appearance without verification.

This mapping is not a one-time activity. Perimeter conditions change throughout the day and across days of the week. An entry point that is monitored on Tuesday at 10 AM may be effectively unmonitored on Friday at 5 PM when staff are leaving and attention is elsewhere.

Key Takeaways

• Three perimeters typically exist: outer, building envelope, and internal barriers. Each must be assessed independently because weaknesses in one affect the others.
• Choke points concentrate security where traffic is expected. They create blind spots everywhere traffic is not expected.
• Map all entry points comprehensively. A single unmapped entry point can render every other control irrelevant.
• Find the bypass routes around choke points. Alternative paths that avoid monitored areas are consistently the most productive testing focus.

Sources: ASIS International – Facilities Physical Security Measures Guideline  ·  CPTED – Crime Prevention Through Environmental Design  ·  PTES – Physical Access Assessment