Physical and facility security: CPTED, mantraps, and access zones

Site selection and Crime Prevention Through Environmental Design (CPTED)

Physical security starts before a single brick is laid, during Site Selection. Architects evaluate natural hazards (floodplains, seismic fault lines, wildfire zones), neighborhood crime rates, proximity to emergency services (fire, police, hospitals), and shared-tenant risks, while keeping high-security datacenters discreet without large exterior signs advertising what sits inside.

Crime Prevention Through Environmental Design (CPTED) shapes the physical environment so the layout itself discourages crime without making the campus look like a fortress. CPTED rests on four pillars: Natural Surveillance (maximizing visibility with clear sightlines, low shrubbery, window placement, and uniform lighting so intruders feel observed), Natural Access Control (using meandering walkways, bollards, ditches, and thorny landscaping to guide people toward a single monitored entrance), Territorial Reinforcement (creating a clear boundary between public and private property using paving changes, low walls, and badges so strangers stand out), and Maintenance (the "broken windows" principle: keeping facilities clean and well-repaired signals active guardianship).

Perimeter barriers, mantraps, and Fail-Safe vs Fail-Secure doors

Effective physical security uses Defense in Depth in concentric rings: Deter (signs, lighting, fences), Delay (locks, bollards, reinforced walls that slow an intruder down until guards arrive), Detect (motion sensors, CCTV, door-forced alarms), and Respond (security guards or law enforcement). Notice that physical barriers cannot delay forever; their job is to ensure Delay Time > Detection Time + Guard Response Time.

At the building entrance, organizations combat two social and physical bypasses: Tailgating (an intruder closely follows an employee through a door without the employee’s consent) and Piggybacking (an employee politely holds the door open for someone carrying a box of donuts). The primary technical control against both is a Mantrap (Access Control Vestibule): a small chamber with two interlocking doors where Door A must close and lock, and weight or optical sensors must confirm a single badge-authenticated occupant, before Door B opens.

Whenever electronic locks are installed, life safety governs failure modes. A Fail-Safe lock (such as an electromagnetic lock) requires continuous electrical current to stay locked; if power fails or the fire alarm triggers, it drops open immediately so people can evacuate. A Fail-Secure lock stays locked when power is lost and is restricted to safes, wiring closets, or entry-only directions where mechanical crash bars still allow free interior exit.

Intrusion sensors, CCTV, and electromagnetic shielding (TEMPEST)

Inside the facility, intrusion detection systems (IDS) combine multiple sensor physics to minimize false alarms: Passive Infrared (PIR) detects changes in heat signatures, Ultrasonic or Microwave sensors use Doppler shift to detect physical movement across a room, Photoelectric beams trigger when a light beam across a hallway is broken, and Capacitance sensors detect changes in an electrical field around a high-value safe.

For ultra-sensitive aerospace or defense compartments (such as a SCIF), Meridian also mitigates Electromagnetic Emanations. Every unshielded monitor, keyboard cable, and bus emits faint radio-frequency waves that an adversary can reconstruct from a distance (studied under the government TEMPEST program). Defenses include Faraday cages (copper/conductive mesh lining walls to block RF signals in and out), shielded fiber-optic cabling, and white-noise acoustic/RF generators.