{"data":{"id":"us/36-cfr-appendix-a-to-part-1234","jurisdiction":"us","citation":"36 CFR Appendix A to Part 1234","heading":"Appendix A to Part 1234—Minimum Security Standards for Level III Federal Facilities","body":"Recommended Standards Chart\n[Reproduced from Section 2.3 (pp. 2-6 through 2-9) of U.S. Department of Justice, United States Marshals Service report Vulnerability Assessment of Federal Facilities]\nLevel III\nPerimeter Security\nParking:\nControl of facility parking Required.\nControl of adjacent parking Desirable.\nAvoid leases where parking cannot be controlled Desirable.\nLeases should provide security control for adjacent parking Desirable.\nPost signs and arrange for towing unauthorized vehicles Required.\nID system and procedures for authorized parking (placard, decal, card key, etc.) Required.\nAdequate lighting for parking areas Required.\nClosed Circuit Television (CCTV) Monitoring:\nCCTV surveillance cameras with time lapse video recording Recommended.\nPost signs advising of 24 hour video surveillance Recommended.\nLighting:\nLighting with emergency power backup Required.\nPhysical Barriers:\nExtend physical perimeter with barriers (concrete and/or steel composition) Desirable.\nParking barriers Desirable.\nEntry Security\nReceiving/Shipping:\nReview receiving/shipping procedures (current) Required.\nImplement receiving/shipping procedures (modified) Required.\nAccess Control:\nEvaluate facility for security guard requirements Required.\nSecurity guard patrol Recommended.\nIntrusion detection system with central monitoring capability Required.\nUpgrade to current life safety standards (fire detection, fire suppression systems, etc.) Required.\nEntrances/Exits:\nX-ray \u0026 magnetometer at public entrances Recommended.\nRequire x-ray screening of all mail/packages Recommended.\nHigh security locks Required.\nInterior Security\nEmployee/Visitor Identification:\nAgency photo ID for all personnel displayed at all times Recommended.\nVisitor control/screening system Required.\nVisitor identification accountability system Recommended.\nEstablish ID issuing authority Recommended.\nUtilities:\nPrevent unauthorized access to utility areas Required.\nProvide emergency power to critical systems (alarm systems, radio communications, computer facilities, etc.) Required.\nOccupant Emergency Plans:\nExamine occupant emergency plans (OEP) and contingency procedures based on threats Required.\nOEPs in place, updated annually, periodic testing exercise Required.\nAssign \u0026 train OEP officials (assignment based on largest tenant in facility) Required.\nAnnual tenant training Required.\nDaycare Centers:\nEvaluate whether to locate daycare facilities in buildings with high threat activities Required.\nCompare feasibility of locating daycare in outside locations Required.\nSecurity Planning\nIntelligence Sharing:\nEstablish law enforcement agency/security liaisons Required.\nReview/establish procedure for intelligence receipt/dissemination Required.\nEstablish uniform security/threat nomenclature Required.\nTraining:\nConduct annual security awareness training Required.\nEstablish standardized unarmed guard qualifications/training requirements Required.\nEstablish standardized armed guard qualifications/training requirements Required.\nTenant Assignment:\nCo-locate agencies with similar security needs Desirable.\nDo not co-locate high/low risk agencies Desirable.\nAdministrative Procedures:\nEstablish flexible work schedule in high threat/high risk areas to minimize employee vulnerability to criminal activity Desirable.\nArrange for employee parking in/near building after normal work hours Recommended.\nConduct background security checks and/or establish security control procedures for service contract personnel Required.\nConstruction/Renovation:\nInstall mylar film on all exterior windows (shatter protection) Recommended.\nReview current projects for blast standards Required.\nReview/establish uniform standards for construction Required.\nReview/establish new design standard for blast resistance Required.\nEstablish street set-back for new construction Recommended.\nTerms and Definitions in Recommended Standards Chart\n[Reproduced from Appendix B, Details of Recommended Security Standards, U.S. Department of Justice, United States Marshals Service report Vulnerability Assessment of Federal Facilities]\nTerm Definition/description\nB.1 Perimeter Security\nParking\nControl of Facility Parking Access to government parking should be limited where possible to government vehicles and personnel. At a minimum, authorized parking spaces and vehicles should be assigned and identified.\nControl of Adjacent Parking Where feasible, parking areas adjacent to federal space should also be controlled to reduce the potential for threats against Federal facilities and employee exposure to criminal activity.\nAvoid Leases Where Parking Cannot Be Controlled Avoid leasing facilities where parking cannot be controlled. If necessary, relocate offices to facilities that do provide added security through regulated parking.\nLease Should Provide Control for Adjacent Parking Endeavor to negotiate guard services as part of lease.\nPost Signs and Arrange for Towing Unauthorized Vehicles Procedures should be established and implemented to alert the public to towing policies, and the removal of unauthorized vehicles.\nID System and Procedures for Authorized Parking Procedures should be established for identifying vehicles and corresponding parking spaces (placard, decal, card key, etc.)\nAdequate Lighting for Parking Areas Effective lighting provides added safety for employees and deters illegal or threatening activities.\nClosed circuit television (CCTV) monitoring\nCCTV Surveillance Cameras With Time Lapse Video Recording Twenty-four hour CCTV surveillance and recording is desirable at all locations as a deterrent. Requirements will depend on assessment of the security level for each facility. Time-lapse video recordings are also highly valuable as a source of evidence and investigative leads.\nPost Signs Advising of 24 Hour Video Surveillance Warning signs advising of twenty-four hour surveillance act as a deterrent in protecting employees and facilities.\nLighting\nLighting with Emergency Power Backup Standard safety code requirement in virtually all areas. Provides for safe evacuation of buildings in case of natural disaster, power outage, or criminal/terrorist activity.\nPhysical Barriers\nExtend Physical Perimeter, With Barriers This security measure will only be possible in locations where the Government controls the property and where physical constraints are not present. (barriers of concrete and/or steel composition)\nParking Barriers Desirable to prevent unauthorized vehicle access.\nB.2 Entry Security\nReceiving/Shipping\nReview Receiving/Shipping Procedures (Current) Audit current standards for package entry and suggest ways to enhance security.\nImplement Receiving/Shipping Procedures (Modified) After auditing procedures for receiving/shipping, implement improved procedures for security enhancements.\nAccess Control\nEvaluate Facility for Security Guard Requirements If security guards are required, the number of guards at any given time will depend on the size of the facility, the hours of operation, and current risk factors, etc.\nSecurity Guard Patrol Desirable for level I and II facilities and may be included as lease option. Level III, IV and V facilities will have security guard patrol based on facility evaluation.\nIntrusion Detection System With Central Monitoring Capability Desirable in Level I facilities, based on evaluation for Level II facilities, and required for Levels III, IV and V.\nUpgrade to Current Life Safety Standards Required for all facilities as part of GSA design requirements, (e.g. fire detection, fire suppression systems, etc.)\nEntrances/Exits\nX-Ray and Magnetometer at Public Entrances May be impractical for Level I and II facilities. Level III and IV evaluations would focus on tenant agencies, public interface, and feasibility. Required for Level V.\nRequire X-Ray Screening of all Mail/Packages All packages entering building should be subject to x-ray screening and/or visual inspection.\nHigh Security Locks Any exterior entrance should have a high security lock as determined by GSA specifications and/or agency requirements.\nB.3 Interior Security\nEmployee/Visitor Identification\nAgency Photo ID for all Personnel Displayed At All Times May not be required in smaller facilities.\nVisitor Control/Security System Visitors should be readily apparent in Level I facilities. Other facilities may ask visitors to sign-in with a receptionist or guard, or require an escort, or formal identification/badge.\nVisitor Id Accountability System Stringent methods of control over visitor badges will ensure that visitors wearing badges have been screened and are authorized to be at the facility during the appropriate time frame.\nEstablish Id Issuing Authority Develop procedures and establish authority for issuing employee and visitor IDs.\nUtilities\nPrevent Unauthorized Access to Utility Areas Smaller facilities may not have control over utility access, or locations of utility areas. Where possible, assure that utility areas are secure and that only authorized personnel can gain entry.\nProvide Emergency Power To Critical Systems Tenant agency is responsible for determining which computer and communication systems require back-up power. All alarm systems, CCTV monitoring devices, fire detection systems, entry control devices, etc. require emergency power sources. (Alarm Systems, Radio Communications, Computer Facilities, Etc.)\nOccupant Emergency Plans\nExamine Occupant Emergency Plan (OEP) and Contingency Procedures Based on Threats Review and update current OEP procedures for thoroughness. OEPs should reflect the current security climate.\nAssign and Train OEP Officials Assignment based on GSA requirement that largest tenant in facility maintain OEP responsibility. Officials should be assigned, trained and a contingency plan established to provide for the possible absence of OEP officials in the event of emergency activation of the OEP.\nAnnual Tenant Training All tenants should be aware of their individual responsibilities in an emergency situation.\nDay Care Center\nRe-Evaluate Current Security and Safety Standards Conduct a thorough review of security and safety standards.\nAssess Feasibility of Locating Day Care Within Federal Facility If a facility is being considered for a day care center, an evaluation should be made based on the risk factors associated with tenants and the location of the facility.\nB.4 Security Planning\nIntelligence Sharing\nEstablish Law Enforcement Agency/Security Liaisons Intelligence sharing between law enforcement agencies and security organizations should be established in order to facilitate the accurate flow of timely and relevant information between appropriate government agencies. Agencies involved in providing security must be part of the complete intelligence process.\nReview/Establish Procedures for Intelligence Receipt/Dissemination Determine what procedures exist to ensure timely delivery of critical intelligence. Review and improve procedures to alert agencies and specific targets of criminal/terrorist threats. Establish standard administrative procedures for response to incoming alerts. Review flow of information for effectiveness and time critical dissemination.\nEstablish Uniform Security/Threat Nomenclature To facilitate communication, standardized terminology for Alert Levels should be implemented. (Normal, Low, Moderate, and High—As recommended by Security Standards Committee)\nTraining\nConduct Annual Security Awareness Training Provide security awareness training for all tenants. At a minimum, self-study programs utilizing videos, and literature, etc. should be implemented. These materials should provide up-to-date information covering security practices, employee security awareness, and personal safety, etc.\nEstablish Standardized Armed And Unarmed Guard Qualifications/Training Requirements Requirements for these positions should be standardized government wide.\nTenant Assignment\nCo-Locate Agencies With Similar Security Needs To capitalize on efficiencies and economies, agencies with like security requirements should be located in the same facility if possible.\nDo Not Co-Locate High/Low Risk Agencies Low risk agencies should not take on additional risk by being located with high risk agencies.\nAdministrative Procedures\nEstablish Flexible Work Schedule in High Threat/High Risk Area to Minimize Employee Vulnerability to Criminal Activity Flexible work schedules can enhance employee safety by staggering reporting and departure times. As an example flexible schedules might enable employees to park closer to the facility by reducing the demand for parking at peak times of the day.\nArrange for Employee Parking In/Near Building After Normal Work Hours Minimize exposure to criminal activity by allowing employees to park at or inside the building.\nConduct Background Security Checks and/or Establish Security Control Procedures for Service Contract Personnel Establish procedures to ensure security where private contract personnel are concerned. Procedures may be as simple as observation or could include sign-in/escort. Frequent visitors may necessitate a background check with contractor ID issued.\nConstruction/Renovation\nInstall Mylar Film on All Exterior Windows (Shatter Protection) Application of shatter resistant material to protect personnel and citizens from the hazards of flying glass as a result of impact or explosion.\nReview Current Projects For Blast Standards Design and construction projects should be reviewed if possible, to incorporate current technology and blast standards. Immediate review of ongoing projects may generate savings in the implementation of upgrading to higher blast standards prior to completion of construction.\nReview/Establish Uniform Standards For Construction Review, establish, and implement uniform construction standards as it relates to security considerations.\nReview/Establish New Design Standard for Blast RESISTANCE In smaller facilities or those that lease space, control over design standards may not be possible. However, future site selections should attempt to locate in facilities that do meet standards. New construction of government controlled facilities should review, establish, and implement new design standards for blast resistance.\nEstablish Street Set-Back for New Construction Every foot between a potential bomb and a building will dramatically reduce damage and increase the survival rate. Street set-back is always desirable, but should be used in conjunction with barriers in Level IV and V facilities.\n(Reproduced from Appendix C, Classification Table, U.S. Department of Justice, United States Marshals Service report Vulnerability Assessment of Federal Facilities)\nLevel Typical location\nIII Agency Mix: Government Records.","path":["Title 36—Parks, Forests, and Public Property","CHAPTER XII—NATIONAL ARCHIVES AND RECORDS ADMINISTRATION","SUBCHAPTER B—RECORDS MANAGEMENT","PART 1234—FACILITY STANDARDS FOR RECORDS STORAGE FACILITIES"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-36.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:44Z","sha256":"30ef5f83b84b41519597a55c64c3efbef5c6639ad89351cf40317d4261fa9b8b","source_id":"us-cfr","stale":true,"prev":"us/36-cfr-1234.34","next":"us/36-cfr-appendix-b-to-part-1234"},"notice":"GroundRules: Original legal text. Not legal advice."}