Physical Security Planner

Plan Physical Security Zones, Barriers, Lighting and Suppression

This planner walks you through a physical security design for a site — defining zones and their protection levels, specifying perimeter barriers, scoring the design against CPTED principles, checking lighting against recommended lux levels, matching fire suppression to what each space contains, and rolling all of it into a cost summary you can take to a budget conversation.

It is aimed at IT and security managers scoping a server room or office fit-out, MSPs putting a proposal together, and facilities teams who need a defensible structure for a request rather than a list of products. Everything runs in your browser; no site details are uploaded.

Be clear about what the output is. This produces a planning document and a budget estimate, not an engineered design. Fire suppression in particular is governed by local fire code and must be specified and signed off by a qualified fire protection engineer. Barrier heights, egress and lighting are also subject to local codes, insurance requirements and, where applicable, life-safety regulation. Use this to structure the conversation and size the budget; have a professional validate the result before anything is installed.

What the Planner Covers

• Security zones — define each area with a name, zone type, environment type, square footage and personnel count, and assign it a protection level from Public through Controlled and Restricted to Critical. Zone types include server room / data centre, office space, electrical room, kitchen / cafeteria, archive and document storage, and general mixed use.
• Perimeter and barriers — fencing by type (chain-link, anti-climb, palisade, concrete wall) with height, topping options such as barbed or razor wire, bollards, door and lock types, and mantraps, costed by linear foot and by count.
• CPTED assessment — scored across the CPTED principles with an overall score, so weak areas are visible rather than assumed.
• Lighting plan — current versus recommended lux per zone, the gap between them, the number of fixtures needed and the upgrade cost, with a lux level reference table.
• Fire suppression — a recommended agent per zone based on what the space contains, with estimated cost. Water-based systems are inappropriate where energised electronics live, which is why the recommendation is driven by environment type.
• Cost summary — total and per-zone costs, a category breakdown, cost per square foot, maintenance considerations, and a budget allocation view.

How to Use It

1. Define your zones first. Every other tab depends on them — barriers, lighting, fire and costs are all computed per zone, and the tool will tell you to add zones before it lets you plan the rest.
2. Be honest about protection levels. Marking everything Critical produces a number nobody will approve. The value of the exercise is in the differentiation.
3. Add the perimeter. Enter linear feet of each fence type, heights, toppings, and counts of doors, locks and bollards.
4. Work through the CPTED assessment honestly. A low score here is the cheapest finding in the whole tool to act on.
5. Enter current lighting levels per zone. Measure them with a light meter or a phone app rather than estimating — perceived brightness is a poor guide to measured lux.
6. Review fire suppression recommendations against what each space actually contains, then take them to a fire protection engineer.
7. Read the cost summary and use the per-zone and per-category breakdown to decide what to stage across budget years.

Layered Zones: The Core Principle

Physical security works the way network security does — in concentric layers, each one narrowing who gets further in. A visitor reaches the car park. A badged employee reaches the office floor. A named list reaches the server room. Nobody reaches the rack without an escort and a record. Each boundary is an opportunity to deter, detect, delay and respond.

The point of the layers is time. No barrier is unbreachable; the useful question is how long each layer holds and whether that exceeds the time it takes for a response to arrive. A fence that delays an intruder by two minutes is worth exactly as much as your ability to respond within two minutes — and worth nothing if nobody is watching.

CPTED in Practice

Crime Prevention Through Environmental Design is the discipline of shaping a place so that crime is harder and feels riskier to attempt, before you buy any hardware. Its core principles are:

• Natural surveillance — design so that legitimate users can see what is happening. Windows overlooking approaches, lighting that removes hiding places, landscaping kept low enough to see over. Being visible deters.
• Natural access control — use paths, planting, fences, level changes and entrance placement to guide people to the routes you intend and make other routes obviously wrong.
• Territorial reinforcement — make it unmistakable where public space ends and your space begins, with signage, surface changes, branding and defined boundaries. Ambiguity is what gives an intruder a story.
• Maintenance — a site that is visibly cared for signals that someone is paying attention. Graffiti removed promptly, broken lights replaced quickly, fences repaired. Neglect advertises that nobody is watching.

CPTED is the cheapest security you can buy, because much of it is decisions rather than purchases. Trimming a hedge, moving a light, and relocating a bin that doubles as a climbing aid can matter more than another camera. The assessment tab scores your site on these principles so the low-cost improvements surface before the capital ones.

Lighting and Fire, Briefly

Lighting supports both surveillance and deterrence, but more light is not automatically better. Uniformity matters more than peak brightness: a very bright light creates deep shadow next to it and dazzles cameras, which is worse than an even, moderate wash. The planner compares your current lux per zone against a recommended level and calculates the fixtures and cost to close the gap.

Fire suppression is matched to what the space contains, because the wrong agent causes the damage you were trying to prevent. Clean agent systems suppress fire without leaving residue on electronics; water-based systems are standard for general occupancy but destructive around energised equipment, which is why pre-action arrangements exist for rooms in between. The tool recommends a starting point per zone and estimates cost. It does not replace a fire protection engineer, a code review, or your insurer’s requirements.

Related Tools

Physical security is one control domain among several. Map your programme against a framework with the NIST CSF mapper, quantify what you are protecting against with the quantitative risk analysis tool or the risk matrix calculator, and write the accompanying policy with the security policy generator.

Frequently Asked Questions

Is the output ready to build from?

No. It is a planning document and a budget estimate. Barriers, lighting, egress and especially fire suppression are governed by local codes and insurance requirements, and must be reviewed and signed off by qualified professionals before installation.

What are the four CPTED principles?

Natural surveillance, natural access control, territorial reinforcement, and maintenance. Together they shape a space so that legitimate activity is visible, routes are guided, ownership is obvious, and neglect does not signal that nobody is watching.

How accurate are the cost estimates?

They are planning-grade figures for sizing a budget and comparing options, not quotes. Actual pricing varies with region, labour rates, site access, existing infrastructure and the state of the market. Use them to decide what to ask for, then get quotes.

Do I have to define zones before anything else?

Yes. Barriers, lighting, fire suppression and costs are all calculated per zone, and the other tabs will prompt you to add zones first.

How many protection levels should I use?

The tool offers Public, Controlled, Restricted and Critical. Most sites need all four; using fewer usually means over-protecting cheap space or under-protecting the space that matters.

Where do I get current lux readings?

Measure them with a light meter, or a phone app for a rough figure. Take readings at night at the height and position that matter — at a door, along an approach, at a camera’s field of view — rather than a single reading in the middle of a space.

Is any of my site data uploaded?

No. The planner runs entirely in your browser. Zone names, square footages, personnel counts and costs stay on your device.

Does it cover cameras and access control systems?

It accounts for CCTV tiers, badge access, mantraps, doors and lock types as elements of the design and its cost. It does not select specific products or design a camera layout — that is a job for a systems integrator working from a plan like this one.