Risk Management Series Incremental Protection for Existing Commercial Buildings fromTerrorist Attack Providing Protection to People and Buildings FEMA 459 / April 2008 FEMA Risk Management Series Incremental Protection for Existing Commercial Buildings from Terrorist Attack: Providing Protection to People and Buildings Any opinions, findings, conclusions, or recommendations expressed in this publication do not necessarily reflect the views of FEMA. Additionally, neither FEMA nor any of its employees makes any warranty, expressed or implied, or assumes any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, product, or process included in this publication. Users of information from this publication assume all liability arising from such use. Foreword and Acknowledgements Background The Federal Emergency Management Agency (FEMA) developed FEMA 459, Incremental Protection for Existing Commercial Buildings from Terrorist Attack, to provide guidance to owners of existing commercial buildings and their architects and engineers on security and operational enhancements to address vulnerabilities to explosive blasts and chemical, biological, and radiological hazards. It also addresses how to integrate these enhancements into the ongoing building maintenance and capital improvement programs. These enhancements are intended to mitigate or eliminate long-term risk to people and property. FEMA?s Risk Management Series publications addressing security risks are based on two core documents: FEMA 426, Reference Manual to Mitigate Potential Terrorist Attacks Against buildings, and FEMA 452, Risk Assessment: A How-To Guide to Mitigate Potential Terrorist Attacks Against Buildings. FEMA 426 provides guidance to the building science community of architects and engineers on reducing physical damage caused by terrorist assaults to buildings, related infrastructure, and people. FEMA 452 outlines methods for identifying the critical assets and functions within buildings, determining the potential threats to those assets, and assessing the building?s vulnerabilities to those threats. This assessment of risks facilitates hazard mitigation decision-making. Specifically, the document addresses methods for reducing physical damage to structural and non- structural components of buildings and related infrastructure and reducing resultant casualties during conventional bomb attacks, as well as attacks involving chemical, biological, and radiological agents. FEMA 459 can be used in conjunction with FEMA 452. This manual presents an integrated, incremental rehabilitation approach to implementing the outcomes of a risk assessment completed in accordance with FEMA 452, Risk Assessment: A How-To Guide to Mitigate Potential Terrorist Attacks Against Building. This approach is intended to minimize disruption to building operations and control costs for existing commercial buildings. The integrated incremental approach to risk reduction in buildings was initially developed in relation to seismic risk and was first articulated in FEMA?s Risk Management Series in the widely disseminated FEMA 395, Incremental Seismic Rehabilitation of School Buildings (K 12), published in June 2003. In 2004 and 2005, FEMA also published Incremental Seismic Rehabilitation manuals (FEMA 396-400) for hospitals, office buildings, multifamily apartments, retail buildings, and hotels and motels. OBJeCtiVe anD sCOPe This manual outlines an approach to incremental security enhancement in four types of existing commercial buildings: office buildings, retail buildings, multifamily apartment buildings, and hotel and motel buildings. It addresses both physical and operational enhancements that reduce building vulnerabilities to blasts and chemical, biological, and radiological attacks, within the constraints of the existing site conditions and building configurations. The information contained in this document is: . Not mandatory . Not applicable to all buildings . Not applicable when it interferes with other hazards such as fire However, the manual presents incremental approaches that can be implemented over time to decrease the vulnerability of buildings to terrorist threats. Many of the recommendations can be implemented quickly and cost-effectively. LiMitatiOns This approach to incremental security enhancement applies to commercial buildings in urban or semi-urban areas. This approach does not apply to exceptionally high-risk iconic buildings of symbolic value. Examples of such buildings include the tallest buildings in a city, high rise buildings with a distinctive shape recognizable in the city skyline, and diplomatic buildings, such as embassies. Security enhancement in this class of buildings should be based on detailed engineering analysis and design. IntenDeD aUDienCe This manual addresses the specific needs and practices of commercial building owners, and guides building owners and managers through a process that will reduce the risks to their buildings from terrorist attacks. It is intended for use by both technical and non-technical audiences, including: . Building Owners . Facility Managers . Risk Managers . Security Consultants . Design Professionals COntent anD ORganiZatiOn This manual provides building owners and their design consultants with guidance on developing a program of incremental security enhancements that can be implemented over a period of time. Chapter 1 provides an overview of integrated incremental rehabilitation of buildings, potential terrorist threats to buildings, the mitigation of the risks of terrorist attacks, special issues related to security in existing commercial buildings, a process for integrating incremental mitigation into the normal facility management process, and a step-by step approach to implementation of an incremental enhancement program. It is intended for building owners and their risk managers and facility managers. Chapter 2 describes the relationship between this manual and FEMA 452 and includes a list of terrorism risk reduction measures. It also discusses the implementation of an integrated incremental program and links (in the form of matrices) specific physical and operational enhancement measures to normal maintenance and capital improvement programs associated with commercial buildings. It is intended for risk managers, facility managers, and design professionals. Chapter 3 discusses blast threats to buildings and physical enhancements that reduce the vulnerability to blasts. It is intended for design professionals and their blast consultants. Chapter 4 discusses chemical, biological, and radiological threats to buildings and physical and operational enhancements that reduce the vulnerability to these threats. It is intended for design professionals and their CBR consultants. Chapter 5 discusses operational security measures that reduce commercial building vulnerabilities to terrorist threats. It is intended for design professionals and security personnel. aCknOWLeDgMents This publication has been developed in collaboration with the Infrastructure and Geophysical Division of the Science and Technology Directorate of the Department of Homeland Security. Principal Authors: Frederick Krimgold, D.Tech., Virginia Tech David Hattis, Building Technology Incorporated Robert Smilowitz, Weidlinger Associates, Inc. William Blewitt, Batelle Terrence P. Ryan, Raytheon UTD Contributors: Pax Williams, Batelle Expert Review Panel: Eric Letvin, URS Corporation Ken Mead, Centers for Disease Control and Prevention John Sullivan, Portland Cement Association Michael J. W. Kaminskas, Raytheon UTD Mark M. Hankewycz, the Protection Engineering Group, PC Mohamed Ettouney, Weidlinger Associates, Inc. Project Officer: Milagros Nanita Kennett Infrastructure and Geophysical Division Science and Technology Directorate US Department of Homeland Security taBLe OF COntents FOReWORD anD aCknOWLeDgMents Background................................................................... ............................................................ i Objective and Scope........................................................................ .........................................ii Limitations ............................................................................. ..................................................ii Intended Audience..................................................................... .............................................iii Content and Organization................................................................. .....................................iii Acknowledgments.............................................................. ..................................................... iv 1 integRateD inCReMentaL BUiLDing PROteCtiOn 1.1 What is Integrated Incremental Building Protection ................................................................... 1-1 1.1.1 Integration of Terrorism Risk Reduction in the Facility Management Process...................................................................... .......................1-1 1.1.2 Incremental Approach Distributes Cost Over Time and Avoids Added Disruption ............................................................................. ................................. 1-2 1.1.3 RiskReductionDecisions....................................................... ...............................1-3 1.2 Potential Threats ............................................................................. .................................... 1-4 1.2.1 ExplosiveThreats............................................................. ......................................1-5 1.2.2 CBR Threats ............................................................................. .............................. 1-7 1.2.2.1 Chemical Agents ............................................................................. ... 1-7 1.2.2.2 Biological Agents ............................................................................. .. 1-8 1.2.2.3 Radiological Threats...................................................................... ..... 1-8 1.3 Terrorism Risk Reduction.................................................................... ................................... 1-9 1.3.1 Categories of Risk Reduction Increments ........................................................... 1-9 1.3.2 Implementation Considerations............................................................... .......... 1-10 1.4 Special Issues Related to Existing Commercial Buildings ........................................................... 1-11 1.5 Commercial Building Classifications ............................................................................. .......... 1-12 1.6 Facility Management Process for Existing Commercial Buildings................................................. 1-13 1.6.1 TheAcquisitionPhaseofCommercialBuildingFacilityManagement...........1- 14 1.6.2 The Redevelopment Phase of Commercial Building Facility Management ... 1-15 1.6.3 The Current Building Use Phase of Commercial Building Facility Management ............................................................................. ........................... 1-17 1.6.4 The Planning Phase of Commercial Building Facility Management............... 1-19 1.6.5 The Maintenance and Rehabilitation Budgeting Phase of Commercial Building Facility Management................................................................... .........1-22 1.6.6 The Maintenance and Rehabilitation Funding Phase of Commercial Building Facility Management................................................................... .........1-24 1.6.7 The Maintenance and Rehabilitation Implementation Phase of Commercial Building Facility Management ...................................................... 1-25 1.7 Planning and Managing Incremental Terrorism Risk Reduction ................................................... 1-26 1.7.1 Step 1 Conduct a Due Diligence Terrorism Risk Assessment........................ 1-27 1.7.2 Step 2 Identify and Implement Initial Increment Integration Opportunities................................................................ ....................................... 1-28 1.7.3 Step 3 Assess Terrorism Risk ........................................................................... 1-29 1.7.4 Step 4 Develop a Security Master Plan ............................................................ 1-30 1.7.5 Step5 PlanIncrementalRehabilitationforSpecificBuildings.....................1 -31 1.7.6 Step 6 Stage Rehabilitation Increments ......................................................... 1-32 1.7.7 Step7 CoordinatewithTenantWork............................................... ...............1-33 1.7.8 Step 8 Define Budget Packaging ..................................................................... 1-34 1.7.9 Step 9 Implement Integrated Incremental Rehabilitation Project Management ............................................................................. .......................... 1-35 1.8 Terrorism Risk Assessment to Terrorism Risk Reduction ........................................................... 1-36 2 MOVing FROM Risk assessMent tO iMPLeMentatiOn OF inCReMentaL BUiLDing PROteCtiOn 2.1 Risk Assessment Process ............................................................................. ......................... 2-1 2.1.1 Levels of Vulnerability Assessment ...................................................................... 2-3 2.1.2 The Building Vulnerability Assessment Checklist ............................................... 2-4 2.2 Scheduling Increments: Physical Protection and Strengthening Measures and Operational (Protective and Control) Measures ............................................................................. ............ 2-5 2.2.1 PhysicalProtectionandStrengtheningMeasures................................... ............2-5 2.2.2 Operational Measures ............................................................................. .............. 2-5 2.3 Identifying Integration Opportunities for Incremental Building Protection ...................................... 2-6 3 PRinCiPLes OF Design FOR Risk ReDUCtiOn ReLateD tO BLasts 3.1 Selected Examples of Terrorist Attacks on Buildings................................................................... 3-2 3.1.1 Baltic Exchange, City of London, April 1992 ...................................................... 3-3 3.1.2 World Trade Center, New York City, February 1993............................................ 3-3 3.1.3 Bishopsgate, City of London, April 1993 ............................................................. 3-4 3.1.4 Town Center, Manchester, England, June 1996 .................................................. 3-5 3.2 Performance Standards ............................................................................. ........................... 3-6 3.3 Site Incremental Upgrades: Perimeter Protection................................................................... .... 3-8 3.4 Incremental Building Rehabilitation Measures ......................................................................... 3- 10 3.4.1 Building Envelope ............................................................................. .................. 3-10 3.4.2 FragmentRetentionFilm........................................................ ............................3-12 3.4.3 Laminated Glass........................................................................ ........................... 3-15 3.4.4 Blast Curtains ............................................................................. .......................... 3-16 3.4.5 GlazingCatchCable/BarRetrofit................................................ ......................3-18 3.4.6 Energy- AbsorbingCatchCableSystems................................................... ..........3-19 3.4.7 Unreinforced Masonry Wall Debris Control ..................................................... 3-19 3.4.8 Other Facade Retrofits ............................................................................. ........... 3-22 3.5 Nonstructural Members ............................................................................. ......................... 3-22 3.6 Structural Retrofits ............................................................................. ............................... 3-23 3.6.1 Columns ............................................................................. .................................. 3-24 3.6.2 Floor Systems...................................................................... .................................. 3-25 3.6.3 Load-Bearing Unreinforced Masonry Walls ...................................................... 3-28 3.6.4 TransferGirders.............................................................. .....................................3-29 3.7 Blast Protection Measures ............................................................................. ..................... 3-29 3.8 Blast Protection Measure Cost Considerations ........................................................................ 3-31 4 PRinCiPLes OF Design FOR Risk ReDUCtiOn ReLateD tO CHeMiCaL, BiOLOgiCaL, anD RaDiOLOgiCaL tHReats 4.1 Overview of CBR Threats...................................................................... ................................ 4-1 4.2 Principles of Design for Risk Reduction Related to CBR .............................................................. 4-2 4.3 Prioritization of CBR Vulnerabilities: Incremental Improvements.................................................. 4-3 4.3.1 Level 1, Operational Measures and Expedient Protection................................. 4-4 4.3.2 Level 2, Enhanced Physical Security .................................................................... 4-4 4.3.3 Level 3, Enhanced Sheltering in Place................................................................. 4-5 4.3.4 Level 4, Aerosol Filtration, Medium Level........................................................... 4-5 4.3.5 Level 5, Gas-Phase Filtration, Medium Level....................................................... 4-6 4.3.6 Level 6, Aerosol Filtration, High Level ................................................................ 4-6 4.3.7 Level 7, Gas-Phase Filtration, High Level ............................................................ 4-7 4.4 Design Guidance for CBR Protective Levels ............................................................................. . 4-7 4.4.1 Level 1, Operational Measures and Expedient Protection................................. 4-7 4.4.1.1 Scope and Capabilities ....................................................................... 4-7 4.4.1.2 Methods and Requirements .............................................................. 4-8 4.4.1.3 Cost Considerations............................................................... ........... 4-13 4.4.2 Level 2, Physical Security..................................................................... ................ 4-14 4.4.2.1 Scope and Capabilities ..................................................................... 4-14 4.4.2.2 Methods and Requirements ............................................................ 4-14 4.4.2.3 Cost Considerations............................................................... ........... 4-17 4.4.3 Level 3, Enhanced Safe Rooms and Isolated Zones.......................................... 4-17 4.4.3.1 Scope and Capabilities ..................................................................... 4-17 4.4.3.2 Methods...................................................................... ....................... 4-17 4.4.3.3 Cost Considerations............................................................... ........... 4-20 4.4.4 Level 4, Aerosol Filtration, Medium Level......................................................... 4-20 4.4.4.1 Scope and Capabilities ..................................................................... 4-20 4.4.4.2 Methods and Requirements ............................................................ 4-21 4.4.4.3 Cost Considerations............................................................... ........... 4-21 4.4.5 Level 5, Gas-Phase Filtration, Medium Level..................................................... 4-22 4.4.5.1 Scope and Capabilities ..................................................................... 4-22 4.4.5.2 Methods and Requirements ............................................................ 4-23 4.4.5.3 Cost Considerations............................................................... ........... 4-24 4.4.6 Level 6, Aerosol Filtration, High Level .............................................................. 4-24 4.4.6.1 Scope and Capabilities ..................................................................... 4-24 4.4.6.2 Methods and Requirements ............................................................ 4-24 4.4.6.3 Cost Considerations............................................................... ........... 4-25 4.4.7 Level 7, Gas-Phase Filtration, High Level .......................................................... 4-25 4.4.7.1 Scope and Capabilities ..................................................................... 4-25 4.4.7.2 Methods and Requirements ............................................................ 4-26 4.4.7.3 Cost Considerations............................................................... ........... 4-28 4.5 Summary...................................................................... ................................................... 4-28 4.6 CBR Protection Measures ............................................................................. ...................... 4-30 5 PRinCiPLes OF Design FOR Risk ReDUCtiOn ReLateD tO OPeRatiOnaL seCURitY MeasURes 5.1 Overview of Operational Security Measures ............................................................................ 5-1 5.2 Detection and Assessment Measures ............................................................................. ......... 5-2 5.2.1 Exterior Intrusion Detection Systems .................................................................. 5-2 5.2.2 Interior Intrusion Detection Systems ................................................................... 5-3 5.2.3 Video Assessment and Surveillance Systems........................................................ 5-3 5.2.4 Access Control Systems...................................................................... .................... 5-5 5.2.5 Vehicle Inspection Systems ............................................................................. ...... 5-6 5.2.6 Duress Alarms ............................................................................. ........................... 5-7 5.2.7 Mail/Package Screening ............................................................................. .......... 5-7 5.3 Interdiction/Response Measures ............................................................................. ............... 5-9 5.3.1 Guard Force Detection/Delay Role .................................................................. 5-9 5.3.2 GuardForce Response/InterdictionRole......................................... .............5-10 5.3.3 Response Force Contingency Planning ............................................................. 5-10 5.4 Procedural Measures ............................................................................. ............................. 5-11 5.4.1 Restricted Areas ............................................................................. ...................... 5-11 5.4.2 Parking and Traffic Controls..................................................................... .......... 5-12 5.4.3 RestrictAccesstoFacilityInformation.......................................... .....................5-13 5.4.4 EncourageEmployeeSupport..................................................... .......................5-13 5.5 Preparedness Measures ............................................................................. ......................... 5-13 5.5.1 Develop a Disaster Preparedness Plan ............................................................... 5-14 5.5.2 Conduct Risk Assessments.................................................................. ................. 5-14 5.5.3 Develop Mass Notification Systems .................................................................... 5-14 5.5.4 Evacuation Planning and Shelter In Place Preparation ................................... 5-14 5.5.5 Monitor Emergency Systems and Resources ..................................................... 5-15 5.5.6 Conduct Training Drills and Exercises .............................................................. 5-15 5.6 Security Master Planning ............................................................................. ....................... 5-16 5.7 Additional Aspects of Operational Security Measures Related to Blast Events.............................. 5-17 5.7.1 Establish an Explosive Detection Program ........................................................ 5-18 5.7.2 EstablishBombThreatProcedures................................................ ....................5-18 5.7.3 Establish Blast-Related Mail/Package Handling Procedures ........................... 5-18 5.8 Additional Aspects of Operational Security Measures Related to CBR Events .............................. 5-19 5.8.1 Prevent Access, and Secure and Monitor Outdoor Air Intakes ....................... 5-21 5.8.2 Establish CBR-Related Mail/Package Handling Procedures ........................... 5-21 5.8.3 AdditionalMeasures........................................................... .................................5-22 5.9 Prioritization of Operational Security Considerations .............................................................. 5-23 5.9.1 RetailBuildings.............................................................. ......................................5-24 5.9.2 Office Buildings ............................................................................. ...................... 5-24 5.9.3 Multi-Family Apartment Buildings ..................................................................... 5-24 5.9.4 Hotel Security Measures..................................................................... ................. 5-25 5.10 Incremental Integration of Operational and Physical Security Measures Into a Risk Reduction Program: Flexibility and Tradeoffs................................................................... 5-25 5.11 Operational Security Protection Measures ............................................................................. 5-27 5.11.1 Physical Protection and Strengthening Buildings............................................. 5-27 5.11.2 Operational Measures ............................................................................. ............ 5-28 5.11.3 Operational Measures Categorized into the Building Vulnerability Assessment Checklist ............................................................................. .............. 5-30 BiBLiOgRaPHY................................................................. .....................................................I