Notepad and/or simple drawing or floorplan software A willing participant (auditor, staff member) who is known to the staff able to walk around and map the office. A camera (see operational security considerations) Considerations Any physical notes taken on physical security should be destroyed. Digital notes should be kept in line with overall SAFETAG standards. The location of certain high-value assets is highly sensitive, and may be controlled/secret information. Handle with care when discussing with the organization, and if conducting this remotely/in advance, ensure the point of contact can handle and destroy the data responsibly. If using drawing software, note that using free online tools could easily leave sensitive data exposed. Offline tools such as LibreOffice Draw, Pencil, or even Microsoft Powerpoint or Visio all work, but the product should be securely managed. Any photos taken (of the map drawing or specific office areas/rooms) should be securely deleted or taken using a secure camera app such as ObscuraCam It should be noted that SAFETAG is focused only on the digital impacts of physical security. This guide does not provide a full physical security assessment. Walkthrough Walk around the office and draw a map of the floor-plan (do not rely upon memory). Consider taking photos of specific areas (e.g. confusing layouts or areas difficult to capture in drawing). Make notes of where intruders could gain access to the office, where sensitive data may live (in the executive director's desk, in a storage closet, on devices), and relevant other items. Also note the overall privacy that the office provides (is it a shared office space, shared building, etc.) Note the locations of any of the following that apply: Office rooms and storage: Meeting rooms Staff offices/desks Paper File Storage, such as human resources and financial records storage Closets Safe room Main entry to office Additional Entry/Exit doors Windows accessible to the outside (terraces, ground floor, etc.) Fire escapes Page 123 of 240