Preparing a risk assessment is a prerequisite to planning a security program and involves inventorying personnel and property to be protected, reviewing the external environment, evaluating the threats, determining vulnerable points, and developing an annual loss expectancy. Elements in a typical physical security program are security management, guard force operations, physical security improvements, electronic security systems, and contingency plans. The last component should consider executive protection, bomb threats, fire, disaster/emergency preparedness, and evacuation. Orientation and training are critical to effectiveness as are inspections and tests. Three management activities are essential to a security program: (1) special functions, such as collecting information on terrorists, assembling a corporate crisis management team, and maintaining confidential personal files on all executives and their families; (2) giving responsibility for security to a member of management; and (3) administering the security force, including guard selection, training, and equipment purchases. Personnel security includes protective measures for executives and plant managers while at work, traveling, and at home. In developing a property protection program, the property should be divided into security zones based on their importance to the overall operation and parameters established to restrict access. Additional procedures address the security force, access control, property controls, locks and keys, construction materials, fire protection, communications, and emergency power and water. No references are cited.