Government Facility Security in Georgia Starts With the Rulebook
On a government project the first decision is not which camera. It is which rulebook applies, because that one answer changes the credential technology, the eligible product list, how drawings are handled and often the schedule. KSEDCO settles it before specifying anything.
Four questions that set the specification
Who owns the building? A county-owned courthouse, a city hall, a state agency office and a leased suite in a privately held Perimeter or Cumberland tower are four different projects. In leased space the base-building and tenant boundary decides who records the elevator lobby, who grants riser access, who holds after-hours corridor keys, and whose system holds the footage when an incident starts in a common area.
Is there federal money or a federal tenant? If so, procurement narrows immediately. Section 889 of the fiscal year 2019 National Defense Authorization Act restricts covered video surveillance and telecommunications equipment in federal contracting, so hardware that is perfectly acceptable on a municipal job can be disqualified here. Where personal identity verification credentials are in play under FIPS 201, reader selection narrows again, and the GSA approved products list is the reference rather than a marketing claim.
What is the risk determination for this facility? The Interagency Security Committee risk management process exists precisely so a small field office and a high-occupancy federal building do not receive interchangeable countermeasures. State and local agencies benefit from the same discipline even where it is not mandatory.
What has to keep working? Public services, records access, dispatch, emergency operations. Continuity obligations, more than threat scenarios, usually drive the backup power and communications design.
Georgia specifics
Coastal counties around Savannah and Brunswick plan for hurricane season, so emergency operations space, generator-backed access control and a written alternate operating procedure carry real weight rather than sitting on a page nobody exercises. Augusta, with its concentration of defense and cyber work, brings scrutiny of equipment provenance and document handling that a municipal project would never attract. Metro Atlanta agencies are frequently tenants rather than owners, which puts that base-building boundary at the center of the design. And statewide, frequent summer storm outages make the interesting question not whether the system has backup power but whether it comes back cleanly, with its event log intact.
Where privilege has to break
The boundaries that matter are not always the ones drawn on the floor plan. They are the points where a person stops being a member of the public and acquires standing: the counter, the corridor behind it, the records room behind that, and the network closet behind that. Each of those transitions should demand a separate justification, and least privilege has to reach administrators and evidence retrieval, not only badge holders. Workstations, controllers and recorders need protected locations of their own. Door behavior has to reconcile with accessibility, egress and approved responder access rather than being set purely for security.
Publish capability, not detail. Precise device locations, floor plans, blind spots and response timing stay in protected records under the agency handling policy. Temporary construction and service access should expire on its own schedule instead of quietly becoming permanent privilege; on a multi-phase project that single rule prevents most of the access drift that surfaces in an audit two years later.
Acceptance, continuity and who owns it next
Test public entry, staff roles by schedule, sponsored visitors, deliveries, denied credentials, held and forced doors, duress, alarm verification and video retrieval, coordinating every simulation so it cannot produce an unintended dispatch. Then run the outage deliberately and confirm alternate operation, event retention across the gap and controlled restoration afterward.
Closeout is where an agency either takes ownership or does not. The package should let a facilities manager who attended no design meeting answer three questions: what does this door do at two in the morning, who approved this camera looking here, and who is called when it stops working. Assign named owners to access recertification, evidence control, device health, firmware and configuration backup, then set the triggers for a fresh review.
KSEDCO, 2700 Cumberland Pkwy SE, Suite 410, Atlanta GA 30339. Reach us at (888) 360-0035.