Physical Security

What Does Access Delay Actually Buy a Facility?

A wall is a clock. The minutes it holds an intruder are the only minutes in which detection, judgment and response can happen, so delay should be sized to the response, not to a product label.

access delaydetect-delay-respondhardened rooms
What Does Access Delay Actually Buy a Facility?

By Authentic Intelligence Research · Published

Time. Access delay is the interval between detection and the loss of the asset, and it is the only interval in which people can act. Measured that way, delay is a design variable, not a product claim.

Physical protection is usually described in three verbs: detect, delay, respond. The first and third get the budget, cameras and sensors on one side, guards and law enforcement on the other. Delay is the quiet middle term, and it is the one that decides whether the other two matter.

The inequality that governs the design

Sandia National Laboratories states the requirement plainly in the Department of Energy's energy storage handbook: the total time for detection, assessment, alarm communication, delay and response must be less than the adversary's total task time. Sandia's physical protection guidance puts it the other way around. Once the adversary is detected, the time the protection system needs must be shorter than the time the adversary still needs to finish.

That is a timeline, and it can be drawn for any critical room. Start the clock at the first point where an intrusion is reliably detected. Add the time to assess the alarm, communicate it and get a response to the door. Compare that total with how long the path from detection to the asset holds out. If the response takes longer than the path holds, no amount of camera coverage changes the outcome. The facility will produce a very good recording of the loss.

The same guidance adds a placement rule that is easy to miss: detect as far from the target as possible, and put delay as close to the target as possible. Detection at the fence and delay at the room door gives the longest usable window.

The weakest wall sets the clock

Delay is a property of a path, not of a component. A rated door in a gypsum partition is a gypsum partition with a nice door. A hardened server room with a roof deck of ordinary metal, an unprotected duct penetration or a demising wall shared with a leased tenant has a delay equal to the easiest of those routes. That is why an ordinary wall can become a systems risk. It does not need to fail dramatically. It only needs to be the shortest path to something whose loss cascades.

The practical consequence is that the room that houses the critical function, the network core, the control room, the battery management system, the switchgear, has to be designed as an enclosure. All six faces, every opening and every penetration count. Leased space with better locks does not meet that test.

What testing does and does not tell you

Laboratory standards give comparable numbers for parts of that enclosure. UL 752 covers bullet-resisting equipment. ASTM F3038 is a timed test for forced-entry-resistant systems such as doors, windows and walls against attackers with hand tools. ASTM F1233 covers security glazing. These are useful, but each measures a specimen under defined conditions. None of them measures an installed room with its penetrations, anchors and adjacent construction. Owners should ask for tested assemblies, then verify that the built condition matches what was tested.

Lessons from high-abuse environments

Military and law-enforcement training structures, such as live-fire shoot houses, are one place where wall systems face repeated impact and forced entry as a normal operating load rather than a rare event. Durability under repeated abuse is a separate question from passing a single test. Civic and commercial facilities rarely see that load, but when they do, it arrives without warning.

Hardened wall systems, including the ballistic concrete panels made by Amidon, are one way to add delay at the room boundary. As with any product, the useful questions are the threat the assembly was tested against, how the installed room compares with the test specimen, and how many minutes the whole path provides.

Field implication

Write the timeline before writing the specification. Response time sets the delay target; the weakest path sets the delay you actually have. Everything else is detail.

Disclosure. Authentic Intelligence is affiliated with Amidon, which is linked in this article. About and disclosure.

Sources

  1. Sandia National Laboratories, DOE Energy Storage Handbook, Ch. 18: Physical Security and Cybersecurity of Energy Storage Systems
  2. Sandia National Laboratories, SAND2021-15712 (Nov. 2021)
  3. CISA, Sector Spotlight: Electricity Substation Physical Security
  4. UL Standards & Engagement, UL 752: Bullet-Resisting Equipment
  5. ASTM F3038-21, Timed Evaluation of Forced-Entry-Resistant Systems
  6. ASTM F1233-21, Security Glazing Materials and Systems

Cite this article: Authentic Intelligence Research, “What Does Access Delay Actually Buy a Facility?” Authentic Intelligence, September 30, 2026, https://authenticint.com/articles/access-delay-and-the-human-decision-window.html.

Continue reading

Do Data Centers Need Physical Hardening, or Just Cybersecurity? · Why Isn't Code Compliance the Same as Mission Assurance?

Return to research library