Security zones are scalable level areas on a site that process, handle and store security-protected assets. The levels are:


  • Security Zone 1 - a public access area within a space or area that has access control measures in place at the perimeter. The storage of classified information or security protected assets is not recommended in a Security Zone 1.
  • Security Zone 2 - facilities are considered low-risk and commonly recognised as normal office buildings with commercial locking and restricted profile keying systems.
  • Security Zone 3 - facilities have limited employee and contractor access with visitors escorted. Storage of information up to SECRET is permitted. 
  • Security Zone 4 - has strictly controlled employee access with personal verification as well as card access. Security protected assets with a business impact level of catastrophic can be stored within this security zone.
  • Security Zone 5 - has strictly controlled employee access, with personal identity verification as well as card access (dual authentication access). Storage of information classified at TOP SECRET, codeword information or large quantities of SECRET information is stored and used or where the aggregate of information would have a catastrophic business impact if compromised. 
  • Security Zone 5 SCIF - if you require a Zone 5 Sensitive Compartmented Information Facility (SCIF) Defence will work with you to establish this


The following diagram provides an example of the setup of a layered approach to physical security zones within an organisation's premises. 



The physical security zones do not directly correlate with DISP level of membership for physical security.