Physical security does not stop at CCTV, access control and alarms.
The Guidelines for Enhancing Building Security in Singapore (GEBSS) treats the building itself as part of the protective system.
Its walls, structural frame, façade, glazing, doors, roof and service openings can determine whether a threat is:
kept outside, slowed down, contained or able to cause disproportionate damage to the rest of the building.
GEBSS therefore considers the building envelope and structural system as important security measures against threats including forced entry, blast, ballistic attack and fragmentation.
It also stresses that structural configuration matters. The way columns, beams, walls and transfer structures are arranged can affect whether damage remains localised or develops into a much larger structural failure.
The key principle is:
A secure façade is not simply a strong wall or strong glass. The wall, glazing, door, frame, connections and supporting structure need to work as a complete protective system.
What does “building envelope” mean from a security perspective?
The building envelope is the physical boundary separating the internal building from the external environment.
From the GEBSS perspective, this includes elements such as:
walls, façades, windows, glazing, doors and other openings.
GEBSS identifies three main security roles for envelope walls: resisting silent or forced entry, protecting occupants and Critical Assets against threats including blast, bullets and shrapnel, and concealing internal activity from hostile external observation.
This means the façade is not merely an architectural finish.
It can be one of the building’s physical security layers.
Does every building need a blast-resistant façade?
No.
GEBSS remains a risk-based guideline.
The required level of protection should depend on the applicable:
threat, vulnerability, consequence, stand-off distance, building function and required security level.
GEBSS also describes the technical detail in its building-security-measures chapter as introductory rather than a complete engineering specification.
Where blast resistance is actually required, GEBSS recommends appropriate professional protective-design or blast-engineering involvement.
The correct approach is therefore not:
“Make every façade blast resistant.”
It is:
“Determine which threats apply, what elements are exposed and what level of protection is justified.”
Why does the building’s structural system matter to security?
Because blast or other severe local damage can affect more than the element directly struck.
GEBSS explains that the structural framing system and construction method influence the robustness of the building under blast loading.
It discusses:
cast-in-situ construction, precast construction, prestressed systems, structural framing, transfer beams and structural redundancy.
The underlying concern is not simply:
Will this particular column survive?
It is also:
What happens to the rest of the building if this column or structural element fails?
What is progressive collapse?
GEBSS defines progressive collapse as a local structural failure that spreads from one element to another until a disproportionately large part of the building, or potentially the whole structure, collapses.
It specifically discusses the loss of critical columns as a possible trigger.
A relatively localised initial incident can therefore create consequences far greater than the original damage.
This is why GEBSS treats structural redundancy as an important protective-security consideration.
What does structural redundancy mean?
Structural redundancy means the building has alternative ways to support loads if one structural element is lost.
GEBSS discusses this in relation to transfer beams and girders.
Transfer structures may be introduced to create large column-free spaces, but reducing the number of supports can also reduce redundancy. If a major transfer element or its supporting column is lost, the effect can potentially spread through the structure.
GEBSS therefore discusses providing alternate load paths and additional support arrangements to reduce this vulnerability.
Consultant’s perspective
This demonstrates why security design sometimes needs to involve the structural engineer at the concept stage.
A CCTV consultant cannot solve progressive collapse after the structural scheme has already been fixed.
Are open, column-free spaces a security problem?
Not automatically.
However, GEBSS highlights that designs relying heavily on transfer beams or girders may create particular structural-security considerations because the loss of a critical transfer element can have wider consequences.
The issue is not that banquet halls, atriums or open spaces are inherently unsafe.
The issue is whether their structural arrangement has sufficient robustness and redundancy for the assessed threat.
What does GEBSS say about building walls?
GEBSS treats envelope walls as protective elements.
Their security roles can include preventing forced entry, protecting occupants and Critical Assets against blast, ballistic threats and shrapnel, and limiting hostile observation of internal activities.
It also raises several architectural considerations, including avoiding unnecessary external wall recesses, protecting structural columns and transfer elements from direct exposure, and placing Critical Assets behind competent walls such as reinforced concrete where appropriate.
Why should Critical Assets be behind stronger walls?
Because the physical boundary around a Critical Asset contributes to the Delay and Deny layers.
GEBSS specifically says Critical Assets should be housed behind competent walls such as reinforced concrete walls without openings in the context of its envelope-wall guidance.
This should still be interpreted according to the building’s Risk Assessment and design requirements.
The broader lesson is that there is little value in fitting a high-security door into a room whose surrounding walls are significantly easier to penetrate.
Is reinforced concrete always better for security?
GEBSS gives particular attention to reinforced concrete where significant blast protection is needed.
For load-bearing walls, it says cast-in-situ reinforced concrete offers strong blast-resistance characteristics and discusses vulnerabilities at the joints of precast systems when high blast loads are involved.
However, this does not mean every ordinary building wall must be cast-in-situ reinforced concrete.
The required construction depends on the protection objective.
Where are walls most vulnerable to forced entry?
GEBSS points specifically to openings.
Even where the wall itself provides strong resistance, doors, windows and utility penetrations can become weaker parts of the protective boundary.
This produces a fundamental security principle:
The strongest wall is only as useful as its weakest accessible opening.
Why is glazing a security concern?
Glass can create significant secondary hazards when damaged by blast.
GEBSS explains that flying fragments from a damaged façade can cause casualties. It refers to this as secondary fragmentation.
Protective glazing can reduce that risk by controlling how the glass fractures and whether fragments or entire panels enter the occupied space.
The objective is therefore not necessarily to make glass impossible to break.
It can be to control how it fails.
What is secondary fragmentation?
Secondary fragmentation occurs when parts of the building itself become hazardous projectiles.
With glazing, this typically means broken glass being propelled into occupied areas.
GEBSS notes that blast, forced-entry attempts and projectiles can damage façade glazing and cause fragments to travel into the building.
This is why glazing protection often focuses on:
retaining the broken glass, controlling the panel and reducing how far hazardous fragments travel.
Does GEBSS recommend laminated glass?
Yes, where enhanced blast performance is required.
GEBSS recommends laminated glazing because it can continue holding broken glass together after fracture rather than allowing the glazing to separate immediately into loose fragments.
It also discusses the importance of the glazing-to-frame connection, including sufficient glass engagement with the frame and structural silicone attachment.
This demonstrates an important point:
Protective glazing is a system, not merely a special piece of glass.
Is laminated glass alone enough?
Not necessarily.
The glass may remain together after breaking, but the entire fractured panel still needs to remain adequately connected to its frame.
GEBSS specifically discusses the importance of:
the glazing, the frame and the connection between them.
Its Risk Assessment section also gives an example where glazing protection reduces fragmentation risk but further protection, such as a catcher system, can reduce the possibility of an entire damaged panel projecting into the occupied area.
So:
Holding the fragments together and holding the panel in place are related but different problems.
Does anti-shatter film make a window blast proof?
No.
GEBSS says anti-shatter film may be used to retrofit existing windows where installing purpose-designed blast-resistant windows is not feasible.
Its purpose is to reduce the hazard by helping hold glass fragments together if the pane breaks.
GEBSS further explains that mechanically anchoring the film to the window frame can reduce the likelihood of the glazing system becoming a projectile.
This does not mean that applying film automatically turns an ordinary window into a fully blast-resistant window system.
The distinction is important.
What is a catcher system?
In the GEBSS context, a catcher system helps prevent fractured glazing or other façade elements from being thrown into the occupied space.
GEBSS discusses catcher systems in conjunction with laminated glazing, including where a non-fully framed façade system requires additional protection.
Consultant’s perspective
A useful way of thinking about the protection sequence is:
glass may break → laminate holds fragments together → frame/anchorage retains the panel → catcher provides another layer if required.
The exact engineered solution depends on the required blast performance.
Are fully framed curtain walls preferable for blast protection?
GEBSS recommends fully framed curtain-wall systems when blast protection is relevant.
It explains that point-supported systems can concentrate loads around a small number of attachment points, creating larger local stresses and the possibility that glazing or attachment elements detach.
Where non-fully framed systems are unavoidable, GEBSS discusses additional measures such as laminated glazing and catcher systems.
Again, this is a protective-design consideration rather than a statement that point-supported glazing cannot be used in ordinary buildings.
What about stone or metal façade panels?
GEBSS notes that light façade systems made from materials such as stone or metal can provide relatively limited inherent protection against threats such as blast or forced entry.
It discusses strengthening these systems using:
stronger materials, improved connections or protective backing installed behind the architectural finish.
If a façade material itself can fragment, the backing may also need to help retain those fragments.
This reinforces the concept that the external architectural finish and the protective layer do not necessarily have to be the same thing.
Does good security mean sacrificing façade aesthetics?
Not necessarily.
Some protective elements can be incorporated behind the visible architectural finish.
GEBSS specifically discusses using internal backing systems with stone or metal façades so that security performance can be improved without necessarily changing the external appearance.
This is another reason to incorporate protective-security requirements early in architectural design.
Retrofitting the same level of protection later may be far more intrusive.
Should every external window be blast resistant?
GEBSS does not say every window in every building needs full blast-resistant construction.
It says protective glazing should be considered where blast pressures, projectiles or fragmentation are relevant, including examples such as:
ground-floor areas, lobbies, skylights and densely occupied locations.
The required protection depends on the Risk Assessment and threat exposure.
Are fixed windows more secure?
Within its protected-window discussion, GEBSS notes that fixed windows can offer advantages because their connection to the supporting structure is simpler.
Openable windows introduce additional components such as:
hinges, frames and locking mechanisms
which also need to transfer the required protective loads.
The wider principle is straightforward:
Every additional movable component creates another interface that must perform correctly under the required threat condition.
Can windows provide both blast and forced-entry protection?
Yes, but one type of protection should not be assumed to provide another automatically.
GEBSS discusses windows that can combine:
blast, ballistic and forced-entry protection.
It expressly warns that a system designed for one threat should not automatically be assumed to meet the requirements for another. The combination needs to be specifically designed and demonstrated.
This principle also applies to doors.
Why are doors especially important?
Although doors occupy only a small part of the overall façade, GEBSS describes them as particularly important because they create intentional openings through the building’s physical boundary.
Their security roles can include:
controlling access, resisting forced entry, protecting against blast or ballistic effects and preventing dangerous fragments from entering the protected area.
GEBSS also recommends minimising the number of external doors, subject to emergency-egress requirements.
Should external doors open outwards?
Within its protective-door design guidance, GEBSS says doors should generally open towards the direction of the potential external threat so the frame can help support the door against forced-entry or blast loading.
It also notes that outward-facing hinges then need to be protected against tampering.
This is a GEBSS security-design recommendation.
Any actual door arrangement must still be coordinated with applicable fire, accessibility, operational and building-code requirements.
Does the door frame matter as much as the door?
Yes.
GEBSS specifically says the frame and its attachment to the wall should be hardened to the same level as the door.
This is critical.
A certified high-security door leaf can fail to provide its intended performance if:
the frame, wall connection, lock or surrounding construction fails first.
The whole assembly matters.
Can a strong security door be installed in a weak wall?
That creates an obvious potential weak point.
GEBSS repeatedly stresses the importance of the connection between protective doors and the supporting wall.
For blast-resistant doors, it says the wall-to-door connection system should withstand at least the same blast load as the door itself.
For forced-entry-resistant doors, GEBSS similarly highlights the wall-to-frame connection and requires installation according to the certified test method.
This is exactly why door security should not be specified independently of the wall construction.
What is a forced-entry-resistant door?
GEBSS recognises that all doors provide some degree of forced-entry resistance, but higher protection may be justified at:
external envelope doors or special areas containing Critical Assets.
Doors deeper within multiple security layers may require less resistance depending on the design.
This closely follows the Defence-in-Depth concept.
The further an attacker has already had to penetrate through controlled security layers, the required protection of each subsequent door may be different.
How is forced-entry resistance measured?
GEBSS explains that forced-entry-resistant products can be tested by accredited laboratories using defined:
toolsets, attack methods and time limits.
The attacker must create an opening of a specified size within the test conditions.
GEBSS references standards including LPS 1175 and EN 1627-series standards among others in this context.
We should keep the deeper explanation of:
resistance classes, tool groups, delay time and certification
for the separate Forced Entry Protection Insights library rather than duplicating it here.
The key GEBSS lesson is simply:
Forced-entry performance should be demonstrated by an appropriate tested system, not assumed because a door looks heavy.
Is a blast-resistant door automatically forced-entry resistant?
No.
GEBSS expressly warns against assuming that protection against one threat automatically means protection against another.
It discusses doors that can be specifically designed for combined:
blast, ballistic and forced-entry protection.
The required combination has to be intentionally designed rather than inferred from one existing rating.
Is a ballistic-rated door automatically blast resistant?
Again, no.
Ballistic, blast and forced-entry threats impose different performance demands.
A product may be designed and certified for one, several or potentially all of these threats, but the required combined performance has to be established and tested.
This is one of the most valuable lessons in GEBSS’s façade section:
“Security-rated” is not one universal rating.
The threat matters.
Why is installation so important?
A protective product does not perform independently of its installation.
GEBSS repeatedly refers to:
approved installation drawings, connection details, frames and supporting construction.
For both blast-resistant and forced-entry-resistant doors, the installed system must correspond to the tested or engineered configuration.
Consultant’s perspective
A specification that says only:
“Provide security-rated door”
is incomplete.
The design also needs to establish:
what threat rating is required, what wall construction supports it, what frame and locking system are part of the tested assembly, and how it is to be installed.
What are “other access points”?
GEBSS specifically warns that doors and windows are not the only potential ways into a protected building or room.
It identifies examples including:
roofs, ceilings, floors and infrastructure pipes.
This is important because an attacker does not have to use the route that the designer intended.
If a protected room has:
a high-security door but an accessible ceiling void,
then the protective boundary needs to consider whether the ceiling creates a bypass.
Should roof access be secured?
Yes.
GEBSS says access to the roof should be restricted.
It also recommends protecting service openings with bars or grilles where appropriate and identifies roof glazing and skylights as potential weak points that could be exploited for unauthorised entry or introduction of threats.
The roof is therefore part of the building security boundary, not merely a maintenance area.
What about ceilings and raised floors?
GEBSS identifies ceilings and floors among the alternative access routes that need consideration when protecting the building façade or a secure office within a mixed-use development.
Consultant’s perspective
This becomes particularly important where a high-security room shares:
a common ceiling void, raised-floor void or lightweight partition system
with an uncontrolled adjacent area.
The security boundary needs to be understood as a complete enclosure rather than a line drawn on a floor plan.
Can utility penetrations weaken a secure wall?
Yes.
GEBSS’s load-bearing-wall section identifies windows, doors and utility openings as vulnerable parts of otherwise strong walls.
Its separate infrastructure guidance also says utility openings should not create an easier exploitable gap through the protected boundary.
This includes features such as:
ducts, drains and service penetrations.
The principle is the same:
Every opening through a protected boundary needs to be considered as part of that boundary’s security performance.
Does a protected façade guarantee the whole building is protected?
No.
GEBSS notes that blast loads transferred through a protected façade can be passed into the building’s supporting structure.
The structural effects therefore need to be considered as part of the design.
A façade component cannot be considered in isolation if its improved strength simply transfers forces elsewhere in a way that causes another element to fail.
This is why protective façade design may require coordination between:
architect, structural engineer and protective-design/blast specialist.
How do structural protection and stand-off work together?
Stand-off reduces the threat reaching the building.
Structural hardening improves the building’s ability to resist whatever threat remains.
These are therefore complementary strategies.
Consultant’s perspective
If the site design can substantially increase stand-off, the required structural protection may reduce.
If adequate stand-off cannot be achieved because of urban constraints, more attention may need to be paid to:
façade performance, glazing, structural robustness and the positioning of Critical Assets and occupied areas.
This follows the overall GEBSS design philosophy rather than representing one universal engineering formula.
What should architects ask during design?
A useful building-envelope review can be structured around the complete physical boundary:
Design Question | Security Issue |
|---|---|
What threat is the façade expected to resist? | Forced entry, blast, ballistic attack or a combination |
Where can the threat physically approach? | Stand-off and exposed elevations |
Are critical columns or transfer elements exposed? | Structural vulnerability and progressive collapse |
What happens if one structural element fails? | Redundancy and alternate load paths |
What type of wall surrounds Critical Assets? | Delay, denial and blast protection |
What happens to the glazing if it breaks? | Secondary fragmentation |
Can the broken pane detach from the frame? | Glazing retention and catcher system |
Does the door have the same protection as its frame and wall? | Weakest-link performance |
Is the rating appropriate to the actual threat? | Blast, ballistic and forced-entry certification |
Can the protected area be bypassed through another route? | Roof, ceiling, floor or utility penetrations |
Does the installed system match its tested configuration? | Certification and installation quality |
This is a consultant’s review framework derived from the GEBSS principles rather than a prescribed GEBSS checklist.
Common misunderstandings about building-envelope security
“Blast-resistant glass means the glass will never break.”
Not necessarily. Much protective glazing is intended to control how the glass fractures and how fragments or the panel itself behave after breakage.
“Anti-shatter film makes an ordinary window blast resistant.”
No. GEBSS presents ASF as a retrofit method that can reduce fragmentation hazards where purpose-designed blast windows are not feasible.
“A certified security door remains certified regardless of how it is installed.”
No. GEBSS repeatedly stresses installation according to tested or approved details and proper connection to the supporting wall.
“A heavy steel door means the room has forced-entry protection.”
Not necessarily. Demonstrated forced-entry performance depends on the complete tested assembly, including frame, lock and supporting construction.
“A ballistic-rated product must also provide forced-entry and blast protection.”
No. GEBSS specifically warns that protection against one threat should not automatically be assumed to provide protection against another.
“The wall is secure because the door is secure.”
The opposite can also be true. Door, wall, frame, locks and connections must work together.
“Progressive collapse means the building is directly destroyed by the explosion.”
Not exactly. The concern is that an initial local failure can propagate into much wider structural failure.
“If the doors and windows are protected, all access routes are covered.”
No. GEBSS specifically identifies roofs, ceilings, floors and infrastructure penetrations as other routes that need consideration.
Conclusion
GEBSS treats the building envelope as part of the physical security system.
Walls provide the boundary.
Glazing needs to control fragmentation and, where required, withstand the relevant threat.
Doors protect intentional openings through that boundary.
Frames, locks, connections and supporting walls determine whether those protective products can actually achieve their intended performance.
Roofs, ceilings, floors and utility openings need to be considered so an attacker cannot simply bypass the protected door.
Behind all of this is the building’s structural system, which needs sufficient robustness and redundancy to prevent local damage from escalating into disproportionate failure.
The central lesson is:
Do not specify a secure door, secure window or blast-resistant façade as an isolated product. Design the protective boundary as a complete system and understand what happens when each element is attacked or fails.
From Manpower to Managed Security. One operator, total accountability.
Company
Resources
Download Your Resource
Enter your name and email below to access your selected PATH resource.