Which element is NOT typically included in a site security plan for MMR?

• A. Marketing and promotional strategies.
• B. Access controls, security measures, incident response, and protection against theft or sabotage.
• C. Contingency backup procedures for IT security.
• D. Physical perimeter controls.

Answer: (A)

Marketing and promotional strategies are not part of a site security plan for MMR because this plan is about protecting people, munitions, and operations from threats, not about public outreach or promotion. A site security plan focuses on concrete safeguards: controlling who can access the site and what areas or assets they can reach; the security measures in place to deter, detect, and respond to threats; and procedures for incident response to minimize damage and recover quickly. It also covers protection against theft or sabotage and the continuity of IT and data through contingency backup procedures, ensuring essential systems stay available even after an incident. Physical perimeter controls—fences, lighting, surveillance, controlled entry points—are another fundamental part of the plan. Together, these elements create a cohesive security posture, whereas marketing activities do not contribute to security controls, incident management, or continuity planning.