What is settled on the drawings and cannot be recovered once the frame is up
Circulation, restricted zones, service risers and the power intake are drawn before the first cubic metre of concrete. Revisited afterwards, they cost more and protect less.
An administrative building, a bank branch or a technical centre receives its security equipment at the end of the works, often after the frame has been handed over. By then, most of what determines the level of protection achieved is already fixed, and nobody in the room knows it.
Four decisions the concrete makes final
Circulation. The security of a building is read first in the route a visitor can take without passing a control point. That route is drawn by the doors, the stairs and the statutory escape paths. It changes on the drawings in one meeting; afterwards it changes by demolishing a loadbearing wall, or it does not change.
Restricted zones. A server room, an archive store or a security post implies an envelope: solid walls to the slab above, a door of known resistance, no riser shared with a public area. A partition built up to the suspended ceiling separates nothing — and it is exactly what a drawing that never named the zone produces.
Service risers. Security cabling, network cabling and power need separate routes, sized for what they will carry in ten years. An undersized riser leads to running on the surface what was meant to be protected, and an accessible cable is a cable that can be cut.
The power intake. Where the generator sits, where the transfer panel sits, how far it is from the loads it backs up and how the room is ventilated are settled at the same moment as the structure. A generator dropped afterwards into the only space left is badly ventilated, badly attenuated, or too far from what it feeds.
What the rework costs
The gap is not an overrun. Rebuilding the envelope of a restricted zone after handover means stripping a suspended ceiling, reworking services in place, operating in an occupied building and holding a partial re-inspection. The direct cost is an order of magnitude away from the same decision taken on the drawings, and it carries a shutdown the operator had not planned for.
Where rework is not possible, the trade-off moves: the intended level is no longer reached, and it is compensated by organisation — that is, by permanent staffing. That compensation is an operating cost, and it runs for as long as the building does.
Who decides, and when
The difficulty is almost never technical. It is that security decisions belong to someone outside the design loop, and reach the agenda once the drawings have been approved.
Three moments matter. The brief, where the intended level is written as functions rather than equipment. The scheme design, where circulation and zones are fixed. And the tender, where coordination of the technical packages is given to someone, or to nobody.
A technical package is not a finishing trade
Faults in a new building rarely start inside a package. They start at the interfaces: between the electrical contractor and the security integrator, between the network and access control, between the generator and what it is meant to back up. Every firm is compliant with its own contract, and the building does not work.
A client who splits the packages without naming someone accountable for the interfaces has kept that work. They will discover it at commissioning, when they have the least leverage.
