A protective wall is not bought. It is specified, then built. Everything that decides whether it works — the threat it is meant to stop, the thickness that stops it, the door in the middle of it — is settled in a few paragraphs of a specification long before anyone orders material. When protection fails to show up on a finished project, the failure almost always traces back to those paragraphs, not to the product that was delivered against them.
This is a working note on what belongs in that section, written for the people who have to sign it: specifiers, structural and security engineers, contracting officers, program managers and facility owners. It contains no product recommendation. It is the checklist we use when we read someone else’s specification, and the gaps we find most often.
The unit of protection is the assembly, not the material
This is the single idea that, once internalised, fixes most of the rest. Ballistic performance does not belong to a material. It belongs to a complete, tested assembly: the material at a stated thickness, with stated reinforcement, stated fasteners, stated backing and stated joint treatment, struck by a stated round at a stated obliquity in a stated shot pattern.
Change any of those and you are outside the test. A panel that performed one way at four inches does not carry that result to three. A wall assembly result does not transfer to the same material in a different configuration, and it does not transfer to your building.
Specifications that name a product and a level, and stop there, have described a purchase rather than a protective system. What arrives on site will be the cheapest interpretation of that sentence, which is exactly what a competitive bid is designed to produce.
Standards are threat definitions, not a difficulty ladder
UL 752 defines bullet-resisting equipment by threat: the round, the number of shots and their spacing. NIJ-STD-0108.01 covers ballistic resistant protective materials. ASTM F2656 covers vehicle crash testing for perimeter barriers. ASTM E119 covers fire test response of building construction. On federal work, UFC 4-010-01 carries the minimum antiterrorism standards for buildings, and the Interagency Security Committee’s risk management process drives the facility security level that sits upstream of any of it.
Cite them. Cite the edition. What is worth being careful about is the difference between citing a standard and claiming status under one. A listing belongs to one manufacturer’s one tested assembly. It is not a property of a material sitting on a pallet, and it does not travel to a completed building. If a submittal says a product is “certified” or “rated” without naming the assembly, the laboratory and the date, the right response is to ask for those three things rather than to accept the adjective.
The same discipline applies in the other direction. A specification that asks for something no test protocol defines — “bulletproof,” a guaranteed outcome, a level range rather than a threat — creates a requirement nobody can demonstrate and a dispute nobody can win at close-out.
