The human factor of physical security planning