There have been questions about how to protect against specific superpowers in the context of high-value/high-risk target with answers that require a very controlled environment, this question is more what steps a competent security manager would be able put in place given the constraints of productivity, budget and staff retention at a normal office.
It's a U.S. like environment, with similar laws, including restrictions on use of lethal force and significant issues with forcing implantation of devices and similar intrusive practices. Tech level is maybe 5-10 years further along (self driving cars and natural language virtual assistants, but no general AI to rule the world)
Super powers are not new, they've been around for a couple of generations. A relatively high percentage (10-20%) of the population have powers, but almost all of those are uninteresting in the context of the question (change hair color at will). Only a very small percentage of the population has tactically useful powers at a powerlevel that is useful for anything. Actual powers are varied, and generally are at the spider-man level or below.
This is not a world where super heroes and super villains exist. No legalized vigilantism. There are criminals that have super powers and there are police and military who have superpowers. Vast majority of people with powers work regular 9-5 type jobs (maybe exploiting their powers if they are useful at all).
The facility to protect is a normal office, think branch office of an insurance company, a graphic design shop or a company that manages real estate. Mostly concerned with protecting people, intellectual property, infrastructure and physical assets that don't have much individual value. No major terrorist organizations are targeting your organization, which is great, but it does mean the CEO is always trying to cut your budget. (If you want to talk about functional manufacturing facilities or warehouses that is also of interest to me, but not the main point of this question)
Competing interests:
- Budget constraints - Your boss balks at every expense.
- Inconvenience or productivity - The employees need to be able to effectively collaborate and do their jobs.
- Employee retention - If the employees (or managers) find the process too onerous or invasive they will leave to work at another company.
So, what technology or processes does a competent security manager put in place with their limited dollars and influence that they would feel protects against a broad cross section of powers, with the understanding that the chance of being targeted by such an individual is fairly low.
Scope:
- Mostly interested in physical security
- Computer security already has to deal with the idea of a compromised node, so this is probably an issue that can be informed by real world research without the need for world building.
- Key cards, locks, etc would be an interesting space to explore that I haven't come up with an interesting idea for yet.
So far this my answer, but I'd to hear ideas approaching from other angles.
Relatively easy and with low intrusiveness would be a dual spectrum (visible light/thermal) cameras backed by an AI to always be watching and noticing discrepancies. Get enough cameras to get close to full coverage. Pressure plates add to it, but more expensive after construction probably.
A little more expensive for company morale might be tracking badges on everyone at work. If the suveilence system noticed a person without a tracking badge that would be an alert.
What would you do if you were the security manager?