Access Control and Site Procedures
Access control is about allowing the right people, vehicles, and materials in - and keeping everything else out - while remaining courteous and consistent. The pillars are identification, verification, authorisation, and recording. Identification means checking a credential (badge, pass, ID). Verification means confirming the credential is genuine and belongs to the holder (photo match, expiry, signature, system check). Authorisation means confirming the person is entitled to be where they are going. Recording means logging entry, exit, and any exceptions.
Common access control measures include visitor sign-in and escort rules, contractor permits, vehicle passes, delivery checks against paperwork, key and card issue, and challenge of unbadged persons. Tailgating (following an authorised person through a door) and piggybacking (being escorted in by an authorised person) are frequent exam topics - both must be politely challenged.
Traps: candidates accept a badge at face value without checking the photo or expiry; let a familiar face skip sign-in ("I know him"); or let a delivery driver wander unescorted. Familiarity is not authorisation. Another trap is confiscating a pass - usually you refuse entry and report, you do not seize property.
Rule of thumb: Friendly, firm, and consistent - everyone signs in, every time, including the boss.
Worked example: A contractor arrives without a permit. Correct action: do not admit; contact the site contact to confirm; if approved, issue a permit and escort as required; log the visit. Do not admit "just this once."