Access control, surveillance technology and workplace procedures
Access control is the practical application of the site's security policy. Know the levels: identification, verification, authorisation, and recording. Distinguish access control by presence (badge, key), by knowledge (PIN), and by biometrics - and the GDPR constraints on biometric data. Understand visitor management (registration, escort, badge return), delivery control (checking against the manifest, sealing), and key control (register, no unauthorised copies).
Surveillance technology: CCTV is governed by the Camera Act of 21 March 2007 and the GDPR. Know the requirements: purpose limitation, proportionality, transparency (signage, information), retention limits, access control on footage, and the register of cameras. Distinguish overt and covert cameras (covert only under strict legal conditions, generally not for private guards without specific authorisation). Know the rules on bodycams and automatic number plate recognition.
Workplace procedures: the post order (consignes), the handover, the patrol route and checkpoint system, the incident log, and the escalation matrix. Know the key performance of a patrol: visibility, regularity, and documentation.
Traps: (1) thinking a camera justifies a search; (2) retaining footage indefinitely; (3) sharing footage on social media - a serious violation; (4) letting a visitor in without registration because "the manager knows him"; (5) leaving a post without a relieved handover.
Worked example: A contractor arrives without a badge. You check the list, call the contact, register him, issue a visitor badge, and log entry and exit. Rule of thumb: no identification, no access; no registration, no entry; no handover, no leaving the post.