Access Control, Perimeter Security and Restricted Area Protection
The layered barrier model
Access control is layered: perimeter fence → access points → restricted area → critical part → aircraft. Each layer needs its own control. Identity is verified through airport identification cards, vehicle permits, PIN/biometric systems and escort rules. The challenge principle requires any person in a restricted area to be challenged if not displaying valid authorization. Sterile areas separate screened passengers from unscreened persons.
Concepts to master
- Need-to-access principle: authorization is limited to what the job requires.
- Escort ratios and escort responsibilities.
- Perimeter integrity: fencing, gates, lighting, patrols, intrusion detection, vegetation control.
- Vehicle control: inspection, passes, airside driving permits.
- Tailgating, piggybacking and door-propping as common vulnerabilities.
- Key and lock control, including electronic access logs.
Traps
- Treating a badge as proof of identity when it is only proof of authorization.
- Forgetting that escorted persons are the escort's responsibility, not the gate's.
- Assuming a fence is secure without inspection and maintenance.
- Confusing sterile area with security restricted area - the sterile area is where screened passengers wait.
Rule of thumb
Identify, authorize, verify, record. Worked example: a contractor arrives at a gate with a valid badge but no escort for a critical part. The correct action is to deny entry until the escort arrives, even though the badge is valid - authorization is area-specific.