Access Control at a Service Gate During a Construction Project
An international airport is building a new pier. A contractor will bring 180 workers per day through a service gate in the perimeter fence for 14 months. The gate currently has one turnstile, a guard post, and a vehicle barrier. The contractor proposes issuing a single 'project pass' to each worker, valid for the whole project, with no airport-side background check beyond the contractor's own screening. The airport security manager notes that the service gate is 40 metres from a taxiway holding area, and that the contractor's night shift ends at 02:00 when the guard post is staffed by a single officer. The regulator requires that access to the security restricted area be limited to persons with a demonstrated need and subject to background verification.
1. Identify the specific vulnerabilities in the contractor's proposal and rank them by risk.
Read the worked answer
The proposal creates at least five distinct vulnerabilities. Ranked: (1) A project-long pass with no airport-side background verification defeats the requirement that access be granted only after verification, and a single pass cannot be revoked granularly if one worker becomes a concern. (2) One pass per worker with no zone restriction means 180 people can move from a construction zone into operational areas, including the taxiway holding area 40 metres away. (3) The 02:00 single-officer post is a single point of failure for both access decision and response; fatigue and lone-working risk compound it. (4) The turnstile alone does not prevent tailgating, and construction traffic (materials, tools, vehicles) creates legitimate reasons for propped doors. (5) Contractor self-screening creates a conflict of interest, since the contractor is motivated to move workers quickly. The ranking reflects both likelihood and consequence: the background verification and zone restriction gaps have the highest consequence because they permit unauthorized presence in the most sensitive area, while the staffing and tailgating issues are more likely but partly mitigable by procedure.
2. Design a layered control set that keeps the project on schedule while meeting the regulatory requirement.
Read the worked answer
Layer identity, access, and monitoring. Identity: every worker undergoes airport-administered background verification before any pass is issued, with the contractor submitting names in advance and the airport retaining the decision. Access: issue individual, photo-bearing passes with a defined validity period (for example, 90 days, renewable), restricted to the construction zone and a defined transit corridor, with readers at the zone boundary so the pass cannot open operational doors. Add a second factor (PIN or biometric) at the turnstile to prevent pass sharing. Physical: anti-tailgate detection at the turnstile, a second officer or remote monitoring at night, and a vehicle search bay for materials. Procedural: a signed contractor security agreement with penalties, a named contractor security liaison, daily manifest reconciliation, and a same-day revocation process. Monitoring: CCTV coverage of the gate and corridor retained per regulation, plus periodic patrols. Schedule protection comes from pre-registration and staggered shift windows so throughput is not the bottleneck.
3. How would you measure whether the controls are working after the first 60 days?
Read the worked answer
Define leading and lagging indicators and review them monthly with the contractor. Leading: percentage of workers verified before first entry (target 100%), average time from name submission to pass issue, number of passes revoked and time to revoke, turnstile alarm and anti-tailgate event counts per shift, and door-held-open alarms. Lagging: unauthorized-access attempts detected, escort violations, and findings from patrols and audits. Also sample-test the system: attempt entry with an expired pass, a pass for another zone, and a shared credential, and record whether the control responds as designed. Compare night-shift event rates to day-shift rates to test whether the single-officer period is a genuine weak point. Feed results into a corrective action log with owners and dates, and report to the airport security committee.