The 08:55 Tailgate
You staff the lobby desk of a six-floor financial services tenant: 280 badgeholders, one controlled entrance with a turnstile, and a visitor-management kiosk. At 08:55, peak arrival, you see a woman in business attire hold the door for two men in hoodies carrying backpacks, then head to the elevator bank without badging. When you call out, she says, "They're with me, I'm late for a 9:00." Behind her a line of 11 people is forming. The turnstile log shows three entries in the last five minutes where a badge was accepted but no photo displayed. A contractor badge that expires tomorrow is still fully active. Your post orders require photo verification and no unescorted visitors above the lobby.
1. The two men are already moving toward the elevators. What do you do in the next two minutes, and what do you deliberately not do?
Read the worked answer
Priority order: control the person, not the line. A growing queue is pressure, not authority.
- Move to intercept, not to block physically. Step ahead to the elevator bank, stay to the side, hands visible. "Excuse me, folks - I need 30 seconds. Sirs, are you badged with this tenant?"
- Address the men, not the escort. People who are legitimately escorted answer easily. The response tells you which situation you have: a confused visitor, or someone exploiting a friendly employee.
- Verify against the kiosk. Were they logged as visitors? If not, they don't proceed. Escort them back to the desk to sign in and get a temporary badge, or call the tenant contact to confirm. If the employee vouches for them and won't wait, take the employee's name and department and let the tenant contact confirm by phone - from the lobby.
- Do not: physically restrain anyone, grab a bag, or let the queue push you into waving them through. Do not accuse the employee of anything in front of her colleagues; "I just need to log them" works better and achieves the same result.
- Call for help early if the tenant contact can't be reached and the men refuse to wait - a supervisor, or the building's second officer. One officer cannot manage a line and an unresolved access event at once.
Why not just let it go: an unlogged visitor above the lobby defeats the entire control - the turnstile, the kiosk, and your post.
2. What systemic gaps does this single event reveal, and how would you prioritize fixes?
Read the worked answer
This is one incident with at least five contributing failures. Prioritize by how much each one degrades the control:
- No photo displayed on badge read (high). The turnstile is checking that a card is valid, not that the holder is the owner. That converts 280 badges into 280 shared keys. Fix first: enable cardholder photo display at the desk and turnstile reader, or add a biometric/PIN element.
- Tailgating at peak (high). Human door-holding is the default; the design assumes a courtesy that will always be extended. Consider a tailgate-detection sensor, a one-person-per-read turnstile with a delay, or a staffed 07:45–09:15 surge post - the cheapest fix is often moving the officer's position to the door during the 45 minutes it matters.
- Expired/expiring badges still active (medium). Manual expiry is a process that fails silently. Request an automated expiry rule and a weekly reconciliation report from the badge system administrator.
- Visitor flow (medium). If escorts are late, visitors will be skipped. Pre-registration and a printed daily visitor list at the desk cut the 08:55 negotiation.
- Officer capacity (medium). One desk cannot run verification, the kiosk, and a queue.
Rank by likelihood of recurrence × consequence, and put the fixes in writing to the client with cost and owner. That is what turns an incident into a security improvement instead of a complaint.
3. The employee later complains that you "singled her out" and embarrassed her. How do you document and communicate this, and what would you do differently?
Read the worked answer
Documentation: a factual entry - time, door, what you observed (door held, two men entered without badging, no visitor record), what you said, what the employee said, what the men said, resolution, and the names of the tenant contact you verified with. Keep out any characterization of her attitude. If the log shows a repeated pattern of the same door at the same time, note the pattern - the complaint is about one morning, but the risk is about 280 badgeholders.
Communication: respond to the complaint through your supervisor, not by pulling her aside in the lobby. The content should be simple: the check was about the two unbadged visitors, not about her; the rule applies to everyone at the door; the point of the program is that her badge means something. A short, friendly email from the client's facilities lead lands better than a security officer explaining policy in a corridor.
What I'd do differently: the interception point. Calling out across a busy lobby is public by nature. A better approach is to position at the elevator bank before the line builds, or to step to the door and say quietly, "I'll need those two to sign in - takes a minute." Same enforcement, no audience. Also: a pre-shift check that no badge is expiring within 48 hours costs 30 seconds and prevents tomorrow's version of this exact event.