Airport Security Organization, Planning and Access Control
Organisation and planning
Airport security is delivered through a documented structure: a security programme, an airport security committee coordinating stakeholders, designated security managers, and clear lines of accountability. Planning covers the airport security plan, contingency and emergency planning, and coordination with police, border agencies, emergency services and carriers.
A key structural concept is the boundary between landside and airside, and within airside the separation of sterile areas (screened, restricted zones) from other areas. Access control is the mechanism that maintains these boundaries.
Access control principles
Access control rests on three questions: who is authorised, to where, and under what conditions. It combines identification, authorisation, physical barriers, and monitoring. The least privilege principle limits access to what a person needs for their role. Need-to-know applies to information. Access rights must be time-limited, reviewed, and revoked promptly on termination of employment.
A critical concept is the insider threat: people with legitimate access can bypass screening entirely. Countermeasures include vetting and background checks, segregation of duties, supervision, random searches of staff, and challenge culture.
Escort and challenge are exam favourites: an unauthorised person airside must be challenged and reported, and escorted persons must remain under continuous control.
Traps
- Assuming a valid pass proves identity. A pass proves authorisation, not identity, unless identity is checked.
- Treating access control as purely technical. Doors held open defeat the best system.
Rule of thumb
For any access question, apply the sequence: identify, authorise, verify, control, record, review. If one element is missing, the control is incomplete.