Access Control at a Multi-Tenant Office Building
You supervise 8 guards at a 10-storey office building with 50 tenants. The building uses a card access system for main doors and elevators, but visitor management is manual: visitors sign a register at the lobby desk and receive a paper badge. Recently, there have been complaints of unauthorized access to restricted floors (e.g., server room on 7th floor) and tailgating. The building management wants to upgrade security without disrupting business. You have a budget for minor improvements and must propose a plan that addresses access control and visitor management, considering the flow of approximately 500 employees and 100 visitors daily.
1. Identify the key vulnerabilities in the current access control and visitor management system and propose specific improvements.
Read the worked answer
Key vulnerabilities: (1) Manual visitor register is easily bypassed; badges are not distinctive and can be reused. (2) No verification of visitor identity or host confirmation. (3) Tailgating at main doors and elevators due to lack of physical barriers or guard intervention. (4) Restricted floors (like 7th floor server room) may be accessible via elevator without secondary authentication. (5) Guards may not be trained to challenge unknown persons. Improvements: (1) Implement an electronic visitor management system with photo ID capture and pre-registration by hosts; issue temporary badges with expiry. (2) Install turnstiles or speed gates at main lobby and elevator lobby to prevent tailgating; require card swipe for each person. (3) For restricted floors, add card readers in elevators or stairwells (floor-by-floor access). (4) Train guards on challenge procedures and visitor escort policies. (5) Conduct regular access audits and review CCTV. (6) Use a visitor management software that logs entries/exits and sends alerts for overdue visitors.
2. How would you deploy guards to balance security with smooth traffic flow, and what instructions would you give them?
Read the worked answer
Deploy one guard at the main lobby desk to manage visitor check-in and badge issuance, one roving guard in the lobby to monitor tailgating and assist, and one guard at the service entrance. For the 7th floor, rely on electronic access but have a guard patrol periodically. Instructions: (1) Greet visitors, verify ID, confirm host approval via phone or system, issue badge, and direct them. (2) Observe employee entry for tailgating; politely remind employees to swipe individually. (3) Challenge anyone without a visible badge in restricted areas. (4) Log all incidents of unauthorized access attempts. (5) Maintain a queue management system during peak hours to avoid congestion. (6) Coordinate with building management for any system failures. (7) Ensure guards are courteous but firm, and know the escalation matrix.