Access Control and Physical Security
What this domain tests
This domain tests how guards control who enters, where they go, and what they bring in. The exam emphasizes verification, tailgating prevention, key control, and the balance between security and life-safety egress.
Core rules
- Verify identity and authorization before entry. Check badges, visitor passes, appointments, and IDs against approved lists; do not rely on appearance or familiarity.
- Use visitor management: sign-in, purpose, host, time in and out, badge issue, and escort rules. Collect badges on exit.
- Prevent tailgating and piggybacking. One badge should admit one person unless policy says otherwise. Challenge politely: “Excuse me, may I see your badge?” Position yourself to observe the reader and the door.
- Control keys, access cards, and codes. Log issuance and return; report lost keys immediately; never prop secure doors open.
- Physical security includes lighting, locks, fences, alarms, cameras, and clear sightlines. Do not block fire exits, alarm panels, or extinguishers; security hardware must not defeat emergency egress.
Worked example
At an employee entrance, a man in a company jacket follows an employee through the door without badging. The guard says, “Sir, I need to verify your badge before you go in.” The man says he forgot it. The guard checks the approved list, calls the supervisor, and issues a temporary visitor badge with an escort. He does not accept the jacket as proof and does not physically block the fire exit.
Traps
Assuming a uniform or badge is authorization; holding a door for a stranger; propping doors; failing to log keys; and blocking egress during a challenge.