Outdated Post Orders vs. a New Visitor Kiosk
You take over a 12-story office tower with three guards per shift. The post orders were issued in 2021 and still require a paper visitor log, signature by every contractor, and a telephone call to the tenant before any visitor is admitted. Last month the client installed a digital visitor kiosk that scans government ID, prints a badge, and notifies hosts by email. The client’s facilities manager tells your guard, ‘Stop using the paper log-the kiosk is the record now.’ Your guard has continued the paper log and has also begun photocopying visitors’ ID cards ‘for backup,’ which the kiosk does not do. A tenant complains that a contractor was admitted without a host confirmation because the kiosk auto-approved a pre-registered visitor. The guard says the post orders are ‘the law’ and the client is ‘breaking the contract.’
1. Is the guard right to insist on the paper log? How should you resolve the conflict between the client’s instruction and the current post orders?
Read the worked answer
The guard is half right. Post orders are the guard’s operational authority and protection; a guard should not abandon them because a client employee gives a verbal instruction. But post orders are not ‘the law’-they are a controlled company document that can and must be revised when the site changes. The guard’s mistake is treating the conflict as a personal standoff instead of escalating it.
My resolution would follow a hierarchy: life safety first, then law and regulatory requirements, then the contract, then client preference. The kiosk does not obviously breach safety or law, but the auto-approval complaint shows a security gap that must be fixed before the paper log is retired. I would tell the guard to keep the paper log temporarily, stop photocopying IDs immediately, and record the client instruction and the tenant complaint in the pass-down log. I would then contact the account manager and the client’s facilities manager to agree an interim procedure in writing: kiosk as primary record, paper log only for exceptions or kiosk outages, and host confirmation required for any pre-registered visitor who arrives without a confirmed host response.
A verbal client instruction cannot silently override post orders. A written, jointly approved revision can.
2. What interim written guidance would you issue to the guards before the post orders are formally revised?
Read the worked answer
I would issue a one-page interim memo with a clear start time, expiry date, and approval names. It would cover five points.
First, the kiosk becomes the primary visitor record, but the paper log remains for kiosk outages, refused ID scans, and visitors who cannot use the kiosk. Second, no visitor is admitted on auto-approval alone if the host has not responded; the guard calls the host and records the name and time. Third, contractors still sign the contractor register until the client confirms that the kiosk captures contractor induction and insurance details. Fourth, guards must not photocopy, photograph, or retain visitors’ identity documents. Fifth, any conflict between the memo and the old post orders is escalated to the supervisor, not resolved at the desk.
The memo should be read and acknowledged by each guard on shift. I would also post it at the guard desk and attach it to the pass-down log. The expiry date matters: an interim memo that lives forever becomes a second, uncontrolled set of post orders. The goal is to keep the post running while the formal revision goes through review.
3. What should happen to the photocopied IDs, and what is the correct process for revising the post orders?
Read the worked answer
The photocopied IDs are a privacy and liability problem. I would stop the practice immediately, secure the copies, inventory what exists, and hand them to the account manager or privacy lead for disposition under company retention policy. I would not simply shred them without a record, and I would not leave them in the guard desk. If any copies were shared with the client, I would identify who received them and notify the account manager. The guard needs clear instruction, not humiliation: the reason is identity theft and data-protection exposure, not distrust.
The revision process should be deliberate. Draft changes with the client, mark the version and effective date, and identify every section affected-visitor management, contractor control, after-hours access, and escalation. Review against the contract and any regulatory requirements. Get written client approval and company approval. Train the guards, have them acknowledge the new version, and remove or stamp ‘superseded’ on the old copies. Set a 30-day review to check whether the kiosk is actually capturing the required records. Finally, add a change-control clause so the next client-installed system does not create another verbal override.