The Expired Badge, the Unmarked Van, and the Backpack by the Fence
At 0930 a man in a work shirt and a safety vest presents at the loading dock of a chemical blending plant. His contractor badge expired 11 days ago. He is not on today's work list, which shows two HVAC contractors arriving at 1300. He says he is there to "check the HVAC filters" and that "the office must have forgotten to put me down." His van is white, has no company markings, and carries out-of-state plates. While you are checking the list he asks which door the control room is behind and what time the shift changes. Ten minutes later, a walk-around of the fence line turns up a black backpack leaning against the south fence, with no one nearby.
1. How do you handle the entry request from start to finish?
Read the worked answer
Verify through a channel he did not provide, and do not let him in while you do it.
- Be courteous and unhurried: "I can't admit you without a current credential and a work order - let me verify." Keep him at the dock, outside the controlled area.
- Verify by calling the contracting company's number from your own records, not a number he gives you, and call the plant's facilities contact. An expired badge plus no work order plus an off-list arrival is three independent failures, not one clerical error.
- Do not accept "the office forgot" as authorization from anyone but the office. If facilities confirms in person or by recorded line, re-badge him against a photo ID, log the visit, and escort.
- No verification = no entry. Ask him to leave the property; if he refuses, that is a trespass matter for police, and you call them rather than physically removing him.
- Record: name as given, ID presented, badge number and expiry, vehicle description and plate, times in and out, and the names of everyone you spoke with.
2. The questions about the control room and shift change bothered you. How do you justify reporting him without crossing into profiling?
Read the worked answer
Report the behaviors and the verifications that failed - that is what an investigation can act on.
- Articulable facts: expired credential; not on the access list; no matching work order; unmarked vehicle with out-of-state plates inconsistent with the firms under contract; unsolicited questions about the location of a control room and the timing of shift changes, which are not information an HVAC technician needs; an attempt to explain away the access failure before being asked.
- Pretext questioning is a recognized indicator on its own: someone with a legitimate work order does not need to talk his way past the credential check.
- What you do not write or say: anything about his race, ethnicity, national origin, religion, or language. Those are not indicators, they are liabilities, and they destroy the credibility of the report.
- Route it: notify your supervisor and the facility security contact immediately, and report to local police or the state terrorism tip line with the specific facts. Describe the van, plate, and person factually.
- Test of your own reasoning: could you hand this to an investigator who never saw the man and have them act? If yes, you reported behavior. If no, you reported a feeling.
3. What do you do about the backpack at the south fence?
Read the worked answer
Unattended item at a chemical facility is treated as suspicious until proven otherwise - hands off, distance, notify.
- Do not touch, open, move, or kick it, and do not let anyone else do so. Do not use a radio or cell phone within a few feet of it; move away before transmitting.
- Note what you can see from a safe distance: color, size, straps, any wires or protruding items, exact location relative to fence posts and buildings, time found, and whether it was there on your previous round.
- Establish a perimeter - a few dozen yards, more if the facility handles hazardous material - and keep foot and vehicle traffic out. Notify your supervisor and call 911; the bomb squad or police decide what it is.
- Start the accountability question: who has been on the south fence line today, what the camera covers, and whether the van is still on site.
- After the item is cleared or removed, write the report with times, distances, actions, and the names of the responders who took custody. If it turns out to be a worker's lunch bag, the report still stands as a correct decision.