Access Control and Premises Protection
The access-control model
Access control moves people and vehicles through authorized points and denies everything else. Layers: perimeter, building envelope, interior zones, and high-security areas. Verification should be active: look at the badge, match the photo, check the access list, and confirm the purpose. Visitors sign in, receive a badge, are escorted where policy requires, and sign out. Keys and cards are issued, logged, and recovered.
Common attacks
Tailgating (following an authorized person through a door) and piggybacking (with permission) defeat a card reader. Challenge politely: 'I don't recognize you. May I see your badge?' Do not hold secure doors for strangers. Report propped doors, missing badges, and broken locks immediately.
Worked example
A man in a delivery uniform follows an employee through the employee entrance. The guard says, 'Sir, I need to verify you at the visitor desk.' The man says he is in a hurry. The guard does not block with force; he steps to the side, keeps the door closed, and directs him to the desk. The delivery is logged, the employee is reminded not to allow tailgating, and the incident is reported.
Traps
Trusting a uniform; relying on badge color alone; allowing unescorted visitors; sharing access codes; propping doors; failing to recover badges at separation.