After-Hours Tailgating at a Mixed-Tenant Tower
A 12-story, 410,000 sq ft office tower has 1,200 badge holders across six tenants, a shared lobby, a loading dock, and a basement data center leased to a financial services tenant. The building currently uses standalone keypad locks on tenant suites, a single lobby receptionist from 07:00 to 18:00, and paper logs at the loading dock. Over the past six weeks, security has documented three tailgating incidents at the main lobby turnstiles, two propped fire doors on floors 7 and 9, and one unauthorized entry into the loading dock after 22:00. The property manager wants a card reader on every door and a policy requiring badges to be worn visibly. Tenant leases permit 24/7 access for the data center tenant but restrict other tenants to 06:00-20:00, with cleaners working 22:00-05:00. The budget is capped at $180,000 for phase one, and the owner wants measurable improvement within 90 days.
1. What risk assessment and asset-classification work should precede the phase-one design, and which findings would most change the access-control zoning?
Read the worked answer
Start with an asset- and consequence-based assessment rather than a door count. Inventory the data center, tenant records, cash or pharmaceutical storage, loading-dock goods, and the lobby as a public/transition zone; interview each tenant about after-hours work, terminations, and visitor practices; review the three tailgating reports, the two propped-door events, and the loading-dock entry for time, method, and whether the person was authorized. Map legitimate flows: 1,200 badge holders, cleaners 22:00-05:00, data-center 24/7 staff, and deliveries. Classify assets by confidentiality, integrity, availability, and life-safety impact. The findings most likely to change zoning are that the data center needs a separately controlled layer, the loading dock needs a service vestibule and procedural control, and the propped fire doors need monitoring rather than just card readers. A reader on every door could over-control low-risk interior doors while leaving tailgating and door-held-open risk unaddressed. Use least privilege and time zones, but validate that egress and fire-door function are not compromised.
2. Recommend a zone and control concept for the lobby, loading dock, tenant suites, and data center, including where access control alone is insufficient.
Read the worked answer
Design four zones: public lobby, tenant suite, service/loading, and high-security data center. Lobby: turnstile or optical lane with anti-tailgating, visitor management, reception during business hours, and camera coverage; after hours, card plus remote verification. Tenant suites: card readers with request-to-exit and door-position switches on suite entrances; per-tenant time zones matching leases, with exceptions logged. Loading dock: intercom, camera, door position, and a scheduled access window; require delivery drivers to be escorted or held in a vestibule, and do not rely on the card reader alone because the risk is unauthorized piggybacking and propped doors. Data center: separate zone with two-factor authentication, least-privilege access, and audit trail; consider a mantrap if budget permits, but prioritize door monitoring and alarm response. Across all zones, do not rely on access control alone for tailgating: add door-held-open alarms, propped-door alerts, CCTV analytics, and guard response. Fire doors must remain self-closing and release on alarm; access control should not defeat egress.
3. How would you measure whether the $180,000 phase-one spend reduced risk within 90 days?
Read the worked answer
Establish a baseline before installation: incidents per 1,000 badge-hours, tailgating attempts, propped-door events, door-held-open duration, unauthorized-entry attempts, badge-sharing observations, and response time. After phase one, compare the same measures over 90 days, segmented by zone and shift, because the cleaners and data-center populations differ. Add leading indicators: percentage of doors with monitored door position, percentage of badge holders with correct time zones, visitor-log completeness, and alarm-to-response time. Do not use installation counts as the outcome. A drop in reported tailgating may reflect underreporting, so pair PACS data with guard observations and CCTV sampling. Set thresholds, such as fewer than a defined number of propped-door minutes per week, and review monthly. If the data center has no increase in access exceptions and the lobby shows fewer piggyback events, the spend is addressing the identified risk; if loading-dock entries persist, shift budget to procedures and camera analytics.