Security Operations and Access Control
Purpose of access control
Access control ensures that only authorised people, vehicles, and goods enter or leave a site. It rests on three pillars: identification (who are you?), authorisation (are you permitted?), and recording (what happened?).
Key concepts
- Control points: designated gates, doors, and reception areas. Reduce the number of entry points and monitor them consistently.
- Authorisation methods: visitor registers, access cards, biometrics, permits, and escort rules. Verify against a list, not against a person's confidence.
- Visitor management: sign in, issue a badge, record time in/out, escort where required, and sign out.
- Vehicle and goods control: check delivery notes against loads; inspect outgoing goods against authorised removal documents.
- Key and equipment control: log issue and return; never leave keys unattended.
Traps in questions
Watch for "tailgating" and "piggybacking" - one authorised person lets an unauthorised person through. Questions may suggest that a familiar face needs no check, or that a verbal claim of authority is sufficient. It is not. Another trap is treating a visitor badge as site-wide access.
Rule of thumb
Verify, record, and never assume. If authorisation cannot be confirmed, deny entry politely and escalate.
Worked example
A contractor arrives without a permit but says the site manager approved the work. Correct action: politely hold them at the control point, contact the site manager to confirm, record the outcome in the register, and only then issue access - with escort if required.