"Professional security begins with professional conduct."
Access Control and Visitor Management
Instructor Sele: Every unauthorised person who enters your post is a failure of access control. This module teaches you to run a professional checkpoint — courteous, consistent, and impossible to bypass.
Section 1 — The Purpose of Access Control
Access control is the process of regulating who and what enters and exits a facility. A strong access control system prevents theft, assault, espionage, and unauthorised access to sensitive areas. It also creates a documented record of all persons who were on site — critical in any investigation.
Section 2 — The Five-Step Visitor Process
Follow these steps every time, with no exceptions: 1) Greet — make eye contact, greet politely. 2) Identify — request a valid government-issued ID (national ID, passport, driver's licence). 3) Verify — contact the host to confirm the visit is expected. 4) Log — record full name, ID number, organisation, purpose, host name, time in. 5) Issue — provide a visitor badge and note time out on departure.
Section 3 — Handling Difficult Visitors
If a visitor becomes aggressive when asked for ID, remain calm and professional. Never raise your voice. Inform them clearly that this is a security requirement for all visitors, no exceptions. If they refuse, they cannot enter — and you must document the refusal and report it to your supervisor.
Section 4 — Tailgating and Piggybacking
Tailgating occurs when an unauthorised person follows an authorised person through a controlled door without presenting credentials. It is one of the most common access control failures. Never wave someone through. Every person must present credentials independently. If you witness tailgating, address it immediately and log it.
- •All visitors must be greeted, identified, verified, logged, and badged — every time
- •No exceptions policy prevents social engineering attacks on your post
- •Log time in AND time out for every visitor
- •Challenge tailgating immediately — it is a security breach, not a courtesy
- •Report all refused entries and unusual visitor behaviour to your supervisor
"I once had a man argue for 10 minutes that he was the CEO's personal friend and didn't need to sign in. I held my position politely for 10 minutes. The CEO came down to vouch for him — and personally thanked me afterward. Consistency is not rudeness. It is professionalism."
What is tailgating in the context of access control?