Through appropriate design, protect secure areas with entry controls to ensure that only authorised personnel can gain access.
The following control objectives for visitors must be covered in the design of the premises:
•they are authorised;
•while on site they are accompanied;
•a log is maintained of the date and time of their entry and departure;
•they are restricted to specific, authorised purposes;
•they are provided instructions for emergency procedures and specific security requirements;
•they are issued with temporary entry passes to be worn at all times while in the facilities.
The following control objectives for all personnel, contractors and others must be covered in the design of the premises:
•authentication controls;
•an audit trail;
•some type of identification to be worn at all times;
•all personnel are to report unescorted visitors or those not wearing visible identification to their supervisors;
•regular reviews of access rights, particularly to secure areas.