What is the PRIMARY goal of a visitor management policy as part of physical access controls?

The primary goal of a visitor management policy, as a key element of physical access controls, is to establish a systematic process for managing non-employee access to a facility. This involves verifying the identity of visitors, confirming their authorization for entry, issuing temporary credentials, and logging their arrival and departure. The policy ensures that visitor access is controlled and monitored throughout their stay, often by enforcing escort requirements and restricting access to non-sensitive areas. This structured approach is crucial for protecting an organization's physical assets, sensitive information, and personnel from unauthorized access and potential threats.

A. Policies require identification and sign-in for accountability and control, not to avoid these essential security steps.

C. A visitor policy is a specific implementation of physical access controls; it does not eliminate the need for them.

D. This violates the security principle of least privilege; visitor access must be strictly limited to necessary areas and times.

1. National Institute of Standards and Technology (NIST). (2020). Security and Privacy Controls for Information Systems and Organizations (NIST Special Publication 800-53

Revision 5).

Reference: Control PE-8

"Visitor Control

" states the objective is to "Control and monitor physical access of visitors." The discussion section elaborates on processes such as "maintaining visitor logs

" "escorting visitors

" and ensuring visitors are "identified and authorized" before being granted access. This directly supports the goal of controlling and monitoring authorized entry.

2. University of California

Berkeley. (2020). Physical Security Policy (Policy 610).

Reference: Section V.A

"Policy Statement

" outlines the requirement to "protect University property from theft or damage" and "assist in providing a safe and secure environment." Section V.C.2

"Access Control

" specifies the need to "manage physical access to University facilities

" which includes controlling visitor entry as a core component of the overall security posture.

3. Garcia

M. L. (2007). The Design and Evaluation of Physical Protection Systems. Butterworth-Heinemann.

Reference: Chapter 4

"Access Control Systems

" discusses the functions of these systems

including visitor management. The text explains that a primary function is to "determine who is authorized to enter a specific area" and to "keep records of access events." This aligns with the goal of ensuring only authorized individuals are granted entry and that their access is monitored. (Note: While a book

this is a foundational academic text in physical security).