How should a facility manage visitor access while protecting sensitive areas?

• A. Allow free access to all areas during business hours.
• B. Provide temporary passes to anyone who requests.
• C. Limit access by posting signs only.
• D. Use controlled access, escorts, badge checks, restricted zones, and logging.

Answer: (D)

Layered access control is essential for protecting sensitive areas while still allowing necessary visitor access. Relying on signs alone or letting anyone roam freely creates gaps that can be exploited, and issuing passes to anyone without verification undermines accountability. The strongest approach combines physical and procedural measures: controlled entry points that verify identity and grant access only to authorized individuals; escorts for visitors to sensitive zones; badge checks to confirm credentials at entry; clearly defined restricted zones that limit where visitors can go; and logging of all visits so movements are recorded and traceable. This combination not only prevents unauthorized entry but also provides a clear audit trail for security reviews and incident response.