Employees

An employee identification system must be in place for positive identification and access control purposes. Employees
should only be given access to those secure areas needed for the performance of their duties.

Company management or security personnel must adequately control the issuance and removal of employee, visitor and
vendor identification badges. Procedures for the issuance, removal and changing of access devices (e.g. keys, key cards,
etc.) must be documented.

Visitors

Visitors must present photo identification for documentation purposes upon arrival. All visitors should be escorted and
visibly display temporary identification.

Deliveries (including mail)

Proper vendor ID and/or photo identification must be presented for documentation purposes upon arrival by all vendors.
Arriving packages and mail should be periodically screened before being disseminated.

Challenging and Removing Unauthorized Persons

Procedures must be in place to identify, challenge and address unauthorized/unidentified persons.

Personnel Security

Processes must be in place to screen prospective employees and to periodically check current employees.

Pre-Employment Verification

Application information, such as employment history and references must be verified prior to employment.

Background checking

Consistent with foreign, federal, state, and local regulations, background checks and investigations should be conducted
for prospective employees.

Once employed, periodic checks and reinvestigations should be performed based on cause, and/or the sensitivity of the
employee’s position.

Personnel Termination Procedure

Companies must have procedures in place to remove employee identification, keys, facility and system access of
terminated employees.