Access controls prevent unauthorized entry to facilities, maintain control of employees and
visitors, and protect company assets. Access controls must include the positive identification of
all employees, visitors, and vendors at all points of entry.
Employees
An employee identification system must be in place for positive identification and access
control purposes. Employees should only be given access to those secure areas needed for the
performance of their duties.
Company management or security personnel must adequately control the issuance and removal of employee, visitor and
vendor identification badges. Procedures for the issuance, removal and changing of access devices (e.g. keys, key cards,
etc.) must be documented.
Visitors
Visitors must present photo identification for documentation purposes upon arrival. All visitors
should be escorted and visibly display temporary identification.
Deliveries (including mail)
Proper vendor ID and/or photo identification must be presented for documentation purposes
upon arrival by all vendors. Arriving packages and mail should be periodically screened before
being disseminated.
Challenging and Removing Unauthorized Persons
Procedures must be in place to identify, challenge and address unauthorized/unidentified
persons.


C-TPAT Physical Access Control