8.1 Fixed Posts, Access Control & Visitor Management

Taking responsibility for a post

A fixed post may control a lobby, vehicle gate, loading dock, residential entrance, construction access point, or security operations desk. At relief, arrive fit and on time; read current post orders and special instructions; receive a verbal briefing; check keys, radios, phones, logs, badges, panic alarms, cameras, and emergency equipment; and record the transfer. Never sign that an item or condition was checked when it was not. Unresolved alarms, visitors still inside, disabled cameras, missing keys, temporary badges, restricted-area work, and expected deliveries must be carried forward.

Post orders define who authorizes entry, hours, credential types, visitor sponsorship, search conditions, deliveries, denied-person procedures, emergency access, and escalation. If an order is unclear or conflicts with law, preserve security and contact supervision. Do not solve ambiguity by inventing a permanent exception.

The access decision

For each person or vehicle, verify the elements the site requires:

• Identity: does the credential belong to the presenter and appear valid?
• Authorization: is this person or vehicle permitted at this boundary now?
• Destination: is the requested location permitted?
• Purpose: does a host, work order, roster, or delivery record support the visit?
• Conditions: escort, inspection, protective equipment, time, parking, or other restrictions.

Look at the person and credential, not merely a badge-shaped object. Check expiration, photo, name, access level, signs of alteration, and electronic result. Do not let status, impatience, familiarity, or an executive title replace the required check. If a system denies access, do not repeatedly override it; follow the exception process and investigate through authorized contacts.

Visitors, contractors, and deliveries

A visitor process typically includes identification, host verification, purpose, entry time, badge issue, instructions, escort status, restricted areas, and exit/badge return. Protect the visitor log from public view. Confirm the host using a trusted directory or internal contact method rather than a phone number supplied solely by the visitor. Contractors may also require a work order, safety orientation, license, equipment list, or after-hours approval.

Inspect deliveries only within consent, posted conditions, training, and policy. Match carrier, manifest, destination, seals, quantity, and unusual damage. Isolate a suspicious package and use the bomb-threat procedure; do not open it simply because the paperwork is wrong. Refuse or stage an unverified delivery in the designated place and notify the recipient.

Social engineering and tailgating

Attackers exploit courtesy and urgency: “I forgot my badge,” “The president is waiting,” “IT told me to collect the server,” or “Hold the door—my hands are full.” A professional response is polite verification. Never share schedules, phone lists, camera coverage, alarm status, or access codes with an unverified caller. Call back through a known number.

Tailgating occurs when an unauthorized person follows an authorized entrant without individual verification. Position the control point so one credential corresponds to one entrant, use barriers correctly, and challenge under policy from a safe position. Do not create a physical struggle at a dangerous doorway for a routine badge issue; lock or contain as designed, observe direction, and summon support.

Failure and emergency modes

When power, locks, cameras, or the credential system fail, apply the continuity plan: manual roster, paper badge, added guard, controlled door, or suspension of nonessential entry. Record the start and end, affected areas, approvals, people admitted, and compensating controls. Never prop open a secure door as an undocumented workaround.

Emergency responders must not be delayed by ordinary visitor steps. Use the designated gate, open controlled routes when authorized, give location and hazard information, and record agencies entering when practical without compromising urgent response. Keep unrelated people from following emergency vehicles inside.

The fixed-post standard is verify, decide, document, and escalate. Familiarity can improve service, but it never becomes a credential.

Uniform, card, and inspection duties

While on duty, carry the physical Board-issued identification card and present it when properly required. Wear only the Board-approved agency uniform and markings. Delaware requires Board approval for uniforms, patches, badges, seals, vehicles, markings, letterhead, business cards, and advertising. “Patrol” or “officer” must be preceded by “security,” government seals and confusing government appearance are forbidden, vehicle auxiliary lights are limited to amber and/or clear, and sirens are prohibited. The agency patch must identify the agency rather than use a generic security design.

The Professional Licensing Section may inspect a guard on post and may inspect an agency office during business hours without advance notice. Keep credentials, post records, and issued equipment ready for lawful inspection; never conceal an unqualified assignment. Agencies also maintain required rosters and job-site information.