Visitors to a company's facilities should be allowed unrestricted access as long as they have signed in as a visitor in the company's logbook and have been issued a visitor's badge.

• A. True
• B. False
• C. Not specified
• D. It depends

Answer: (B)

Access to a company's facilities must be controlled based on what a person is allowed to do and where they are allowed to go, not just on logging a visit and issuing a badge. Signing in and receiving a visitor badge is only a first step for identification; it does not authorize access to all areas. Effective physical security uses layered controls that limit where a visitor can go, often requiring an escort for certain areas, time-bound permissions, and specific approvals from the host or security team. Some zones are restricted due to safety, privacy, or confidentiality concerns, and even visible badges can be lost, misused, or bypassed through tailgating if not properly enforced. Therefore access should be restricted to the minimal areas necessary for the visit and managed with procedures like escorting, denial of access to sensitive zones, and removal of access when the visit ends.