IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue Infrastucture Remarks
____________________________________________________________________ .........................................
S 1.17 Entrance control service
Initiation responsibility: Head of General Services Section
Implementation responsibility: Internal Services Division
Establishment of an entrance control service has far-reaching positive effects
against a number of threats. However, this presupposes that some fundamental
principles are observed in the performance of entrance control.
- Gatekeepers observe and/or monitor all movements of persons at the
entrance.
- Unknown persons ("even the new boss") will have to prove their identity to
the entrance control staff.
- Before allowing a visitor to enter, the gatekeeper will check with the
person to be visited.
- A visitor will be escorted to the person to be visited or will be met by the
latter at the entrance.
- Gatekeepers must know the staff members. In case of termination of
employment, gatekeepers must also be informed of the date from which
this member of staff is to be denied access.
- A visitors' log may be kept to document access. The issue of visitor's
passes is to be considered.
The working conditions for entrance control staff are to be designed with due
regard to the tasks to be performed. The description of tasks must precisely
define the tasks of entrance control staff (gatekeepers) in support of other
protective measures (e.g. building security after business hours, activation of
the alarm system, checking of outside doors and windows).
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000