Visitor Management

5 minutes 5 Questions

Visitor management is a critical aspect of physical security that focuses on controlling and monitoring access to a facility or secure area by individuals who do not hold regular credentials, such as clients, vendors, or temporary staff. A robust visitor management system should include visitor identification, verification of the purpose and duration of the visit, escort requirements, and issuance of temporary access credentials. In addition, the system should log all visitor activity and maintain records to facilitate audits and investigations if necessary. Effective visitor management is crucial to prevent unauthorized access, protect sensitive information, and maintain overall security.

Guide to Visitor Management in Physical Security (CISSP)

Visitor management is an essential component of physical security, crucial in controlling access and maintaining safety within organizations.

What is Visitor Management?
It is a process used for tracking the usage of a public building or site by visitors. In the context of CISSP, it usually involves a coordinated system of identification, access control, and record keeping.

Why is Visitor Management Important?
It helps organizations maintain control over who is entering their premises. This is important in preventing potential security threats, ensuring intellectual property protection, and providing a record of visitors for potential future investigations.

How Does It Work?
It typically involves a few stages:

Registration: Visitors provide identification and the purpose of their visit.
Approval: The visit is approved by an authorized person within the organization.
Access Control: Visitors are given access to specific areas necessary for their visit purpose.
Records Keeping: Details of the visit are recorded for future reference.

Exam Tips: Answering Questions on Visitor Management

Focus on the importance of registration, approval, and access control. Mention these aspects in your answers.
Highlight the role of record keeping not only for audit purposes but also as a preventive measure against security incidents.
Use real-world examples to demonstrate your understanding of visitor management and its significance.

Remember, demonstrating a thorough understanding of the concept and its application is the key in a CISSP exam.

Test mode:

Exam (Timed)

Practice (With explanations)

Start practice test

Question 1

A visitor arrives for a meeting with an employee who is unavailable. What should the receptionist do?

Guide the visitor to the employee's office Allow the visitor to wait in the building until the employee arrives Give the visitor an extended access badge to roam around Inform the visitor of the unavailability and offer to reschedule

Correct Answer: Inform the visitor of the unavailability and offer to reschedule

Informing the visitor of the unavailability and rescheduling maintains security and proper communication with the visitor. Other options potentially compromise security or reflect poorly on the company.

Question 2

An unexpected visitor requests access to the server room. How should the receptionist proceed?

Deny access and ask for proper authorization Grant access, considering the visitor looks trustworthy Allow access if the visitor claims to be from IT Call the IT department to confirm and let them decide

Correct Answer: Deny access and ask for proper authorization

Denying access and asking for proper authorization ensures that only authorized personnel can access sensitive areas. All other options could expose the server room to unauthorized access.

Question 3

An unidentified visitor requests to use the company's computer to check their email. How should the receptionist handle this situation?

Politely deny the request and emphasize company security policies. Allow the visitor to use a company computer without restrictions. Give the visitor access to an employee's personal computer, not the company's. Ignore the visitor's request.

Correct Answer: Politely deny the request and emphasize company security policies.

Denying the request and emphasizing security policies follows proper security protocol and maintains professionalism. The wrong answers involve granting unauthorized access or providing inappropriate alternatives.

Go Premium