What should enforcement of onsite personnel and visitor identification procedures include?

• A. Identifying onsite personnel and visitors, noting changes to access requirements, and revoking expired visitor IDs.
• B. Identifying only employees, not visitors.
• C. Visitor IDs are unnecessary.
• D. Identifying visitors only during emergencies.

Answer: (A)

Enforcement of onsite personnel and visitor identification procedures ensures that only authorized people are in secure areas and that access rights are kept current. This means you verify both employees and visitors, keep an up-to-date record of who is on site and their level of access, and promptly reflect any changes to access requirements so someone who should have reduced or increased permissions doesn’t retain inappropriate access. It also requires revoking expired visitor IDs to prevent reuse of credentials.

This is why the best approach is to identify both onsite personnel and visitors, note changes to access requirements, and revoke expired IDs—together these steps maintain accurate, time-bound control over who can enter sensitive areas. The other options fall short because they omit one or more of these essential elements, such as excluding visitors, claiming visitor IDs are unnecessary, or restricting identification to emergencies only.