How do you implement a layered access control system in a workplace?

• A. Use a single locked door with a passcode
• B. Rely solely on CCTV for access decisions
• C. Remove visitor management to streamline flow
• D. Combine perimeter security, credentialed access, visitor management, and ongoing monitoring with defined procedures

Answer: (D)

Layered access control is about defense in depth—using multiple controls at different points so one weakness doesn’t lead to a breach. The best approach is to combine perimeter security, credentialed access, visitor management, and ongoing monitoring with defined procedures. Perimeter security creates the first barrier, deterring or detecting unauthorized entry. Credentialed access verifies identity and permission at entry points, using badges, PINs, or biometrics to ensure only authorized people reach protected areas. Visitor management governs non-employees, requiring sign-in, escorts, and temporary credentials to maintain accountability for who is in the facility and where they go. Ongoing monitoring ties everything together with real-time surveillance, alarms, access logs, audits, and clear incident response, revocation, and maintenance procedures. This integrated system reduces the risk of a breach by providing multiple overlapping safeguards and a traceable record of entries. Relying on a single locked door, or on CCTV alone to make access decisions, lacks preventive control and verification, and removing visitor management eliminates essential oversight of non-employees.