2026-10-26
A Uniform Is Not Permission: Check That Contractor
By Toukir Bin Islam · Security Talk
Someone arrives with tools, a company shirt, and an urgent explanation: a manager called them to fix a problem. The story might be completely legitimate. The purpose of access control is to verify it through the site's process, not to judge how convincing the visitor looks.
Use this contractor-arrival framework alongside your employer's post orders. The exact identity checks and records should follow the property's approved policy.
Confirm the appointment and host Check the expected-visitor or work-order information available to your role. Establish who requested the work and who can authorize entry. If the visit is unexpected, contact the responsible person through a known internal channel.
A telephone number supplied by the visitor can be useful context, but it should not be your only verification. An urgent tone does not establish authority to bypass the normal process.
Match access to the work Confirm which areas are approved and whether an escort is required. Permission to repair one item does not automatically authorize movement throughout a building. Explain relevant restrictions respectfully and clearly before access is granted.
If the job changes, obtain clarification through the authorized contact. Avoid creating a new exception simply because the contractor says the additional work will take only a minute.
Record the handoff Use the approved visitor or contractor system to record arrival, host, and any temporary credential or key issued. Collect only the information required by policy. Keep records away from other visitors and people who do not need access.
Close the visit properly Follow the departure procedure, including returning assigned access items and notifying the host when required. If work continues across shifts, communicate the status and authorization to the incoming officer.
A visit is easier to manage when arrival and departure are part of the same process, rather than two unrelated conversations.
Practice the difficult version Supervisors can rehearse an unannounced service call with staff: who gets contacted, where the visitor waits, and what happens if the host cannot be reached. This is a planning exercise, not a reason to improvise physical confrontation.
Takeaway: Verify the person, the work, and the scope of access. Professional appearance is useful identification context, not permission by itself.
Source: BLS: Access-control responsibilities.
Related reading: Continue with this practical security guide.