Checking of identity cards & Decal's on the vehicle
While on the surface this is a very good move as it only allows authorized personel to enter the premises but, This measure has reduced the process of authorization to possession of a peice of plastic. Unless the identification card is checked against a pre-validated database this measure is useless. So the guard at the gate should have a PDA with a barcode/rfid reader to validate the badge and verify wether the person presenting the badge is the same as the person to whom the badge was issues.
Failing this simple step of security exposes us to the following risks
- An unauthorized person gaining enterence to your premises by
- Taking a snapshot of a valid badge from a distance and replicating the design and colors offline
- Arranging for a small accident for a regular employee snatching his badge replacing teh photo and voila. full access to your premises.
- Similarly on the decal side unless we validate the vehicle being teh same for which the decal was issues and the driver is an pre-authorized person. we just create another hole in our security fabric.