I love tailgating. I tailgate at my own institution and try to tailgate at others, even at corporate sites. Yet, I strongly disapprove of tailgaters and the practice in general. Of course, I’m referring to the practice of tailgating into a secured space or building, whether it’s a facility protected by standard locks and keys, guard stations, or electronic card access. Tailgating is the act of following an authorized individual into a protected/secured space by one who is not authorized to enter that space or perhaps, just that particular entrance or space.
Tailgating has been challenging physical security practices throughout history. There is myriad technology and design solutions to thwart tailgating into your facility. Facilities that require a high level of security employ tools ranging from tailgate sensors to mantraps, biometrics and the like. What are some solutions, then, for spaces that don’t require that level of security?
Consider a corporate structure with a single point of entry that is monitored by security personnel. Exits from the building are equipped with alarms. Customers, delivery staff, visitors and others desiring to enter the building present some form of credential and are required to sign in, literally, on a notebook denoting the date and time entered and likely, their destination. They are to sign out when leaving, so at the end of the day, it’s a simple matter of ensuring that sign outs = sign ins and the building, in theory, is now unoccupied except for the security staff. This is a very common and traditional entrance to an office building.
This hypothetical building also has employee entrances that are protected by electronic card access. Employees carry an ID badge that also serves as a card access key. OK, now I’m going to tailgate. I can either choose a time when a large number of employees are entering and just get in the middle of the line and walk right in. I can time my entrance to be just prior to the arrival of a lone employee, for example, and be fumbling through my wallet as if looking for an ID badge. This helpful individual who arrives shortly after I did will card-in and allow me to enter.
The last scenario is one easily activated feature that has been around for decades in card access control – the anti-passback feature. The majority of enterprise level (if not virtually all) card access systems have had anti-passback enabled for some time. That is, the system won’t allow the same credential to be presented twice at the same location within “X”number of minutes or hours and allow access. Another solution that’s been around for some time is the addition of optical tailgate sensors: One credential is presented to the system, the tailgate sensor reads two people entering, an alarm sounds and a security response is initiated. Access control course level 101, right?
When electronic access technology was new, these are details that received a lot of our attention from the system users. Consider security cameras. They have been around for a long time, but due to cultural changes and due to the affordability of video security, they seem to be just about everywhere. So much so that employees are caught on video, by very overt cameras, committing a crime, as they’ve become so accustomed to seeing video cameras that they simply blend in with the building architecture.
If you read this column regularly, you know that I preach best practices, adopting standards and reviewing the basics. It’s human nature that developed the insensitivity to the presence of visible surveillance cameras just as it becomes human nature for system users to allow tailgating. It can become so common place that it escapes the attention of our security staff and our leadership. Perhaps adding tailgate sensors in your application would be an effective solution, if you have the resources to manage the additional alarm responses. Whether you have the system capabilities, funding and resources to do so or not – it’s just time to implement that no-cost solution: education.
Remind your system users that, while it is in their nature to be friendly and helpful, letting people through the door who shouldn’t be there can cause losses and possibly harm. Remind the security front line and their leadership to be watchful for tailgating and provide them with some simple, positive responses to help them educate system users. That’s a guaranteed return on investment.
Yes, I do resort to spot checking for tailgating. In my work environment, I can do this as a sometimes “fun” challenge, yet not anger folks or insult my colleagues. Your environment may be quite different, so my approach should be used with care. Also, I’ve tailgated my way into other facilities where I had appointments with colleagues in our profession. Not to embarrass them, just to let them know. I appreciate it when people do the same for me – I’d rather have some hole in the fence discovered by a colleague who will share it in private with me versus the other possibilities.
By the way, I’ve never tried tailgating at any government, airport or any high security areas – it can be fun but I’d like to retain my professional credibility and also maintain personal safety!
