Visitor control: what visitor security means at a front desk, and where a security visitor management system differs

Updated

Visitor control is the security team's phrase for the same thing the office manager calls signing people in, and the difference in language matters because it comes with a difference in expectations. A security-led deployment wants identity checked, escorts recorded and a watchlist enforced. An office-led one wants a fast desk and a host notification. The same product usually does both; the settings and the desk process are what change.

What control means in practice

Three things a record can support: validating that a person is who they claim before they are admitted, tying the visit to a member of staff who is accountable for them, and knowing whether they were escorted or free to move. None of these are enforced by software. The screen records the decision a person made, which is exactly what an auditor will ask you to evidence later.

Where a security-led deployment differs

Identity documents are checked and sometimes scanned, the sponsor is a named person rather than whoever happens to be free, and the record retention is set by a policy rather than a preference. Watchlists exist in some products: a name that matches raises an alert at the desk. Treat that with care, because a list of names with no process behind it produces false positives at a reception counter, which is a bad place to be wrong about somebody.

What the record cannot do

It cannot stop anybody entering. It does not know who walked in behind a badge holder, it does not lock a door and it does not verify a document is genuine. Sites occasionally buy a sign-in expecting a control and discover they bought evidence. Evidence is useful and worth having; it is not the same thing, and the difference is worth writing down before the purchase.

Making the office and the security readings agree

The two groups usually want the same record with different fields on it. Agree the visit types first, then decide per type what is checked and who sponsors it. A contractor going to a plant room and a candidate coming for an interview do not need the same process, and forcing one process on both is how a desk ends up slow for everybody and strict for nobody.

Questions people ask about visitor control

Is visitor control the same as access control?

No. Access control opens doors. Visitor control is the process and the record around admitting somebody, which access control cannot evidence on its own.

Should a reception run a watchlist?

Only with a process behind it: who maintains the list, what the desk does on a match, and how somebody wrongly matched is dealt with. Without that it does more harm than good.

Does a security visitor management system need different software?

Usually not. It needs different settings, a stricter desk process and a retention period somebody has decided.

Sources

Related answers

Keep the sign-ins in Lobbyvo ProStart Lobbyvo Pro, $49 a location a month