Visitor Logs should be in place for organizations that have a large amount of public traffic and walk ups.
Control Type: Physical
Control Function: Detective
Organizations that have publicly accessible lobbies or walk up traffic should track their guests for accountability. If a guest engages in activity that culminates in a security incident, the organization needs to be able to identify them. Visitor Logs create an audit trail of traffic that enters and exits the organization's facilities. They require visitors to sign in at the front desk when they enter. Signing the log is enforced by a member of staff, usually a receptionist or security guard.
Visitor logs should require guests to provide the following information:
- name
- phone number
- check-in time
- check-out time
- reason for visiting
Filled logs must be saved and filed in a secure location. This allows the logs to be easily retrieved if they are needed for investigative purposes, while still physically securing them from unauthorized access and modification. The logs should be placed in a locked drawer when work hours end.