Which action best reflects the role of management regarding identification badges?

• A. Issue badges to everyone.
• B. Control the issuance and removal of employee, visitor, and vendor identification badges.
• C. Delegate badge control to contractors.
• D. Exclude visitors from badges.

Answer: (B)

Centralized control of who has access credentials is essential for keeping facilities and information secure. Management should oversee the issuance and removal of identification badges for employees, visitors, and vendors to ensure that only authorized individuals can enter restricted areas, and that permissions are updated promptly when roles change or employment ends. This creates an accountable system with traceable records, supports timely revocation if a badge is lost or a person leaves, and allows for consistent enforcement of security policies across all badge holders.

Issuing badges to everyone removes needed safeguards and weakens access control. Delegating badge control to contractors can blur responsibility and reduce oversight, making it harder to enforce the organization’s security policies. Excluding visitors from badges would defeat a fundamental security practice of visibly identifying and tracking all people on site. Central management of badge issuance and removal best aligns with maintaining rigorous, auditable access control.