The procedures and principles set out herein must be followed at all times by the Company and all its employees, agents, contractors, consultants, temporary staff, casual or agency staff, or other suppliers or data processors (hereafter referred to as “Staff”) working for or on behalf of the Company.

One of the most common and widespread security breaches affecting organisations today is known as tailgating (also referred to as piggybacking). Tailgating is a physical security breach in which an unauthorised individual follows an authorised individual to enter a typically secured area.

Tailgating is often utilised by criminals who take advantage of a helpful employee holding a door open for someone such as a visitor without a badge, or someone in a uniform appearing to be a worker. It may seem like a kind gesture and something you would do without thinking twice about, however these lapses in security can negatively impact the Company via a significant data breach, financial loss through theft or property destruction, as well as damage the reputation of the Company.

It’s easy to assume that an individual entering a building is a member of Staff which is why these
breaches are often so successful. Criminals know that most individuals will shy away from confronting a stranger as it can lead to an uncomfortable situation. The consequences of a physical security breach are much worse than simply asking to see someone’s ID badge, or escort them to their destination.

3.1. What can Staff do to prevent tailgating:

• Always be aware of anyone following you through a door, especially into a restricted area.
• Bring attention to any unfamiliar individual you see trying to slip through physical security measures.
• Don’t hold the door open for anyone, especially if the door requires a smart card authentication to enter.
• When you notice a suspicious individual in a restricted area or your workspace, politely greet them and escort them to their correct location.
• If you find that a door does not automatically close or shut properly please report it immediately.

Staff are expected to inform reception staff of planned visits before their arrival wherever possible in order that the reception staff can prepare the necessary access authorisation and make our companies guests feel welcome.

It is important for security and safety that we keep track of who is in our office space, therefore guests are required to sign-in when entering our offices. Guests are also required to sign-out when A form of ID should be presented. The ID should be for verification purposes only, it should not be recorded.

Guests must be supplied with a visitor identification badge/ID and asked to wear this visibly during their visit. Personalised badges should be destroyed when the guest leaves the premises.

Staff are required to greet guests at reception and accompany them while they are at the Company’s office and only allow access to certain rooms or offices, as necessary.

If individuals within the office are not known, Staff should politely greet them and escort them to their correct location.

The Company maintains a guest Wi-Fi network.

Wi-Fi access is provided in order that guests can access the Internet.

The Company’s internal network is segregated from the guest Wi-Fi network.

Guest WiFi access is password protected.

Responsibility for the Visitor Security Policy rests with Duty Office. Duties include, but are not limited to:

• Ensuring that all staff in scope and appropriate external parties have read and confirmed their acceptance of the latest version of this policy
• Monitoring for legal, regulatory or industry best practice developments in relation to this policy
• Coordinate with senior management, IT, and legal counsel to communicate and review issues related to this policy.
• Review and update this policy at least every 12 months, in order that it remains fit for purpose

 This policy has been approved by senior management and is effective from 01-Jan-2025.

If you have questions or comments about this policy, email us at privacy@edatainsight.com or by post to:

Enterprise Data Insight.

71-75 Shelton Street, Convent Garden, London, WC2H 9JQ

If we change our policies and procedures, we will post those changes on this page. If we make any changes to this Policy that materially change how we treat your personal information, we will endeavour to provide you with reasonable notice of such changes, to your email address of record, and where required by law, we will obtain your consent or give you the opportunity to opt out of such changes.