Access Control and Visitor Management in Export-Oriented Factories

Security programmes in export manufacturing serve two masters: preventing loss and satisfying supply chain security audits such as C-TPAT and buyer-specific standards. The two overlap substantially, and designing for both at once is far cheaper than retrofitting audit evidence onto an informal system.

Layered control, from the fence inward

1. Perimeter. Continuous barrier, controlled vehicle and pedestrian gates, lighting at gates and along the fence line, and clear sight lines — no stored material against the inside of the fence, which is the most common finding on a first audit.
2. Building envelope. Controlled and monitored external doors, secured windows at ground level, roof access locked.
3. Internal zones. Differential access for finished goods, the shipping dock, IT rooms and the chemical store. A single badge that opens everything defeats the point of having badges.
4. Asset level. Locked cages for high-value trim, controlled issue of labels and packaging carrying the brand.

Brand labels and packaging deserve specific mention: for many buyers, controlled destruction of rejected labels with a documented log is a hard requirement, because unaccounted labels are the raw material for counterfeit goods.

Visitor management that people will actually follow

A process that takes fifteen minutes per visitor will be bypassed by the first manager in a hurry. Keep it to four steps:

• Pre-registration by the host, with name, company, purpose and expected time. This removes the queue at the gate.
• Identity verification against photo ID at arrival, with the ID number recorded rather than the document retained.
• Badge issue — visibly different from employee badges, colour-coded by zone, numbered and returned on exit. Reconcile issued against returned at the end of every day; an unreturned badge is an incident, not an inconvenience.
• Escort rules stated on the badge itself. Contractors working unescorted need a separate category with a documented approval and an induction record.

The evidence auditors ask for

The seven-point container inspection — front wall, left side, right side, floor, ceiling, inside and outside doors, outside and undercarriage — is a specific, checkable procedure. Auditors ask to see completed checklists for recent shipments, and a blank pad of forms is worse than none.

Seal control is where programmes fail

High-security seals must be stored in a locked location with restricted access, issued against a numbered log, and the number recorded on the shipping documents and communicated to the consignee independently of the container. A box of seals in an unlocked desk drawer at the shipping office is a finding on any audit and a genuine vulnerability.

CCTV policy, not just cameras

Cameras without a written policy generate liability without generating security. Define coverage — gates, docks, finished goods, cash handling — the retention period, who may review footage and under what circumstance, and how privacy in welfare areas is respected. Verify recording actually works monthly; a surprising proportion of installed systems are found to have been overwriting or offline for months.

The quarterly self-audit

Run your own audit against the buyer's checklist every quarter, with a written report and corrective actions. The organisations that pass external audits comfortably are not the ones with the most equipment; they are the ones whose records show a consistent internal cycle of finding and fixing their own gaps.