Three Things Crews Get Wrong About Door Tailgating
Myth 1: "It is rude to shut the door on someone, especially if they are carrying coffee or wearing a suit."
Reality: Politeness compromises physical security; access control relies entirely on a strict one-badge-per-entry rule to prevent unauthorized access.
Picture a typical summer morning at the office front entrance. An employee swipes their badge, opens the door, and holds it for the person walking up behind them carrying two coffees. That second person is not an employee; they are an estranged partner of someone on the third floor. By being polite, the first employee just bypassed the building's primary engineering control, allowing a recognized threat direct access to the floor. Summer brings a rotating cast of interns, temporary vendors, and relaxed schedules, creating a camouflage effect for strangers. When you hold a secure door open, you take on the responsibility of vetting that person.
Myth 2: "Workplace violence is a retail or healthcare problem, not an office problem."
Reality: Office environments face distinct threats from unauthorized access, and resulting injuries are strictly governed by OSHA recordkeeping rules.
Under 29 CFR 1904.5, an injury or illness must be considered work-related if an event or exposure in the work environment either caused or contributed to the resulting condition. The standard defines the work environment as the establishment and other locations where one or more employees are working. If an unauthorized person tailgates through a secure door and causes harm, the resulting injury falls under this definition because the physical office is the work environment. Tailgating enables these events by turning a secure office into an accessible location.
Myth 3: "If an unauthorized person gets in, the receptionist or security guard will notice them."
Reality: Relying on visual identification after a breach is a weak administrative control compared to physical barriers.
Under 29 CFR 1904.39, employers must report any work-related fatality within 8 hours and any in-patient hospitalization within 24 hours. This applies to all work-related incidents, including those resulting from unauthorized access. An electronic locked door is an engineering control designed to restrict access at the perimeter to prevent these severe incidents. Relying on a coworker to spot a stranger after they are already inside is a less effective administrative control. Once past the locked door, the person is often assumed to have administrative clearance, defeating the perimeter defense entirely.
Quick Reference
| Question | Answer | Source |
|---|---|---|
| What is door tailgating? | When an unauthorized person follows an authorized person through a secure door without swiping their own badge. | Security Best Practices |
| Are injuries from unauthorized access recordable? | Yes, if the event causing the injury occurs in the work environment, it is considered work-related. | 29 CFR 1904.5 |
| When must severe incidents be reported? | Employers must report work-related fatalities within 8 hours and hospitalizations within 24 hours. | 29 CFR 1904.39 |
| What should I say to someone behind me? | "I am required to let the door close, please swipe your badge." | Security Best Practices |
What To Do With This At Tomorrow's Huddle
Note: Discussion prompts: What is the first sign we are going off-plan with our physical security today? (Listen for: Hearing a secure door click open without a badge beep, or seeing someone catch a closing door). Why is it so uncomfortable to shut the door on someone, and how can we make it easier as a team?
Note: Hierarchy of controls: We must evaluate our defenses in order: elimination, substitution, engineering, administrative, and PPE. What is the highest-order control we can use TODAY? (Answer: Relying on the engineering control—the electronic lock—by refusing to bypass it with polite door-holding).
Note: Stop-work authority: Every worker has the authority to stop work for an unsafe condition, including pausing to refuse entry to an unbadged person and calling security. There will be absolutely no retaliation for denying access to someone who does not badge in.
Note: Close-the-loop: The Office Manager will report back at tomorrow's huddle on the status of the automatic door closers and any unbadged visitor reports from today.
Note: Verification question: Do we actually have the controls in place RIGHT NOW to keep unauthorized people out of our workspace?
Note: Comprehension check: What will you do differently today when you walk through the main entrance or a secure perimeter door?
Action Steps
- Verify that all automatic door closers on secure perimeter doors are functioning, adjusted for the correct speed, and latching completely without assistance. Owner: Office Manager Due: Today 12:00 PM
- Practice the 'one badge, one entry' rule at all secure access points, requiring even known coworkers to swipe their own badges to build the habit. Owner: All Employees Due: Ongoing
- Review the workplace violence prevention plan to ensure door tailgating and access control failures are explicitly addressed as recognized hazards. Owner: Safety Manager Due: Friday EOD