Access Control and ID Checks Course: Lessons 2026

Lesson 1: What access control is

Access control means deciding who and what can enter a place, which areas they can use, and when. Most sites use layers: the property line, the building doors, inside areas, and the most sensitive rooms such as server rooms or cash offices.

Type	Examples
People	Guards and reception staff checking ID and signing in visitors
Mechanical	Locks, keys, gates and turnstiles
Electronic	Card or fob readers, PIN pads, biometric readers, door alarms
Procedures	Visitor logs, escort rules, contractor work orders

Your role at the post

At an entry point you are often the first person a visitor meets. Be visible, greet people, and stay alert. Know your post orders: who may enter, which areas need an escort, and who to call when something does not fit. Never leave a controlled post unattended without handing it over, because an empty desk is an open door.

Ontario’s guard training syllabus lists escorting people, inspecting baggage and vehicles, and contacting the right staff when security is breached as part of access control.

Lesson 2: Checking ID and badges

Ask for the badge or ID politely.
Compare the photo with the person’s face.
Check the expiry date.
Check that the badge is for this site and this area.
Look for signs of tampering, such as a photo stuck on top.

Do not admit someone on an expired or wrong badge, even if they look familiar. Follow your procedure to verify them, for example by calling their supervisor.

ID and privacy

Canada’s federal, Alberta and BC privacy commissioners have said that:

Looking at an ID and handing it back is the least intrusive way to confirm identity.
Writing down a driver’s licence number is generally excessive, unless a law requires it.
Photocopying or scanning a licence generally goes too far.
People may ask why you need their ID and whether it will be recorded. Explain calmly.

Your own ID matters too. In Alberta, your licence card is your only formal identification as a guard. A badge is not a legal document.

Lesson 3: Visitors, contractors and deliveries

A visitor log shows who is inside and why. Collect only what you need, usually name, company, the person being visited, and time in and out. Keep the log where only people who need it can read it.

Who	What to check	What they get
Visitor	ID and that the host expects them	Temporary badge; escort if required
Contractor	Work order or confirmation from the contact	Badge and area limits; escort if required
Delivery	Paperwork and destination	Directed to the receiving area

Escort means someone authorized stays with the visitor the whole time.
If a contractor has no work order and their contact cannot be reached, do not admit them until someone confirms.
Collect visitor badges at exit so you know who is still inside and badges cannot be reused.

Lesson 4: Tailgating, cards and doors

Term	Meaning
Tailgating	Someone follows an authorized person through a door without them knowing.
Piggybacking	An authorized person knowingly lets someone in.

If someone slips in without badging, politely stop them and ask for their badge or ID. Explain that everyone must badge in.

A lost access card must be reported right away so it can be turned off.
A propped door defeats the system. Close and secure it, report it and find out why.
A door-held-open alarm needs someone to check the door in person.

Lesson 5: Refusing entry and bag checks

The owner, and people they authorize such as guards, can decide who may enter. Trespass is mainly provincial law, for example Ontario’s Trespass to Property Act and Alberta’s Trespass to Premises Act.

Explain the rule politely and offer another option, such as calling the person’s contact.
Do not argue, insult or block someone with your body.
Apply rules the same way to everyone. Refusing someone because of race, religion, disability or another protected ground is discrimination.
If someone becomes threatening, step back and call police.

Bag and vehicle checks

A bag check needs consent. If checks are a posted condition of entry and a person refuses, you may refuse entry under your site’s policy, but you may never search by force.

Ask for consent, use a same-sex searcher where possible, search in view of CCTV or a witness, and record the search.

Ask for permission (consent)
Use a searcher of the same sex where possible
Have a witness or CCTV watching
Search carefully and systematically
Record the search

Lesson 6: Records, privacy and breaches

Visitor logs, badge records and access reports contain personal information. In most provinces, private businesses follow the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Alberta, British Columbia and Quebec have their own private-sector privacy laws that apply instead for most activity in those provinces.

Collect only what you need for a clear purpose.
Keep logs and screens out of public view, and let only people who need them for their job read them.
Never share names, visit details or badge records with friends or on social media.
Report a lost visitor log or an emailed list sent to the wrong person to your supervisor right away.

When someone gets in who should not

Tell control or your supervisor right away, with a description and the last place the person was seen.
Find the person, or have staff help, and approach politely.
Ask them to sign in properly or to leave, following your post orders.
If they refuse or become threatening, step back and call police.
Record the time, the door used, how they got in and what you did, so the gap can be fixed.