Title: Security Procedures
Course: 2016FA-MCO-110-401 > Section: Module 6: Safety and Security

Click here for a downloadable version of this document:(EXTERNAL) Security Procedures

Authorization Procedures

MCO locations should have documented authorization procedures for goods and people coming onsite, and if there is ever any gray area, you should default to refusing entrance/delivery until someone from the management team can help sort things out. MCO teams are accountable for everything that happens onsite, to one extent or another, largely because we are the eyes and the ears of the organization.  Security and operations teams control who and what gets into the facility and are charged with enforcing Authorization Procedures.  There may be multiple levels of approval required to get visitors onto an access list.  Cross-checking shipping documents with logistics programs before accepting deliveries is another best practice.

Entry Credentials

All MCO locations, even with nominal security staffing, should practice verifying identification of personnel coming onsite.  This is particularly important for guests and visitors, or other vendors coming in to work on equipment.  Generally, a government issued ID card is sufficient, but some MCO facilities with heightened security might require a second proof of identification.  This should be enforced for all non-resident personnel – even if someone onsite personally knows the visitor, the absence of a current and valid identification card can signal a red flag that the visitor could pose a threat to the facility.  Entry credentials may also include some sort of site-specific approved access document including any prior approval documentation.

Site Access Rules

Protocols and restrictions for MCO site access extend beyond simply whom/what is allowed through the gates; once onsite it is still important to maintain awareness and control, particularly of personnel moving about.

Vendor Policies and Procedures

While in-house MCO maintenance and operations teams tend to do a lion’s share of the work to support the facility, vendors and subcontractors are a regular part of our lives – working on proprietary systems, completing major repairs, installing new equipment, etc.  The best MCO programs have detailed and refined policies and procedures for working with vendors in these scenarios and for allowing them structured and monitored access. These policies and procedures can include the requirement of site orientation, safety training, non-disclosure agreements (NDAs), and more.  While onsite, some vendors may need to be fully escorted, and in many cases an alignment of plant equipment, electrical switching, LOTO, etc., should be performed by site technicians.

Visitor Policies and Procedures

Visitors are also fairly commonplace in MCO and the facility should have detailed protocols in place for them as well.  Some of the most important rules include: how access is approved, security check-ins, badging, and escort requirements.  Depending upon the purpose for the visit, and to what parts of the facility the visitor will enter, some abbreviated site orientation or training may be required.  You should also keep in mind that visitors may not be accustomed to working in critical industrial environments, so additional PPE should be made available for them to borrow as required.

Background Checks

Permanent and semi-permanent MCO personnel are commonly required to submit to background checks before being granted regular access to the facility.  Background checks can range from a general review of legal records and credit checks to full government-issued security clearances.  Some organizations and security records have effective dates that may expire from time to time, requiring personnel to go through background checks on a periodic basis (often every 5 or 10 years), even if the employee has held the same job at the same location throughout that time.

Objectives met:
- C6
- 6.12