At my place of employment we have recently been discussing our access card policy. We have different access cards for guests and employees, and anyone not wearing an access card is assumed to be an enemy combatant.
What we are struggling with is what we shall tell the employees to do when they find someone without a (visible) access card inside our company's premises. As I see it there are three alternatives of things to tell them:
- Challenge the stranger about the lack of access card (and escort them to the reception).
- Do not challenge them, but report them to the reception.
- Do nothing.
Are there any studies, best practices, guidelines or similar that offer any advice on which scenario is the optimal one to teach the employees? I'm assuming that #1 is the theoretically optimal one since it takes immediate action and prevents potential further damage, but that it is also the most difficult one to implement since making people confront strangers is difficult to train, and offer a lot of risk for little reward.