[Autogenerated] now where Requirement 9.3 was about the
physical access of on site personnel.
9.4 is about visitors.
It's a really annoying little set of requirements,
and it's one that QoS is I can get over excited about,
particularly new QoS a who might not have as much technical experience.
And so they feel they can somehow make their mark on an organization by
being particularly attentive to this requirement.
So the main requirement is to have procedures in place that deal with
the identification and authorization of visitors on there isn't a
separate testing procedure for requirement 9.4.
All the testing procedures of details in the sub requirements.
The first of the visitor sub requirements has two parts,
firstly,
that visitors error authorized by on site personnel before
they're given access to the sensitive area and,
secondly, that they're escorted at all times.
The testing procedures to check the policies and processes for authorizing
visitors on also to make sure that if they're given access badge that it
doesn't grant unescorted access to sensitive areas.
The QoS IT is also going to talk to people to make
sure this what actually happens.
They'll also watch visitors entering leaving the facility,
the next of requirement is really repeated.
What's come before?
That's visitors error given badges to distinguish them from on
site personnel on there's a hidden part here that's just
detailed in the testing requirement,
which is that visitors badges must expire on that can be in
Elektronik expiration I can automatic expiration or because there's a
physical expiration date written on the badge.
The testing procedure here is for the QoS A to look at visitors,
says TIFF areas on.
Make sure the visitor has a badge on that.
The batch has a way of expiring on a quick reminder
that normally the Q SATA visitor.
So to test this requirement there most likely just going to look in a mirror.
We're almost at the end of this _______ set.
Visitor requirements on the next one is that visitors have to give their patch
back when they leave the facility or when it expires on.
I bet you can guess what the testing procedure for this is.
That's right, the USA will observe, is just leaving on.
That will probably be.
They'll observe themselves when they leave.
The last visitor related requirement is that a log
of all visitors is maintained,
the standards a bit confused here because it starts to talk
about the facility instead of sensitive areas.
And my guess is that it's because it was initially taken from
want to more physically related standards,
such as car production, the requirements of prescriptive.
But in this log, you need to recall the name of the visitor,
the organization they're from on.
Most importantly, who from the on site personnel authorized the visitors access.
The log should be kept for three months, where local laws allow Ondas.
You probably guessed the uses testing procedure is to look at the visitor logs.
Make sure the person's name,
the organization name and the identity the on site
personnel who authorized the visitor.
A written into the visitor.
Logs on the logs go back for at least three months.
You'll be glad to know that this wraps up quite detailed sectional visitors,
but the degree of prescription continues