Badge Sharing

Badge Sharing

Lend your badge and the door log still says you.

What Is Badge Sharing?

An access badge is a credential with a name attached, and the reader on the door logs the card rather than the person carrying it. In this exercise a colleague you have worked with for years asks to borrow yours for ten minutes, with a reason that holds up. You practise reading what your own badge quietly opens, declining without a confrontation, walking her to the desk that issues a pass in her own name, and reporting the gap behind the request.

What You'll Learn in Badge Sharing

Badge Sharing — Training Steps

  1. Twenty Past Four

    It is a Thursday afternoon on the third floor of Brackmoor Freight. The quotes are signed off, the overnight manifests are already with dispatch, and the floor is starting to thin out. Alice's badge is where it always is, face up on the desk beside the keyboard.

  2. What The Card Is

    Before anything else, look at the thing itself. A name, a company, and a job title. What is not printed anywhere on it is the part that matters: the list of doors it opens.

  3. Hana From Operations

    Hana Weiss comes over from the operations side of the floor. Alice has worked with her for three years. She is the one who untangles a customs hold at seven in the morning and never makes a fuss about it. She stops beside the desk with her hands empty and nothing round her neck.

  4. Ten Minutes

    She has a problem, and it is a real one.

  5. Her Hand Is Out

    Every word of that is true. Hana does work here, the dispatch box does have to be restarted before the overnight run, and ten minutes really is ten minutes. The question was never whether Alice trusts her. It is whose name the door writes down.

  6. She Takes It Well

    Alice says no to the badge and yes to the errand. It lands better than she expected.

  7. Down To The Front Desk

    They walk the length of the floor together and take the stairs. Four minutes, most of it stairs, and a chance to ask how the Rotterdam account is going.

  8. Signed In Properly

    At the desk Hana gives her name, the front desk finds her on the staff list, and a temporary badge is printed against her own record with the rest of the day on it. The whole thing takes less time than the conversation upstairs did.

  9. The Afternoon That Did Not Happen

    One question about the other version of this afternoon, the one where the badge changed hands.

  10. Back With One Of Her Own

    Hana comes back up ten minutes later on her way to the server room, with a pass clipped to her jacket. She stops at her own desk on the way past.

Security Framework Coverage

MITRE ATT&CK

  • T1078 Valid Accounts

CIS Controls

  • CIS 6 Access Control Management
  • CIS 14.3 Train Workforce Members on Authentication Best Practices

NIST CSF

  • PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
  • PR.AA Identity Management, Authentication, and Access Control