Badge Sharing
Lend your badge and the door log still says you.
What Is Badge Sharing?
An access badge is a credential with a name attached, and the reader on the door logs the card rather than the person carrying it. In this exercise a colleague you have worked with for years asks to borrow yours for ten minutes, with a reason that holds up. You practise reading what your own badge quietly opens, declining without a confrontation, walking her to the desk that issues a pass in her own name, and reporting the gap behind the request.
What You'll Learn in Badge Sharing
- Treat a staff badge as an access credential that writes your name into a log, not an identity card that proves who you are
- Recognize that a borrowed badge attributes somebody else's movements to you for as long as the record is kept
- Decline a colleague's request for your badge without turning a small favour into an accusation
- Route a colleague with no badge to the temporary pass that can be issued against their own name
- Report a member of staff who has been inside all day with no badge event, because nothing else in the system noticed
Badge Sharing — Training Steps
-
Twenty Past Four
It is a Thursday afternoon on the third floor of Brackmoor Freight. The quotes are signed off, the overnight manifests are already with dispatch, and the floor is starting to thin out. Alice's badge is where it always is, face up on the desk beside the keyboard.
-
What The Card Is
Before anything else, look at the thing itself. A name, a company, and a job title. What is not printed anywhere on it is the part that matters: the list of doors it opens.
-
Hana From Operations
Hana Weiss comes over from the operations side of the floor. Alice has worked with her for three years. She is the one who untangles a customs hold at seven in the morning and never makes a fuss about it. She stops beside the desk with her hands empty and nothing round her neck.
-
Ten Minutes
She has a problem, and it is a real one.
-
Her Hand Is Out
Every word of that is true. Hana does work here, the dispatch box does have to be restarted before the overnight run, and ten minutes really is ten minutes. The question was never whether Alice trusts her. It is whose name the door writes down.
-
She Takes It Well
Alice says no to the badge and yes to the errand. It lands better than she expected.
-
Down To The Front Desk
They walk the length of the floor together and take the stairs. Four minutes, most of it stairs, and a chance to ask how the Rotterdam account is going.
-
Signed In Properly
At the desk Hana gives her name, the front desk finds her on the staff list, and a temporary badge is printed against her own record with the rest of the day on it. The whole thing takes less time than the conversation upstairs did.
-
The Afternoon That Did Not Happen
One question about the other version of this afternoon, the one where the badge changed hands.
-
Back With One Of Her Own
Hana comes back up ten minutes later on her way to the server room, with a pass clipped to her jacket. She stops at her own desk on the way past.
Security Framework Coverage
MITRE ATT&CK
- T1078 Valid Accounts
CIS Controls
- CIS 6 Access Control Management
- CIS 14.3 Train Workforce Members on Authentication Best Practices
NIST CSF
- PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
- PR.AA Identity Management, Authentication, and Access Control