Holding the door for the person behind you is something most of us do without thinking. It’s polite. It’s automatic. In most situations, it’s exactly what we’ve been taught to do. However, what if the door you’re holding leads into a secured office, school, apartment building, healthcare facility, or other restricted space?
That simple act of courtesy could unintentionally allow someone to bypass the security measures designed to control who enters the building.
When Being Polite Creates a Security Gap
Following an authorized person through a secured entrance without using your own credentials is commonly referred to as tailgating or piggybacking. And it doesn’t necessarily look suspicious.
Imagine arriving at work in the morning. You scan your badge and open the door. Someone is walking a few steps behind you carrying a laptop bag and coffee. You recognize their face… or maybe you don’t. Either way, they look like they belong. Do you let the door close and make them scan their own badge? For many people, that feels awkward. So, you hold it. That’s exactly what makes tailgating difficult to prevent. It takes advantage of a very normal human behavior: we want to be helpful and courteous to the people around us.
Not Everyone Who Looks Like They Belong, Belongs
We often make quick assumptions based on appearance and behavior. Someone wearing professional clothing and carrying a laptop probably works here. Someone wearing a delivery uniform probably has a delivery. Someone walking confidently down a hallway probably knows where they’re going. Someone standing outside a school entrance might be a parent.
Most of the time, those assumptions may be correct. But physical security can’t rely solely on whether someone looks like they belong. Access-control systems, visitor procedures, locked entrances, badges, front desks, and check-in processes exist for a reason. When we bypass those procedures, even with good intentions, we create a gap in the security process.
Schools Face the Same Challenge
As students, teachers, and staff return to school, secured entrances become an especially relevant example. Parents, volunteers, vendors, substitute teachers, delivery drivers, contractors, and visitors may all have legitimate reasons to enter a school. That doesn’t mean they should bypass established visitor procedures.
Holding a secured door open for another adult may feel harmless, particularly when the person appears to be another parent or staff member. But employees often have no way of knowing whether that individual has checked in, is authorized to enter, or should be directed to a designated entrance. The same principle applies in any workplace: let the security process determine who has access rather than making that decision yourself.
Security Technology Is Only Part of the Solution
Organizations invest in access-control systems, cameras, visitor management, alarms, and other physical security measures to help protect their people and facilities. Yet even the best technology depends on people following the processes surrounding it.
A badge reader can’t prevent unauthorized access if an employee routinely holds the door open for others. A visitor management system can’t do its job if visitors are allowed to bypass the front desk. A locked school entrance provides little protection if someone simply follows an authorized person inside. That’s why physical security isn’t just about having the right technology. It’s also about creating a culture in which employees understand why security procedures exist and feel comfortable following them.
What Should You Do Instead?
You don’t need to become suspicious of everyone around you, and security awareness shouldn’t mean treating every unfamiliar person as a threat. Instead, organizations should make the expected behavior clear.
If an entrance requires a badge, each employee should use their own badge. If visitors are required to check in, they should be directed to the appropriate entrance or reception area. If someone says they forgot their badge, there should be an established process for helping them regain access.
And if you’re the person standing at the door? You can still be polite. A simple, “I’ll let you badge in,” or “Visitors need to check in at the front desk,” reinforces the process without turning the interaction into a confrontation.
Employees should also know what to do if someone refuses to follow the procedure or if an interaction makes them uncomfortable. That may mean contacting security, notifying a supervisor, or using the organization’s established reporting process rather than confronting the individual themselves.
The Smallest Habits Can Make a Big Difference
Security failures don’t always begin with a sophisticated cyberattack or someone forcing their way through a locked entrance. Sometimes, they begin with an everyday decision made with perfectly good intentions. Strong security programs account for the human side of security. They give people clear expectations, reinforce those expectations through training, and establish processes employees can realistically follow in their day-to-day work.
So, the next time someone is a few steps behind you as you enter a secured building, remember: You can be courteous without holding the door.
At 360 Security Services, we help organizations evaluate physical security from every angle—from the technology and procedures already in place to the everyday behaviors that can create unexpected gaps. A comprehensive security assessment can help identify vulnerabilities before they become incidents. Want to know where the gaps may be in your organization? Let’s talk.