Company Badges

Hello everybody,

our companies executives want to implement new badges for the
employees for identification purposes. They should, of course, also be
worn on our campus. Recently, I was able to see one of the samples and
that shocked me quite a lot. these samples, there were the
employees name, employee id, departement, position and picture on it.
Picture and name are bad enough, but employee id, departement and
position are a social engineering dream / security nightmare.

Does anyone have good links to best practises, security regulations,
other "official" documents or at least some good arguments against
putting all that information on the new badge?

Thanks a lot!

Phoe Nix

I would not have anything on the badge. Instead I would have the
monitoring station at the guard desk flash a picture and other data on
the monitor when the user badges in. Then man trap them if they need be
or manually let them through.




Thanks

Cellnet+Hunt
Brian Williams