Mystery Visit
Who gains access to your premises and why?
Using an agreed practical scenario, we test how visitor procedures, employees and physical access measures work together. You gain insight into what allows access and what limits it.
People, access and procedures
Three questions we answer
- How are visitors recognised and checked?
- Which rooms or information are accessible?
- Are unusual situations noticed and reported?
When is this relevant?
A procedure takes effect at the front door.
A reception desk, access pass or visitor register is part of a wider system. We examine how arrangements are applied in everyday situations and where unintended access could arise.
- You want visitor and access procedures tested in practice.
- You are moving or changing premises and access measures.
- You have rooms, equipment or information that need extra protection.
- You want to examine how employees recognise and follow up on unusual behaviour.
The assessment
What do we assess?
Your environment and assessment question determine the content. We agree in advance which elements we will examine.
01
Scenario and preparation
We determine which access scenario is relevant and what public information is needed for it. We document the starting point and boundaries of the assessment in advance.
02
Reception and access control
We test how the agreed visitor situation is handled. This includes recognition, registration, checking an appointment and escorting visitors.
03
Accessibility within the premises
Within the permission granted, we examine which rooms, workstations or information are accessible. We stop at the agreed boundaries and record relevant observations.
04
Recognition and follow-up
We examine whether unusual situations are challenged or reported. Together with the client, we interpret the observations in light of procedures and available records.
Defining the scope together
A scope that fits your question.
A mystery visit requires precise arrangements for locations, scenarios and permitted activities. We agree who can verify the engagement and when the assessment will be stopped.
What do we agree in advance?
- Locations, permitted rooms, testing period and starting scenario.
- Permitted activities and evidence recording.
- Contacts, verification of the engagement and stopping arrangements.
- Reporting level and coordination of the evaluation with employees.
Technical testing, such as connecting equipment to the network, is included only if it is explicitly part of the scope agreed in advance.
The result
Insight you can act on.
01
A factual visit report
The steps taken and relevant observations, with evidence within the agreed boundaries.
02
Insight into access risks
What made access possible, what was prevented and which information or rooms were accessible.
03
Practical improvements
Advice on reception, verification, escorting visitors, reporting procedures and awareness.
Our approach
From the initial question to follow-up.
01
Defining the scenario
We discuss your premises, critical elements and assessment question.
02
Carrying out the practical assessment
We carry out the agreed scenario and record relevant observations.
03
Comparing facts and procedures
We discuss with the client how the activities relate to the arrangements in place.
04
Improving and practising
You use the results to refine procedures and awareness.
Frequently asked questions
What you need to know in advance.
Do employees know about the visit in advance?
We agree who will be informed. The client arranges the required permission and an available contact; the exact level of prior knowledge depends on the assessment objective.
Do you also examine technical network security?
This can be agreed as an additional element. The standard question in a mystery visit focuses on physical access, behaviour and procedures.
What information do you record?
We agree in advance what evidence is needed and how it will be collected and reported. Recording remains focused on the assessment question.
Is one visit enough to assess the entire organisation?
The result describes the location, period and scenario tested. Multiple locations or different visitor situations may be needed to answer a broader question.
Discuss your situation
Test how access works in practice.
Tell us which premises and procedures you want assessed. Together, we make the scenario and boundaries specific.