All workers and visitors should be accounted for and recorded. Certain people should have access to certain physical locations, equipment and information, when certain people may not. Policies should also be in place for when unwelcome parties are able to obtain access to locations or resources they mustn't have.