Summary
In short
- Two objectives: the visitor knows what to do if the alarm sounds, and the site knows whether they got out. Everything else is secondary.
- A visitor book records arrivals and does not know about departures, so it cannot produce a roll call. That is the most common gap in visitor management.
- Content should be ruthlessly short. A visitor retains the alarm sound, the exit, the assembly point and the rule about not entering production unaccompanied. Additional content displaces those.
- In food and pharmaceutical sites the health declaration and hygiene rules are a scheme requirement, and they need to be asked rather than assumed from a signature.
- Host accountability is the practical control: each visitor is the responsibility of a named employee who knows where they are.
- Contractors performing work need a full induction, not a visitor briefing. The distinction should be made at the gate rather than at the point of incident.
What it is
What it is
What is a visitor induction?
A short briefing given to anyone entering the site who is not an employee or an inducted contractor, covering what to do in an emergency, where they may and may not go, and the site rules that affect them, together with a record of their presence that supports emergency accountability.
Why is the sign-in record part of it?
Because the induction and the accountability record serve the same purpose. A briefing that tells someone where the assembly point is, in a system that cannot say whether they reached it, has done half the job. The record needs to answer who is on site now, not who signed in today.
When to use it
When to use it, and when not to
This covers visitors. People performing work on site need contractor induction, which is a different and longer process.
Use it for
- Anyone entering the site who is not an employee or an inducted contractor
- Delivery drivers entering beyond the yard or the reception area
- Auditors, customers, regulators and prospective clients touring the site
- Family days, open days and other occasions where numbers are high and familiarity is low
- Any visitor entering production, warehouse or plant areas rather than offices only
Not for
- Contractor induction, which covers work activity, permits, energy control and site-specific hazards in detail
- Permit to work, which authorises activity rather than admitting a person
- Site access request and authorisation, which controls who may enter which areas and for how long
- Food defense and security arrangements, which use the visitor record but address a different threat
- Employee induction, which is a substantially larger process
Standards
What it is built against
Visitor arrangements sit under emergency planning, general duty and, in food sites, scheme requirements.
| Clause | Requirement | Where it lands |
|---|---|---|
| OSHA 1910.38 | Emergency action plan including procedures to account for all employees and others after evacuation | Briefing |
| ISO 45001 cl.7.3 | Awareness for persons under the organisation's control, including visitors, of relevant hazards | Briefing |
| ISO 45001 cl.8.2 | Emergency preparedness and response covering everyone on the premises | Sign in and out |
| RRFSO art.9 (GB) | Fire risk assessment covering relevant persons, which includes visitors unfamiliar with the building | Briefing |
| GFSI schemes | Visitor hygiene rules, health declaration and control of access to production areas | Food safety declaration |
| FSMA Intentional Adulteration rule | Access control as a mitigation strategy where visitor access reaches actionable process steps | Related records |
| ISO 27001 A.7 | Physical entry controls including visitor registration and supervision | Sign in and out |
| Multi-employer principles | Controlling employer responsibility for hazards affecting people on the site | Header |
What it does not cover
- Contractor induction, which covers work activity, permits, energy control and site hazards in detail.
- Site access authorisation, which determines which areas a person may enter and for how long.
- Permit to work, which authorises an activity rather than admitting a person.
- The food defense plan, which uses access control as a mitigation strategy at specific process steps.
- Employee induction, a substantially larger process covering the full range of site arrangements.
Filling it in
Filling it in well
Short, specific, and built around what has to work under pressure.
What the alarm sounds like, where to exit, where the assembly point is, and where they may not go unaccompanied. A visitor will retain roughly that much. Every additional item displaces one of the four, and the four are the ones that matter when something happens.
Each visitor is the responsibility of a named employee who knows where they are and accounts for them at the assembly point. This is the single most effective control in visitor management, it requires no system, and it converts an unanswerable roll call question into a person who knows the answer.
In food and pharmaceutical sites the declaration covers recent illness, and hygiene rules cover jewellery, hair covering, footwear and eating. Presenting them as a paragraph to sign produces signatures. Asking the question at the desk produces answers, including occasionally the answer that keeps someone out of production.
Entry and exit, or host accountability, or both. The test is simple: at any moment, can the site say who is currently inside. A record that answers who arrived today fails that test, and the failure surfaces during the one event it exists for.
Audit findings
Common audit findings
Visitor findings concentrate on the accountability record.
| Finding | Clause | What fixes it |
|---|---|---|
| Visitor book records arrivals only, so no roll call is possible. | 1910.38(c)(4) | Capture exit as well, or assign host accountability; a book cannot answer who is inside. |
| Induction content too long to retain. | ISO 45001 cl.7.3 | Cover alarm, exit, assembly point and restricted areas; additional content displaces these. |
| No named host, so nobody knows where a visitor is. | ISO 45001 cl.8.2 | Assign a host by name; it is the most effective control and costs nothing. |
| Contractors admitted on a visitor induction. | Multi-employer policy | Distinguish at the gate; people performing work need a full induction. |
| Health declaration presented as text to sign rather than asked. | GFSI schemes | Ask the question; a signature on a paragraph produces signatures, not answers. |
| Visitors entering production areas unaccompanied. | GFSI / IA rule | Escort in production and restricted areas; unaccompanied access defeats both hygiene and defense controls. |
| Emergency drills conducted without visitors present or simulated. | 1910.38 | Include them; the roll call gap is only visible when visitors are in the count. |
| Delivery drivers not inducted despite entering beyond the yard. | ISO 45001 cl.7.3 | Induct anyone going beyond a defined boundary, however briefly. |
| Induction not available in languages visitors actually speak. | ISO 45001 cl.7.4 | Provide the four key points in the languages commonly encountered. |
| Visitor records retained without regard to data protection obligations. | GDPR / privacy law | Set a retention period; visitor logs are personal data. |
Worked case
Case in point: the search for someone who had gone home
A site evacuated on a genuine alarm at half past three on a weekday afternoon. Employees assembled and were accounted for within four minutes. The visitor book listed eleven visitors signed in that day; nine were at the assembly point.
The fire marshals held the assembly and sent two people back toward the building to search for the two missing names. Both had left the site earlier, one at eleven and one after lunch, and neither had signed out, because the sign-out column was at the far end of a reception desk they walked past on the way to the car park.
Two marshals re-entered a building during a live alarm to look for people who were at home. Nothing happened, and the arrangement had been in place for years and had never been tested with visitors in the count.
Definitions
Definitions and key terms
- Host accountability
- An arrangement where each visitor is the explicit responsibility of a named employee, including at the assembly point.
- Roll call
- The process of accounting for everyone after evacuation, which requires knowing who is currently on site rather than who arrived.
- Escorted access
- Requirement that a visitor is accompanied in defined areas, effective only where the escort actually remains present.
- Health declaration
- A visitor's statement about recent illness, required by food safety schemes before entry to production areas.
- Restricted area
- An area a visitor may not enter, or may enter only escorted, defined by hazard, hygiene or security requirement.
- Contractor induction
- The fuller induction required for anyone performing work, covering hazards, permits and energy control.
- Assembly point
- The designated location for evacuation, which a visitor needs to be able to find without knowing the site.
- Actionable process step
- Under the food defense regime, a point where access control may be a required mitigation strategy.
FAQ
Frequently asked questions
What should a visitor induction actually cover?+
What the alarm sounds like, where to leave, where to assemble, and where they may not go unaccompanied. That is roughly what a visitor will retain while thinking about their meeting. In food and pharmaceutical sites, add the health declaration and hygiene rules. Additional content does not add knowledge; it displaces the four points that matter.
Why is a visitor book not enough?+
Because it records arrivals and does not know about departures. People leave through other doors, leave with their host, or walk past the sign-out column. During an evacuation the book produces a list that may include people who left hours earlier, and searching for them means sending marshals back into a building.
What is the simplest fix?+
Host accountability. Each visitor is the named responsibility of an employee who knows where they are and accounts for them at the assembly point. It requires no technology, works during a power failure, and answers the question a system frequently cannot.
Do delivery drivers need inducting?+
If they go beyond a defined boundary, yes. A driver who remains in the cab in the yard is a different case from one walking into a warehouse to check a load. Set the boundary explicitly, because the ambiguous middle is where drivers end up in operating areas with no briefing at all.
How do we know the arrangement works?+
Run a drill on a day when visitors are on site and time how long it takes to reach a definitive answer about every one of them. Most sites have never done this, and most discover that the answer is either slow or unreliable, which is precisely what an evacuation cannot tolerate.
The agents
What the agents do with it
The induction is ninety seconds. What fails is the record that cannot produce a roll call and the contractor who was admitted as a visitor.
Delivers the briefing and holds presence with entry and exit, so the roll call question has an answer at any moment.
Distinguishes visitors from people performing work at the point of arrival, routing the second to a full induction.
Captures the health declaration and hygiene rules as questions asked rather than text signed, and controls production area access.
Includes visitors in drill accountability, which is where the gap between the record and reality becomes visible.
This template lives in KnowTrain — training and credentials. Induction, competency, toolbox talks, refreshers and expiry tracking.
Meet KnowTrain→Sources
Sources
- 29 CFR 1910.38, emergency action plans, including accounting for employees, OSHA
- ISO 45001:2018 clauses 7.3, 7.4 and 8.2
- BRCGS Food Safety Issue 9 and SQF Edition 9, visitor and site security requirements
- 21 CFR Part 121, food defense, where access control is a mitigation strategy
- Regulatory Reform (Fire Safety) Order 2005, relevant persons (GB)