IoT Solutions
Transportation Hubs
Every container terminal controls who comes in. There are gates, turnstiles, badges and visitor passes. Security owns them, and their job is to keep the wrong people out.
Now look at what that access system actually knows. It knows who is on site, which zones each person may enter, and when they passed a gate. That is safety information. In most terminals it sits in a security database that the safety team rarely sees, and the safety team keeps its own lists, rules and reports somewhere else.
This article is for terminal managing directors and heads of security. It looks at why access control and worker safety drifted apart, what the port security rules already ask of an access system, and what changes when the access pass and the safety wristband are the same device.
Why is an access badge a safety device?
Because an access system already holds the facts a safety team needs most: who is on site, where they are allowed to be and when they went somewhere they should not. A badge that only opens gates wastes that information.
Think about the questions that matter in the first minutes of any incident. Who was in the area? Were they allowed to be there? Did anyone enter a zone that should have been closed? Every one of those is an access question before it is a safety question.
On a container yard the link is even closer. Restricted areas exist for two reasons at once. Some are restricted for security, such as the quay apron next to a ship or a store of dangerous goods. Others are restricted because heavy machines move there, and a person on foot is at risk. Often it is the same piece of ground, with the same gate in front of it.
So the badge at the gate is already making safety decisions. The question is whether anyone uses what it knows.
Why do access control and worker safety live in two systems?
Mostly by history. Security systems were bought to meet security rules, and safety tools were bought later to meet safety rules. Each team owns its own system, and the two rarely share data.
The result is familiar on many terminals:
- Security knows who came through the main gate. Safety does not know who is in the yard. The two lists meet only when someone compares them by hand.
- Rules live in a policy, not in the gate. “No pedestrians on the quay during vessel operations” is written down. Whether it is followed is checked by walking around.
- Badges get shared. One badge, two people. Nobody notices until the record names the wrong person.
- Contractor badges do not come back. A badge that left with a contractor stays valid until someone remembers to cancel it.
- Cancelling access is slow. Cancelling a lost badge means a request to another team, and the badge works in the meantime.
Each of these is a small gap. Together they mean the terminal’s best source of “who is where” is hardly used for safety at all.
What do port security rules already ask of an access system?
They ask a terminal to control who enters, to mark out restricted areas and to keep checking that only authorised people are inside them. Checking once at the main gate is not enough.
The International Ship and Port Facility Security (ISPS) Code sets out the activities every port facility must carry out at the normal security level. Two of them are “controlling access to the port facility” and “monitoring restricted areas to ensure that only authorised persons have access” (ISPS Code, Part A, section 14.2).
The guidance in Part B of the same code goes further on identification. It says the facility security plan “should establish provisions to ensure that the identification systems are regularly updated, and that abuse of procedures should be subject to disciplinary action.” Among the measures it lists for restricted areas is “providing passes which must be displayed to identify individual’s entitlement to be within the restricted area”.
National rules follow the same pattern. The maritime facility security regulations at 33 CFR 105.255 require a facility to “Designate restricted areas and provide appropriate access controls for these areas” and to “Deter unauthorized access to the facility and to designated restricted areas within the facility.”
Notice the word monitoring. A rule written in a security plan is only as good as the terminal’s ability to tell, on a busy shift, that someone has crossed into a zone they should not be in.
What do safety rules add to that picture?
Safety guidance arrives at restricted zones from the other side. It is less about intruders and more about keeping people on foot away from moving machines, or adding controls when they must go in.
The Health and Safety Executive’s code of practice for docks, Safety in docks (L148), puts it plainly: “Vehicles and pedestrians should be separated where they share the same workspace. This may involve excluding pedestrians from certain areas or providing separate pedestrian routes.”
It also accepts that people sometimes have to enter those areas: “Where pedestrians are required to enter a high-risk area (eg cargo handling area for a particular task) then additional control measures (eg a safe system of work) may be required.”
Put the two sets of rules side by side and the overlap is obvious. Security wants to know that only authorised people are in a restricted area. Safety wants to know that people on foot stay out of the areas where machines work, unless they are there for a task with controls in place. Both are asking the same question about the same ground: who is in this zone, and should they be?
What changes when one wristband is the pass and the safety device?
The access record and the safety record become one. A gate read, a zone entry and an SOS call all come from the same wristband and land in the same place, so security and safety work from one picture.
In Mapsted Yard Watch, the wristband crews wear is their access pass. The same wristband carries the SOS button. Access alerts, zone alerts and SOS calls all arrive in one alerts inbox, so nobody has to check two screens to see what is happening on the yard.
That makes a few things simple that used to be hard.
Rules per zone and per role. Instead of a policy on paper, Yard Watch applies access rules per zone and role. A lasher, a truck driver, a crane operator and a maintenance contractor can each have different zones they may enter.
A buzz at the moment of entry. When someone enters a restricted zone without permission, the wristband buzzes to warn them and an alert is raised. The warning reaches the person while they can still step back, rather than appearing in a report the next day.
One place for every alert. The zone alert sits in the same inbox as other alerts, so the team that handles an SOS call also sees the zone alert, without opening a second system.
None of this replaces a physical barrier or a safe system of work. It closes the gap between the rule and the moment the rule is broken.
How do you spot a shared or cloned badge?
You look for reads that cannot both be true. If the same credential is read at two gates too far apart for one person to travel between in the time, either the badge was shared or it was copied.
Yard Watch calls these impossible reads and raises them as impossible-read alerts. A badge read at one gate and, moments later, at another gate too far away to reach in that time is not a person who walked very fast. It is almost certainly two people with one credential.
This matters for security, because a copied credential defeats the point of the gate. It matters for safety too. If the record says one person was at the quay when it was really someone else, the record is wrong exactly when it is needed most, during an incident or an evacuation.
Once an impossible read is flagged, the next step is clear. The credential is revoked, and the rightful holder gets a new wristband.
How fast can you cancel a lost or unreturned badge?
It should take one step, done by the team that finds the problem. Each extra request, form or handover between teams is time in which a badge that should be dead still opens gates.
Security frameworks treat this as basic hygiene. The National Institute of Standards and Technology (NIST) catalogue of security controls, SP 800-53, asks organisations to “Remove individuals from the facility access list when access is no longer required.” When someone leaves, it asks them to “Terminate or revoke any authenticators and credentials associated with the individual”, and it lists “identification cards, and building passes” among the property to get back.
In Yard Watch, a wristband is revoked in one step. Lost, shared or no longer needed, the credential is cancelled at once rather than waiting in another team’s queue.
The same NIST catalogue suggests granting access “based on position or role”. That is the idea behind rules per zone and role: access follows the job, so a change of job is a change of zones rather than a hunt through door lists.
What are the quiet access risks that nobody reports?
They are the ones that never trigger an alarm: people on site outside their shift, and contractor badges that walked off with their owners. Neither is dramatic, and both are easy to miss.
Off-shift presence. A wristband is read at a gate or door outside its holder’s shift. There may be a good reason, such as overtime, training or a forgotten bag. It may also mean a badge is being used by someone else, or that a person is alone in a part of the yard where nobody expects them. Yard Watch flags off-shift presence so someone can ask the question.
Contractor badges not returned. Contractors come and go with every project, refit and repair. Their badges should come back at the end of each working day. Often some do not. Yard Watch flags contractor badges not returned by the end of the day, so they can be followed up and revoked.
Here is how the common gaps compare:
| Access gap | How it is usually found | With one access wristband |
|---|---|---|
| Someone in a restricted zone | A walk-round, or after an incident | Wristband buzzes on entry without permission and an alert is raised |
| A shared or copied badge | Rarely, often only after an incident | Impossible reads raised as impossible-read alerts |
| A lost or departed person’s badge | A request to another team | Revoked in one step |
| Someone on site off shift | Almost never | Off-shift presence flagged |
| Contractor badge not returned by end of day | An occasional audit | Badges not returned flagged by end of day |
How do you keep access data private?
By knowing which screens show names, and which look-ups of one person are recorded, before crews ask. A wristband that knows where people go raises an obvious question from crews, and the answer has to be built in.
In Yard Watch:
- on the Alerts side panel and the Evacuation missing list, roles other than the medical service see a badge ID, role and crew rather than a name;
- the live map, map search and Movements show names to every role, so decide who has access to those screens;
- time reports are per crew;
- the “look up a person” query in Look back asks for a reason and writes each query to the access log.
Access control has always identified people at the gate. The difference here is that the same information is now used to protect them, and the answer to who may see it is known before anyone asks.
This also matters for adoption. A wristband only helps if people wear it. Crews who trust that the system protects them, rather than watches them, keep it on. Crews who do not will find ways around it, and a shared badge is the easiest one.
What should keep working if the network goes down?
The access rules on site should keep working, whatever happens to the link outside. A gate that stops enforcing its rules during an outage is a gate with a hole in it.
In Yard Watch, access rules keep working on site when the cloud or cellular link is cut. That is the part that protects people and property in the moment.
When you assess any access or safety system, ask the supplier for a named list of what still works on site during an outage, and what waits for the link to return. Then plan your procedures around that list rather than around a general promise.
What are the limits of an access wristband?
A wristband can warn, flag and record. It cannot stop someone who ignores the warning, and it does not replace barriers, guards, signage or a safe system of work.
The ISPS Code and the safety guidance quoted here still apply in full. A buzz on the wrist at the edge of a restricted zone is a prompt, not a fence. An impossible read is a strong signal, but someone still has to look into it and act. And the wristband only knows what it is told: if the rules for a zone or a role are wrong, the alerts will be wrong too.
Treat the wristband as the part of your access system that joins security and safety together. Keep the rest of your controls in place.
Which questions should you ask about access at your terminal?
Start with five. If the honest answers are “we would not know” or “it takes days”, your access system is not yet helping your safety team.
- If a badge were shared today, how long would it take you to notice?
- How quickly can you cancel a lost or unreturned badge: minutes or days?
- Are restricted-zone rules applied at the moment of entry, or checked afterwards?
- Does your safety team see who is on site right now?
- Which screens show worker names, and which person views are logged?
For security, joining the two systems means fewer shared badges, faster revocation and alerts at the moment a rule is broken. For safety, it means a warning at the edge of a restricted zone and an SOS button on the same wristband, without a second system. For the managing director, it means one device, one set of rules and one inbox, instead of two lists that only agree when someone reconciles them by hand.
Mapsted Yard Watch makes the access wristband a safety device as well: rules per zone and role, a buzz on entry to a restricted zone without permission, impossible-read alerts, one-step revocation and flags for off-shift presence and unreturned contractor badges. It is already used to track 1,000+ assets across multiple sites. Book a private demo to see access and safety on one terminal map.
Mapsted Yard Watch supports, and does not replace, your security and safety procedures and emergency services. It does not provide legal advice.
Frequently asked questions
Can an access control wristband also be a safety device?
Yes. An access system already knows who is on site and which zones each person may enter. When the access pass is a wristband that also carries an SOS button, the same device can warn someone who enters a restricted zone without permission, raise an alert for the supervisor and flag shared or copied credentials. Security and safety then work from one record instead of two separate lists.
What is an impossible read in access control?
An impossible read happens when the same credential is read at two gates too far apart for one person to travel between in the time. It usually means a badge has been shared or copied. Flagging these reads as impossible-read alerts lets a terminal revoke the credential quickly and issue a new one to the rightful holder, so the access record stays true.
What do port security rules say about restricted areas?
The ISPS Code asks every port facility to control access and to monitor restricted areas so that only authorised persons have access. Its guidance also asks for identification systems that are regularly updated. National rules follow the same pattern, requiring facilities to designate restricted areas and provide appropriate access controls for them. Safety guidance adds the need to keep pedestrians away from moving machines.
Does an access wristband mean workers are watched all the time?
It should not, and the rules have to be clear. In Mapsted Yard Watch, names are hidden from non-medical roles on the alert and evacuation screens, time reports are per crew, and the “look up a person” query in Look back asks for a reason and writes each query to the access log. By design, the wristband stops sending location, health and proximity data outside the terminal geofence. Crews who trust that the system protects them keep wearing it, which is what makes the access record useful.
