Do you have written procedures governing how identification badges and access devices are granted, changed, and removed? Where applicable, a personnel identification system must be in place for positive identification and access control purposes. Access to sensitive areas must be restricted based on job description or assigned duties. Removal of access devices must take place upon the employee’s separation from the company.