Being friendly may not always be secure
Was recently at one of my customers. My typical customer requires that I have a badge or should be escorted while visiting their facility. In this case I was issued a "visitor badge" which was nothing more than a small sticker with their logo, my name, and the current date. It also stated I must be "escorted" at all times.
This particular day I was joined by 3 co-workers. We left the customers office for a brief lunch. On our return we were waiting in the elevator lobby for our escort to take us to his office. While standing there we were "offered" access to the office area several times by employees entering or exiting for lunch. They stood their politely holding the door us. Our "visitor badge" was in plain sight. We politely 
refused the offer knowing the rules.
On the way out I felt funny since I was not being escorted out. I opened the door and there was an employee approaching the door. He flashed his badge at me and passed me as I was exiting. Hopefully their employee educational program covers data security policies better then their visitor policies.
-- Frank
