Security and Impersonated Instructions
An Urgent Voice Is Not Proof of Authority
A phone call, voice message or radio request can sound familiar and still come from someone without authority. Pressure to act quickly can turn a routine request for access, operational information or a change in instructions into a security breach. Treat identity and authorisation as separate checks: knowing who appears to be speaking does not establish permission to carry out the request.
Controls to confirm
- Pause any unexpected request involving sensitive information, access or a departure from the approved process; do not accept urgency, a familiar voice or a claimed senior role as verification.
- Confirm the request through an independent approved channel using contact details from the site directory, not a number or link supplied by the requester; check both identity and the required authorisation.
- Release information or change access only through the established approval process, keep an appropriate record, and report suspicious requests promptly to the designated security contact without sharing sensitive details more widely.
Today’s action
Check that your team can find the approved security contact and independent verification route before an urgent request arrives.
Daily HSSE updates
Subscribe for practical HSSE updates.
Subscribe for the daily message, selected HSSE news and occasional new-resource alerts from Worksite Safety Hub.