Which item must be recorded to verify who authorized a visitor's access?

• A. The visitor's email address.
• B. The onsite personnel authorizing physical access.
• C. The visitor's phone number.
• D. The driver's license number.

Answer: (B)

The key idea is that access to sensitive areas must be traceable to the person who approved it. For a visitor, the record should show the specific onsite personnel who granted the authorization to enter. This creates an auditable link between the entry and the person who approved it, which is essential for accountability and incident response. While capturing the visitor’s email, phone number, or even a driver’s license can help identify the visitor, these items do not establish who approved access. The authorization chain—the onsite personnel authorizing the visit—is the critical piece to record.