Organizations should apply security measures to all people and actions that occur in secure areas. The guidelines to follow include: informing personnel of the secure area and its activities only on a person-by-person basis, preventing unmonitored work in secure places, periodically inspecting and locking vacant secure areas, not allowing unauthorized recording equipment, controlling employees’ endpoint equipment in secure areas, and making emergency procedures visible.