Companies using the same technology park entrance may have different projects, working hours and confidentiality requirements. Admission to the campus should not automatically grant access to every office or laboratory. A central procurement question is how responsibilities are divided between shared space and company-controlled areas.
Conducting R&D or supplying the defence sector does not automatically place an entire campus under one classification regime. Assess the particular project and official requirements. Without that distinction, uniform rules may create unnecessary barriers as well as gaps in responsibility.
Document the decisions owned by each party
Campus management may control common entrances, reception and shared areas; each tenant manages approval for its own authorised spaces. The security supplier implements agreed, lawful instructions. These three parties should not be expected to make decisions on each other's behalf without clear authority.
Specify where a card works, who approves out-of-hours access and who reports a departure from a tenant company. NPSA's shared-workspace guidance provides a useful foreign practice perspective on responsibilities between providers and users.
Distinguish visits from common-area events
An investor meeting, student event, delivery and maintenance visit do not require identical access. Identify the host, purpose and permitted area. Admission to a shared conference room should not become permission to enter tenant workplaces.
Provide gate staff with an authorised contact for last-minute changes. Where an escort is needed, assign that duty. Limit access to visitor information rather than exposing a common list to every tenant.
Match confidentiality requirements to actual certificate scope
Defence Facility Security Certificate and Personnel Security Certificate processes should be assessed against official rules and the relevant project. Technology park membership neither replaces those documents nor establishes that every tenant needs the same certificate.
Ask the supplier to explain the duties and competence needed in each area. A private company's personnel checks are not equivalent to an official security investigation. A confidentiality undertaking also does not, on its own, resolve physical and digital access control.
Plan the overlap with information security
Responsibilities can intersect around maintenance, shared network equipment, printers and meeting rooms. A guard may admit a technician but cannot independently authorise access to a company's systems. Physical identity checks and IT permissions are separate approvals.
For device or prototype removal, establish approval by the owning company. Shared security personnel should not unnecessarily inspect the contents of commercial secrets. Distribute incident records only to the people who need them, without exposing one tenant's information to another.
Complete selection with shared scenarios
Walk through an out-of-hours technical visit, a departing tenant employee and an additional attendee at a common event. The approving person and escalation route should be evident. A list of cameras, biometric devices or drones does not replace these responsibilities. The service's value lies in consistently applying the right approval for the right area, rather than imposing the same intrusive controls on every tenant.
