You need to think security – as this whole area is as much about organisational operating culture as it is about following the law and procedures.
For example, if you see tailgating by people when entering secure areas, this is a good indicator that other security protective measures are lax.
