Test whether the access card is a control — or a formality.
Badge evaluation examines the credential technology and the human process that surrounds it.
Card technology is identified and assessed for cloneability, reader configuration and back-end policy are reviewed, and controlled cloning attempts demonstrate whether a copied credential grants entry. Tailgating and badge-challenge behaviour are observed to test the surrounding culture.