In addition, where there is sensitive information to protect, the company should establish procedures for authorizing people who need to visit during nonbusiness hours. One solution: require that arrangements be made through corporate security or some other designated group. This group would routinely verify the identity of any employee calling to arrange an off-hours visit by a callback to the person's supervisor or some other reasonably secure method.