university, hospital, research institute) ; - The Laboratory  shall have a policy for the security of its facilities, equipment and systems against unauthorized  access, which may include a threat and risk assessment performed by expert(s) in the relevant field ; - Two (2) main levels of access shall be defined in the Management System and evaluated in the threat assessment plan:  o Reception Zone: An initial point of c ontrol beyond which unauthorized individuals shall not be permitted ;  The Laboratory  shall have a system to register visitors and authorized individuals to the Laboratory .