(a) Secured area. Except as provided in paragraph (b) of this section, the measures for controlling entry to the secured area required under § 1542.201(b)(1) must—

1. (1) Ensure that only those individuals authorized to have unescorted access to the secured area are able to gain entry;
2. (2) Ensure that an individual is immediately denied entry to a secured area when that person's access authority for that area is withdrawn; and
3. (3) Provide a means to differentiate between individuals authorized to have access to an entire secured area and individuals authorized access to only a particular portion of a secured area.

(d) Secondary access media. An airport operator may issue a second access medium to an individual who has unescorted access to secured areas or the AOA, but is temporarily not in possession of the original access medium, if the airport operator follows measures and procedures in the security program that—

1. (1) Verifies the authorization of the individual to have unescorted access to secured areas or AOAs;
2. (2) Restricts the time period of entry with the second access medium;
3. (3) Retrieves the second access medium when expired;
4. (4) Deactivates or invalidates the original access medium until the individual returns the second access medium; and
5. (5) Provides that any second access media that is also used as identification media meet the criteria of § 1542.211(b).