As a New CISO at a Large Healthcare Company You

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?

A) Post a guard at the door to maintain physical security
B) Close and chain the door shut and send a company-wide memo banning the practice
C) Have a risk assessment performed
D) Nothing, this falls outside your area of influence