Organisations often find it difficult enough to ensure that their own employees are sufficiently aware of how to properly handle sensitive information and IT systems. In contrast to internal employees, it cannot be assumed that visitors will handle the information and information technology accessible to them in accordance with the guidelines of the organisation they are visiting, especially since they are usually not aware of such rules. If the organisation's own employees are careless, visitors can generally gain access to confidential information. This can also occur unwittingly, as in the case of a visitor who mistakenly enters an employee's office when looking for the toilet and finds a whiteboard displaying confidential information. Visitors can also destroy or damage devices intentionally to obtain confidential information.