Solutions to 5 Common Access Control Problems

Author: Brian Rhodes, Published on Nov 21, 2016

Effective security is more than just good equipment. In fact, thousands of dollars in electronic access control can be wasted if they are not used properly. In many cases, proper operational controls fail to be implemented and enforced.

In IPVM's Access Control courses, students share real world situations where access control does not work. Over the span of multiple courses, key trends emerged.

5 common problems include:

  • Using Only One Credential or One Access Schedule
  • Door Props Are Rampant
  • Tailgating Is Not Addressed
  • Uncontrolled Doors Are Used
  • Lousy Visitor Management

Inside, we examine each one and explain how to solve them.

********* ******** ** **** than **** **** *********. In ****, ********* ** dollars ** ********** ****** control *** ** ****** if **** *** *** used ********. ** **** cases, ****** *********** ******** fail ** ** *********** and ********.

** ****'******* **************, ******** ***** **** world ********** ***** ****** control **** *** ****. Over *** **** ** multiple *******, *** ****** emerged.

* ****** ******** *******:

  • ***** **** *** ********** or *** ****** ********
  • **** ***** *** *******
  • ********** ** *** *********
  • ************ ***** *** ****
  • ***** ******* **********

******, ** ******* **** one *** ******* *** to ***** ****.

[***************]

IPVM ****** ********

** *** ***-********** ******** *****************, ** *** *** following ******** ********** ******** in **** *****:

"**** ******** ** ****** Controlled ********** ****** *****. Do *** **** *** facilities/areas **** ****? **** do *** ***** **** are ***** *****/ *** should ** ** *****?"

**** ***** ******** *** their *** ********** ** evaluate **** ****** *** remedy.****** ****** ******** ** access **** ****** *** make *********** *** ***** quicker. **** *** ******** hundreds ** ********* ****** classes.

Only *** ********** ** *** ****** ********

*** **** ****** ******* are *** ***** ****** one ******* ****** ***** and ******** *** *** users, ** **** *****: sharing *** ******* ********** among ******** *****. **** means ****** **** *** credential *** *** ******* controlled ***** ** ***** times, **** **** '********** areas' ***** ******** ** important. ******** ******** ********:

  • "*************, *** ** *** sister ******** *** **** cards **** ********** **** and ****** **** ** contract ********* ******* ******* it, **** ****'* ****** till ** ********* **** a **** ***** (******* reason *** ****** ******** are *****)."
  • "* **** ** *** facility **** **** ****** cards ****** ** **** user, *** **** *** apply ****** (** ********, technicians, ******, ***.) ** create ****** ********* ** control ***** ***** **** can ******. ********* **** card **** *** ** the ********* *** ******** doors ** *** **** and ***** *** ** the ********* ** *** floor."
  • "*** **** ******* * have ** ***** **** simply ****** *** *** doors ** *** ******* and **** **** *** last ****** ******, **** a ****** *** **** for ********. **** ** a ******** ****** ** what *** ****** *** designed ***."
  • "** * ****** ** mine, * ****** ****** the ********** ******* *** recently ******* ** **** he ****** ** ***** his ****** *********** ******* faculty **** ********* *** facility ****** *** ****** months *** ************ **** contractors/custodial *****, ***... *** really ********, **** ********, but ***** ** *** people ***** ****** ***** he ****'* **** **** there."
  • "*'** **** ***** ***** have ***** ****** **** schedules *** **** ***** to * ****** ******* forget ** ********* * holiday ******** ***** ******* those **** **** *** unlock ******** ** **** the ******* ***** ****** the ***** *** ******** but ** *** ** there ******** ******** ****** to *** ******** ** the ******** *** *** other ******* **** *** unlocked ** ****."
  • "* **** * ******** with * ******* **** company **** ******* ****** of "*** ****" ********* that **** ******* * high ******** ****. ***** year ** ******* * system ***** *** ** never ******* *** ******** or ***** *********! ** spend ** **** ******** users *** ***** *********** from *** ********. ** feels ** ** **** enough ** **** *** the ***** ***** **** and ***** **** *** to *** **** *** hired."
  • "* *** ******* ** find * **** **** over ** ***** **** all ******** *** **** card ******. ** *** system, *** ****** **** looked **** *** ********!"

*** ********: ******* ** ******** configure *** ************ ******* ****** *** Schedules** ************* ******* *** biggest ********* ** ********** access **** ****** ********** locks *** ****. ***** should ** ************ ******* to ****** *** ******* credentials *** ***** ****** patron *** ******** ****** levels ***** ** *** their ******** ****. *********** or ******* ****** **** the ********** ** ***** these ******** *** ****** the **********.

** *****, ***** ********* or ****** ** ****** this ****** ** *** system *** ****** *** saving ***** *** ********** electronic ******.

Door ***** *** *******

******* ****** ******* *** the *** ** **** props- ********* ******** **** hardware ****-*****, ********* **** scraps ** **** ** trash - **** **** the ****** ** ******* doors **** *** ********, thereby ********** **** **** controlling ** ********** ****** at ***:

  • "*** ** *** ******* -- * ****** **** 5 ********* ** ** acres -- *** ****** control ** *** ***** doors, *** **** ********* flip-down **** ***** ** all ** *** ********* exits ** **** ********* going ******* ** ***** can *** **** **. And **** ***** *** doors **** ***** ********* to ****. * ******** them ** ****** *** door *****."
  • "*** ******** ****** **** is ***** ******* **** with *** **** ******** at *** ***** **** register. *** *** * reader ** *** **** if ******** ** **** going ** **** *** door? * *** *** all *** ****** ***** on * ******* *** the **** ** *** wall ** ****** **** are *** ** ***** out *** *** **** the ******. *** **** should ****** ** ******."
  • "**** ****** ***** * have *** **** **** the ***** ** *** habit ** ******** ***** - ********* ******* ********* need ** ** *** for * *****, *** can't ** ******** ***** their ***********."
  • "***** *** ****** ******* to ***** ***** ****** and ******** **** **** in *** **** ***."
  • "* ******** ******* * University ** ** *** on ** ***** ****** for *** *** *** the **** ***** **** propped **** **** ********. When * **** * comment ** *** ******** director, ** ****** **** if *** ***** **** left ****/******, **** *** odor ***** ** ************. They ****** ** **** a ******** **** **** having ** ***** '***** sweat *****'."

*** ********: ** ** ****** in ************ *** **** **** Problem****, *** ****** ******** is ** ******* ** any **** **** ****** or ******** ****. ** some *****, **** *** require ******** ******** ***** with * *********** *** uninstalling ****-*****, *** ***** it ***** ********* ******* up *****, ***** ****, rocks, *** ****** **** have ****** *** ********** to ***** ***** * door.

****** **** **** ** maintenance * ******* ********** can **** ******** * potential ******** **** *********** the ****** ******.

Tailgating ** *** *********

*** ******* *** ** easy ** *** ** the *********** * ****** user **** * **** open *** ******** ****** entering ** ******* ** area, ******* ********** *** access ****** **** '***********' access ** ***. ** note *** **** ***** of *** ***** ** our********** - ****** ******* Tutorial**** *** ******* *** otherwise ****** ******** *** actually ** * ******* security ******:

  • "** *** * ******* that ****** **** ******* at * ****** ****** network ******** ****** *** the ********* **** ******** to *** *** ********** to **** ** ************. Instead, **** ***** *** just *** ******** ** the ********* **** ** tailgating ** ******* *** door ****."
  • "********** **** ******* *** have **** ****; ****** back **** *****, ********* 50 ****** ***** ***** the ******** **** * reads, **** ** *** door '************' ****..."
  • "***** *** ** **** facilities ***** *** **** keeps *** **** **** for *** ** ****** people ** * *** that ***'* **** **** each *****. *****."
  • "* ****** ** * US *** ***** **** that *** ********* ** armed *** **** *******-**** on *** *******, *** it *** **** ****** for ******* ** **** the **** *** ***** tailgating ** ******** *********** into **** ******** ***** inside **** ** ************* of *** *****."
  • "*** ********* ******* *** temporary ******* *** *** same ********, *** *** supervisor ***** ******* ** the ********* ******* ****** for *** ********* ******* to **** **** *** building *** ********, *** never *** *** ********."

*** ********: ******** *********** ******** are ********* ** ********** or ******* **********, **************** **** ******* ** ****** ********* **** ***** *********. However, ** **** ******** the **** ********* ****** involve ******** *********, **** training, *** **** ******* notifying *** ******* *** risks ** *** *****.

Uncontrolled ***** *** ****

*********, *** ***** **** is ******** ** ** access ******* ******, *** due ** ************ ** proximity ***** ************ ******** in * ******** ******* traffic. *** **** ** using ***** ***** ***** the ****** ****** ***** be ******* ********* *** not ********** *** ******** goal ** ******* * facility ******:

  • "* **** **** ** many ******/ ********* ********* where *** ***** ****** is ******* *******. *******, you ***** **** **** around *** **** *** the **** ** ***** were **** *** ** one *** ****** ** stop *** **** **** walking ** ** *** front ******."
  • "*** ***** * **** to ****, *** ******* card ****** ***** ****** the ******** *** **** of *** ***** ****'* have * ****** ** use **** **** *** access. *** ** ***** doors *** ***** **** to ** *** **********. It ****'* **** * card ****** ****** ** it, *** ** *** so ***** ** *** desks ***** **** ** tempting ** *** ** we **** ******* ****. A *** ** ** would **** ***** ** the **** ** *** access. ****** ** *** department ***** **** *** door *** *** **** for *** *******, ******** access **** *** ******** without ****** ** **** any ***********."
  • "******* ********** **** * main ******** **** ******* and ********, *** *****'* multiple **** ***** **** nothing *** ****** ***** doors **** ****** *** enter ** ***** ****. Stuff **** ****** *** the ****."
  • "* ****** * ****** in *** ********** ****** with *** ****** ** direct ******* ******* *** office ** ***** ** verify *** ******* ******** and ******. **** ***** have ****** *** ** not **** *** **** handicap ***** ******* *** hardware ** ***** *** door ****. **** ****** the ********** ******** ***** it *** ********."
  • "*** **** ********** ***** in *** ***** ******** was *********** ******* ***** storage **** *** **** inside * **** **** that *** ***** ****** and *** ** *** shortcut *** *******."

*** ********: **** *********** *** managers ****** **** ** agreement ***** ********* ******** are ********** *** ***, and **** **** ****** to ****** ******, ****, or *** ************ ******** into *** ****** ******. While ******** ** **** commercial *** ************** ***************** ******* **** ****** if **** *** ********* egress *****, **** *** and ****** ** ****** against ************ *****.

Lousy ******* **********

*******, ******** ** *** implementing ************** ********* ** transient ******** **** **** access ******* ********** *** of *** ******* ***** of *** ******. ***** most ******** *** *** risks, * ***** ********** could ** **** *******, but ******* ******* ********** in ***** **** *** migrate ** *** ****** undetected:

  • "*** ** ** ******'* weak ***** ** ******* out ******* ****** *** vendors *** ***********. **** don't **** ***** ** who *** ***** ***** badges **."
  • "*'** **** **** ********* with ************ *******. *******, they *** *** *** an ******** ** *** outside ** *** ********, but ***'* ******* **** the ***** **** *** larger ********. **** ***** when *** ********* ****** buzzes ******* **, **** have ****** ** *** rest ** *** ****."
  • "*********** ***** ****** ** areas **** ** *** gym ******** *** *** not ******* ** *** it **** ****** ** isn't * **** ******** area."
  • "*** ** *** ******* problems ** ********* ** Portugal ** ******* **********. There ** ****** ******* that ******** ****** **** visit ***** **** ****, to ****** ****** ** the ******** *****."
  • "* ****** ** * large ************ ***** ******** were ******** ** ****-** and **** ******** ***** badges. ***** *** ****** control ** *****, ******* it *** ***** **** unsecured **** **** ***** etc. **** *** ******** had ****** ********, **** had * **** **** free **** ** **** than **** ******** ****** have."

*** ********: ** ** ****** in ********** ********** ******* ************, **** ****** ********* have ** ***-** ****** to ************ ******* ****** directly **** *** ******, eliminating *** **** ** a ****** ********** ******* 'check **' ******. ***** trouble ** *** ********* solely *** ******* ************** controls, *** **** ** unaccounted ******** ******* ******** or ******* **** *** be ************* ********* ******* integrated ******* ********** ********.

Comments (1)

The most vulnerable place in the whole building was radioactive medical waste storage that was just inside a side door that was never locked and was an hot shortcut for workers.

How heinous was the existing EAC that people would take 'hot' shortcuts thru radioactive waste storage?

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Door Operators Access Control Tutorial on Apr 17, 2019
Doors equipped with door operators, specialty devices that automate opening and closing, tend to be quite complex. The mechanisms needed to...
Alarm.com Favorability Results 2019 on Apr 15, 2019
The once dot com startup has evolved to become a core provider for home security and is now expanding into commercial. In their first entry in...
ISC West 2019 Report on Apr 12, 2019
The IPVM team has finished at the Sands looking at what companies are offering and how they are changing their positioning. See below for 50+...
Pole Mount Camera Installation Guide on Apr 11, 2019
Poles are a popular but challenging choice for deploying surveillance cameras outdoors. Poles are indispensable for putting cameras at the right...
Spring 2019 50+ New Products Directory on Apr 08, 2019
We are compiling a list of new products for Spring 2019 and have over 50 already. Contrast to Fall 2018 New Products Directory and Spring 2018...
Startup GateKeeper Aims For Unified Physical / Logical Access Token on Apr 04, 2019
This startup's product claims to 'Kill the Password' you use to keep your computers safe.  They have already released their Gatekeeper Halberd...
Airship VMS Profile on Apr 03, 2019
Airship has been developing VMS software for over 10 years, however, with no outside investment, and minimal marketing, the company is not well...
Silicon Valley Access Startup Proxy Raises $13.6 Million on Mar 28, 2019
This mobile-credential based access startup just raised $13.6 million in funding.  Further, they claim that their technology can free businesses...
Access Control Course Spring 2019 on Mar 28, 2019
Register today for the Spring Access Control Course - last day to register, April 18th. IPVM offers the most comprehensive access control course...
Casino Security Consultant Carl Lindgren Interview on Mar 26, 2019
For more than 20 years, Carl Lindgren worked as a casino surveillance pro, while being active (and sometimes outspoken) on various online video...

Most Recent Industry Reports

The Fastest Growing Video Surveillance Sales Organization Ever - Verkada on Apr 17, 2019
Verkada has the fastest growing video surveillance sales organization ever. In less than 2 years, they already have more salespeople in the US...
Door Operators Access Control Tutorial on Apr 17, 2019
Doors equipped with door operators, specialty devices that automate opening and closing, tend to be quite complex. The mechanisms needed to...
Securadyne CEO: IPVM 'Entertaining For An Ignorant Few' on Apr 16, 2019
Securadyne's CEO Carey Boethel is unhappy with IPVM's report - Failed Integrator Rollup, Securadyne Sells to Guard Giant Allied. Indeed, he...
Dahua Repositionable IR Multi-Imager Camera Tested on Apr 16, 2019
Dahua has released their first repositionable multi-imager camera, the Multi-Flex 4x2MP, claiming integrated IR, true WDR, and flexible...
Strong ISC West 2019 For Manufacturers But Concerns For 2020 March Move on Apr 16, 2019
ISC West 2019 was strong for manufacturers, according to new IPVM survey results of 100+ manufacturers, consistent with 2018 results. However,...
Axis Supports HD Analog on Apr 15, 2019
In 2017, Axis declared 'Everything is IP': Now, in 2019, Axis has released support for HD analog, with their new encoders.  Why the change?...
Alarm.com Favorability Results 2019 on Apr 15, 2019
The once dot com startup has evolved to become a core provider for home security and is now expanding into commercial. In their first entry in...
UK Camera Commissioner Calls for Regulating Facial Recognition on Apr 15, 2019
IPVM interviewed Tony Porter, the UK’s surveillance camera commissioner after he recently called for regulations on facial recognition in the...
ISC West 2019 Report on Apr 12, 2019
The IPVM team has finished at the Sands looking at what companies are offering and how they are changing their positioning. See below for 50+...
Pole Mount Camera Installation Guide on Apr 11, 2019
Poles are a popular but challenging choice for deploying surveillance cameras outdoors. Poles are indispensable for putting cameras at the right...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact