Solutions to 5 Common Access Control Problems

By Brian Rhodes, Published Nov 21, 2016, 11:23am EST

Effective security is more than just good equipment. In fact, thousands of dollars in electronic access control can be wasted if they are not used properly. In many cases, proper operational controls fail to be implemented and enforced.

In IPVM's Access Control courses, students share real world situations where access control does not work.  Over the span of multiple courses, key trends emerged.

5 common problems include:

  • Using Only One Credential or One Access Schedule
  • Door Props Are Rampant
  • Tailgating Is Not Addressed
  • Uncontrolled Doors Are Used
  • Lousy Visitor Management

Inside, we examine each one and explain how to solve them.

IPVM ****** ********

** *** ***-**** ****** ******** *****************, ** *** *** following ******** ********** ******** in **** *****:

"**** ******** ** ****** Controlled ********** ****** *****. ** you **** *** **********/***** like ****? **** ** you ***** **** *** doing *****/ *** ****** it ** *****?"

**** ***** ******** *** their *** ********** ** evaluate **** ****** *** remedy. ****** ****** ******** ** access **** ****** *** make *********** *** ***** quicker. **** *** ******** hundreds ** ********* ****** classes.

Only *** ********** ** *** ****** ********

*** **** ****** ******* are *** ***** ****** one ******* ****** ***** and ******** *** *** users, ** **** *****: sharing *** ******* ********** among ******** *****. **** means ****** **** *** credential *** *** ******* controlled ***** ** ***** times, **** **** '********** areas' ***** ******** ** important. ******** ******** ********:

  • "*************, *** ** *** sister ******** *** **** cards **** ********** **** and ****** **** ** contract ********* ******* ******* it, **** ****'* ****** till ** ********* **** a **** ***** (******* reason *** ****** ******** are *****)."
  • "* **** ** *** facility **** **** ****** cards ****** ** **** user, *** **** *** apply ****** (** ********, technicians, ******, ***.) ** create ****** ********* ** control ***** ***** **** can ******. ********* **** card **** *** ** the ********* *** ******** ***** at *** **** *** gives *** ** *** elevators ** *** *****."
  • "*** **** ******* * have ** ***** **** simply ****** *** *** doors ** *** ******* and **** **** *** last ****** ******, **** a ****** *** **** for ********. **** ** a ******** ****** ** what *** ****** *** designed ***."
  • "** * ****** ** mine, * ****** ****** the ********** ******* *** recently ******* ** **** he ****** ** ***** his ****** *********** ******* faculty **** ********* *** facility ****** *** ****** months *** ************ **** contractors/custodial *****, ***... *** really ********, **** ********, but ***** ** *** people ***** ****** ***** he ****'* **** **** there."
  • "*'** **** ***** ***** have ***** ****** **** schedules *** **** ***** to * ****** ******* forget ** ********* * holiday ******** ***** ******* those **** **** *** unlock ******** ** **** the ******* ***** ****** the ***** *** ******** but ** *** ** there ******** ******** ****** to *** ******** ** the ******** *** *** other ******* **** *** unlocked ** ****."
  • "* **** * ******** with * ******* **** company **** ******* ****** of "*** ****" ********* that **** ******* * high ******** ****. ***** year ** ******* * system ***** *** ** never ******* *** ******** or ***** *********! ** spend ** **** ******** users *** ***** *********** from *** ********. ** feels ** ** **** enough ** **** *** the ***** ***** **** and ***** **** *** to *** **** *** hired."
  • "* *** ******* ** find * **** **** over ** ***** **** all ******** *** **** card ******.  ** *** system, *** ****** **** looked **** *** ********!"

*** ********: ******* ** ******** configure *** ****** ****** ******* ****** *** Schedules ** ************* ******* *** biggest ********* ** ********** access **** ****** ********** locks *** ****. ***** should ** ************ ******* to ****** *** ******* credentials *** ***** ****** patron *** ******** ****** levels ***** ** *** their ******** ****. *********** or ******* ****** **** the ********** ** ***** ***** features *** ****** *** importance.

** *****, ***** ********* or ****** ** ****** this ****** ** *** system *** ****** *** saving ***** *** ********** electronic ******.

Door ***** *** *******

******* ****** ******* *** the *** ** **** props- ********* ******** **** hardware ****-*****, ********* **** scraps ** **** ** trash - **** **** the ****** ** ******* doors **** *** ********, thereby ********** **** **** controlling ** ********** ****** at ***:

  •  "*** ** *** ******* -- * ****** **** 5 ********* ** ** acres -- *** ****** control ** *** ***** doors, *** **** ********* flip-down **** ***** ** all ** *** ********* exits ** **** ********* going ******* ** ***** can *** **** **. And **** ***** *** doors **** ***** ********* to ****. * ******** them ** ****** *** door *****."
  • "*** ******** ****** **** is ***** ******* **** with *** **** ******** at *** ***** **** register. *** *** * reader ** *** **** if ******** ** **** going ** **** *** door? * *** *** all *** ****** ***** on * ******* *** the **** ** *** wall ** ****** **** are *** ** ***** out *** *** **** the ******. *** **** should ****** ** ******."
  • "**** ****** ***** * have *** **** **** the ***** ** *** habit ** ******** ***** - ********* ******* ********* need ** ** *** for * *****, *** can't ** ******** ***** their ***********."
  • "***** *** ****** ******* to ***** ***** ****** and ******** **** **** in *** **** ***."
  • "* ******** ******* * University ** ** *** on ** ***** ****** for *** *** *** the **** ***** **** propped **** **** ********. When * **** * comment ** *** ******** director, ** ****** **** if *** ***** **** left ****/******, **** *** odor ***** ** ************. They ****** ** **** a ******** **** **** having ** ***** '***** sweat *****'."

*** ********: ** ** ****** in *** ********* *** **** **** Problem ****, *** ****** ******** is ** ******* ** any **** **** ****** or ******** ****. ** some *****, **** *** require ******** ******** ***** with * *********** *** uninstalling ****-*****, *** ***** it ***** ********* ******* up *****, ***** ****, rocks, *** ****** **** have ****** *** ********** ** wedge ***** * ****.

****** **** **** ** maintenance * ******* ********** can **** ******** * potential ******** **** *********** the ****** ******. 

Tailgating ** *** *********

*** ******* *** ** easy ** *** ** the *********** * ****** user **** * **** open *** ******** ****** entering ** ******* ** area, ******* ********** *** access ****** **** '***********' access ** ***.  ** note *** **** ***** of *** ***** ** our ********** - ****** ******* Tutorial **** *** ******* *** otherwise ****** ******** *** actually ** * ******* security ******:

  • "** *** * ******* that ****** **** ******* at * ****** ****** network ******** ****** *** the ********* **** ******** to *** *** ********** to **** ** ************. Instead, **** ***** *** just *** ******** ** the ********* **** ** tailgating ** ******* *** door ****."
  • "********** **** ******* *** have **** ****; ****** back **** *****, ********* 50 ****** ***** ***** the ******** **** * reads, **** ** *** door '************' ****..."
  • "***** *** ** **** facilities ***** *** **** keeps *** **** **** for *** ** ****** people ** * *** that ***'* **** **** each *****.  *****."
  • "* ****** ** * US *** ***** **** that *** ********* ** armed *** **** *******-**** on *** *******, *** it *** **** ****** for ******* ** **** the **** *** ***** tailgating ** ******** *********** into **** ******** ***** inside **** ** ************* of *** *****."
  • "*** ********* ******* *** temporary ******* *** *** same ********, *** *** supervisor ***** ******* ** the ********* ******* ****** for *** ********* ******* to **** **** *** building *** ********, *** never *** *** ********."

*** ********: ******** *********** ******** are ********* ** ********** or ******* **********, **** ********** ** **** ******* ** ****** ******* ** **** ***** *********. However, ** **** ******** the **** ********* ****** involve ******** *********, **** training, *** **** ******* notifying *** ******* *** risks ** *** *****.

Uncontrolled ***** *** ****

*********, *** ***** **** is ******** ** ** access ******* ******, *** due ** ************ ** proximity ***** ************ ******** in * ******** ******* traffic.  *** **** ** using ***** ***** ***** the ****** ****** ***** be ******* ********* *** not ********** *** ******** goal ** ******* * facility ******:

  • "* **** **** ** many ******/ ********* ********* where *** ***** ****** is ******* *******. *******, you ***** **** **** around *** **** *** the **** ** ***** were **** *** ** one *** ****** ** stop *** **** **** walking ** ** *** front ******."
  • "*** ***** * **** to ****, *** ******* card ****** ***** ****** the ******** *** **** of *** ***** ****'* have * ****** ** use **** **** *** access. *** ** ***** doors *** ***** **** to ** *** **********. It ****'* **** * card ****** ****** ** it, *** ** *** so ***** ** *** desks ***** **** ** tempting ** *** ** we **** ******* ****. A *** ** ** would **** ***** ** the **** ** *** access. ****** ** *** department ***** **** *** door *** *** **** for *** *******, ******** access **** *** ******** without ****** ** **** any ***********."
  • "******* ********** **** * main ******** **** ******* and ********, *** *****'* multiple **** ***** **** nothing *** ****** ***** doors **** ****** *** enter ** ***** ****.  Stuff **** ****** *** the ****."
  • "* ****** * ****** in *** ********** ****** with *** ****** ** direct ******* ******* *** office ** ***** ** verify *** ******* ******** and ******. **** ***** have ****** *** ** not **** *** **** handicap ***** ******* *** hardware ** ***** *** door ****. **** ****** the ********** ******** ***** it *** ********."
  • "*** **** ********** ***** in *** ***** ******** was *********** ******* ***** storage **** *** **** inside * **** **** that *** ***** ****** and *** ** *** shortcut *** *******."

*** ********: **** *********** *** ******** should **** ** ********* which ********* ******** *** authorized *** ***, *** then **** ****** ** either ******, ****, ** add ************ ******** **** the ****** ******. ***** openings ** **** ********** and ****** ******** *********** ****** ******* **** ****** if **** *** ********* egress *****, **** *** and ****** ** ****** against ************ *****.

Lousy ******* **********

*******, ******** ** *** implementing ************** ********* ** ********* visitors **** **** ****** control ********** *** ** the ******* ***** ** the ******. ***** **** visitors *** *** *****, a ***** ********** ***** be **** *******, *** without ******* ********** ** place **** *** ******* to *** ****** **********:

  • "*** ** ** ******'* **** areas ** ******* *** generic ****** *** ******* and ***********. **** ***'* keep ***** ** *** and ***** ***** ****** go."
  • "*'** **** **** ********* with ************ *******. *******, they *** *** *** an ******** ** *** outside ** *** ********, but ***'* ******* **** the ***** **** *** larger ********. **** ***** when *** ********* ****** buzzes ******* **, **** have ****** ** *** rest ** *** ****."
  • "*********** ***** ****** ** areas **** ** *** gym ******** *** *** not ******* ** *** it **** ****** ** isn't * **** ******** area."
  • "*** ** *** ******* problems ** ********* ** Portugal ** ******* **********. There ** ****** ******* that ******** ****** **** visit ***** **** ****, to ****** ****** ** the ******** *****."
  • "* ****** ** * large ************ ***** ******** were ******** ** ****-** and **** ******** ***** badges. ***** *** ****** control ** *****, ******* it *** ***** **** unsecured **** **** ***** etc. **** *** ******** had ****** ********, **** had * **** **** free **** ** **** than **** ******** ****** have."

*** ********: ** ** ****** in ********** ********** ******* ******** ****, **** ****** ********* have ** ***-** ****** to ************ ******* ****** directly **** *** ******, eliminating *** **** ** a ****** ********** ******* 'check **' ******. ***** trouble ** *** ********* solely *** ******* ************** ********, the **** ** *********** visitors ******* ******** ** risking **** *** ** significantly ********* ******* ********** ******* management ********.

Comments (1)

The most vulnerable place in the whole building was radioactive medical waste storage that was just inside a side door that was never locked and was an hot shortcut for workers.

How heinous was the existing EAC that people would take 'hot' shortcuts thru radioactive waste storage?

Agree
Disagree
Informative
Unhelpful
Funny: 2
Read this IPVM report for free.

This article is part of IPVM's 6,894 reports, 921 tests and is only available to members. To get a one-time preview of our work, enter your work email to access the full article.

Already a member? Login here | Join now
Loading Related Reports