Are You Neglecting Key Control?

Author: Brian Rhodes, Published on Aug 07, 2012

End users spend thousands on advanced systems to keep themselves secure, but regularly neglect the one of the lest expensive yet most important aspects of all: Key Control. Administrating who carries keys and which doors they open seems simple, but most do not understand how vital it is to remaining secure. In this note, we examine the problem and give recommendations on how to optimize keying systems to guarantee buildings stay secure.

Loose Control of Keys

key ring

**** *** ** ******, ****** ****** *** ******** **** ***. It ***** ** ***** ** **** ******* **** ******'* ******* or ********, *** ******* ******* **** *** **** ** ****** them * **** ** * *** ** ** *** ****. However, ***** **** ******* ***** ****** ** ** ************ ***, significant *********** ** ******** ******** ******* *** ****** *** *** window. **** *** ***** **** ********** ** *** ******* **** controlling *** *** ***** ***, **** ******** *** ***** ****** a '**** *****' ** * '*** **** ** ***** **** things **** ****'.

**** ******** ***** ** **** *** *******. **** ***** ****** publicised ******** ************* ************* ********* ********** *** * **** *** *** *** **** ****** ******* reaction *** ******** ********* ** *****. ****** ** ********* *** control ****** *** ******** ********* ** ******** ******** ** ******* from **** ****. ******* ******* ***** *** ** ****, *** what ***** **** *** *** ****** **, ** ******** *********** in ********* **********.

EAC *** * **** ***

**** ********** ******** *** ****-*** ** ** '********** ****** *******' for *** ******* ** ************ ****, *** ****** ***** ******* are ********* ** *** *****, ********** **** *** ***** **** daily ** **** ****** ** ********* *****. **** **** * door ** '*********' ** **** *******, ** **** ****** ***** has * ********** *** **** ****** *** *** ** ****** independently ** **** ****** *******. ** ****** *** ***** *********** or ******** ****** ******* ******* ******* ** * ********, ***** key ******* ** *********** ** **** ********.

*** **** ******** ** ********** ***** ***** ****. **** ** every ******** ******* ** **** ****** ******* ********** ****** *******, typically ***** *** ******** *******, *******, ********, *** ***** **** still **** ** **** ** **** ********* ****** ****** *** secure.

Not ******** ********* *****

*** **** **********, *** ******* ** *** ******* ** *** a ********* ***; ** ****** ***** ********* **********. ** ***** facilities ** *************, *** ******* ****** (**********) ** * ************** of ******** ***********. *******, ** ***** *****, ** ***** ** facilities *********** ***** (******* **** *** *** ***** **** **** the ****), ** *** ****** ******* ...** *** ******** ...** the ************ ...*** ** **.

** *** *****, *** ******* ** ********** **** *** *********** party **** *** ***** ********** *** **********. ** *** ******* responsibilities *** ****** ** '**** ******* *** ** ****', **** expect **** ******* ** ******. ******* ************ *** ********** *** significance ** *** ******* ** *** *****, **** ******** ******* to ********.

Key ******** ** *** *******

** ***** ****, *** ******* ******* **** ***** ********:

  • *** **************: * *** ** *** ******* ***** **** *** ***** doors ***** **** ****/****
  • *** *******: * ******* ** ******** ** ******* **** (*** ******* doors) ** ******** ******** ****
  • ******* '*** ***' ******: * ****** ******* **** ********* *** **** *** ** be ******* **/******* *** *** **********, ******* ********* * ****** agreement ** ****** ********* *** ************* ** *** ******.

*** ******* **** *** *********** **** ********* ******** ** ** successful. **** ***** *** ******* *** ******* **** ******* **** than * ****** ***********. *******, * ****** ** '**********' ****** programs *****, **************,**********'* *******,******'* *********, **********'* ********** ***. *** ***** ***** ** * ********** **** ** ******* key ******* ********:

********* ***** ******** *****, ******* ** **** ************** ********* ** *******. ** **** *****, ******** ******** ********** features ****** *** *******: ********* **** ******* ***********, ****** *********/***** management ****, *** *********** ******** *******. **** ********** **** ******** new ******** ** ****** *** ******** **** ***'* ****, **** users ****** ****** ***** *** ************ *** ****** *** ****** from *****.

* **** ********

**** *** ***** **** *** ***** ** ********* *** ******* the **** ********* ****** ** ********. ***********, ** ****** *** out ** ******* * ****** *** ******, ***** *** * Steps ******** ** ****** **********:

1. *****, ** ********* * ****** ******: Very few buildings are constructed without some form of keying plan. At some level, planning has taken place to group doors so they can be opened with common keys. Key distribution is planned to so that certain people have access to areas relevant to their jobs, but unauthorized people are kept out. Unless firm central management of the keying system is present from the beginning, the particulars of this system are quickly forgotten. Often this happens because no individual or group is given responsibility to keep the system in order.

** * ******, ********** ** ********** * ****** '****** ******' is *** ***** ****. **** *** ******* *********** ********* ** locks *** ********** ** ****, *** ***** ** *** ***** way ** ****** **** ******* ** ********. ********* *** **** hardware *** **** **** ** * ********** ***** ***** ***** expensive, *** ** *** ******** ***** **** ** ******* **** on *****.

2. ********* ** ************ ****** ****: Every key that is cut, even if it is a exact copy of other keys, should be given a unique serial number. This permits traceability of specific keys to specific holders, and helps maintain an understanding of how long an issued key has been in service. When situations warrant reissuing new keys, serialization ensures that every previous issued key is accounted for.

"** *** *********":***** **** ****** ** * ****** ******** ** ****, ** should *** ** ******** ** ********* ***** ********** ******* ******* the ***. * *** ********** **** ************ ** ********** ******* ***************** ****** ******* ** ******.

duplicate

********** *******: **** **** ******** ******* ***** '**********' *** ********, ***** means *** ******** ******* ** *** *** *** ******* ************. The ******* ** **** ******* ** **** ******** ********* ********* cannot ** *** ** *** ***** *******. ***** **** ** make ** ************ *** **** ** * ******** ** ********** store ** * **** **** ** *** *******, *** ********** a ********** ****** ********* **** ****. *******, ******** * ********** keyway **** ******** ******** ***** ** ** ********* ** ***** door, *** *** ****** ** ********* ********.

restricted

3. **** *******: The final step is most important for ongoing success. ******* * ************ ***** *** **** ****** ** * ******** ****** ***** ensure **** '****** ********' *** ********** *** **********. **** *** does *** **** ** ** *******, *** ****** ****** ****** who **** ***** *** *** **** ***** **** *** *** access ** ****. **** *********** ** ****** *** ************** *** auditing, *** **** ******** * ***** ************* ** *** ** allowed ****** ** ******** ********* ** * ********.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Hikvision Access Control Tested on Oct 19, 2017
Hikvision aggressive pricing and marketing combined with generally reliable hardware and free software has made them a major player in video...
Multipoint Lock Access Control Tutorial on Oct 17, 2017
Doors are notoriously weak at stopping entry, and money can be misspent on wrong locks that leave doors quite vulnerable. While closed and locked...
Buy From B&H, Ship Direct From ADI on Oct 16, 2017
B&H, one of the largest online sellers of video surveillance equipment to end users, regularly purchases their video surveillance equipment...
PoE Powered Access Control Tutorial on Oct 12, 2017
Powering access control with Power over Ethernet, like for IP cameras, has become increasingly common.  However, the demands for access power are...
Dahua Access Control Tested on Oct 10, 2017
Can Dahua become a major force in access control? We bought Dahua's ASC1202B to find out. We tested Dahua access and its management application...
Delayed Egress Access Control Tutorial on Oct 04, 2017
Is it ever legal to lock people into a building? The answer is: Yes... under specific situations. With so much of access control driven by life...
Door Closers: Critical Security Hardware on Oct 02, 2017
It might be the most unappreciated piece of door hardware, but it is one of the most important. Door Closers have an important job: automatically...
Propped Doors Access Control Tutorial on Sep 28, 2017
Doors should keep 'bad guys' out. One of the most basic problems with doors is people propping them open: Even worse, door propping...
Access Control Job Walk Guide on Sep 26, 2017
Significant money can be saved and problems avoided with an access control job walk if you know what to look for and what to ask. By inviting...
Genetec Launches Cloud Access Control (Synergis SaaS) on Sep 21, 2017
Genetec's cloud everything expansion continues, with their announcement of Synergis SaaS edition, joining their cloud video offering Stratocast,...

Most Recent Industry Reports

Uniview Recorder Backdoor Examined on Oct 20, 2017
A Chinese research group has identified a vulnerability in Uniview recorders that allows backdoor access in a method similar to the Dahua...
Hikvision Access Control Tested on Oct 19, 2017
Hikvision aggressive pricing and marketing combined with generally reliable hardware and free software has made them a major player in video...
Verkada, Silicon Valley VSaaS Startup, Targets Enterprise on Oct 19, 2017
Verkada says they are building an enterprise-class VSaaS offering, calling it "The new platform for video security". This is a departure from the...
Exacq Unbreaks Avigilon Integration on Oct 18, 2017
For nearly 4 years, Exacq had broken and effectively blocked use with Avigilon cameras, as IPVM reported in January 2014. Now, Exacq has...
Search More Important Than Live Monitoring - Statistics on Oct 18, 2017
Search is overall more important than live monitoring to integrators, according to new IPVM statistics.  The key themes found in integrator...
Axis 'Sold Out' P3707-PVE Multi-Imager Tested on Oct 18, 2017
Axis faced significant product shortages over the summer. Perhaps the most notorious and significantly sold out model was the Axis P3707-PE 8MP...
Dahua Removes Auto Rebooting on Oct 17, 2017
For years, Dahua has automatically programmed its IP cameras to reboot weekly, a highly atypical and questionable practice. Following IPVM...
Deep Learning Tutorial For Video Surveillance on Oct 17, 2017
Deep learning is a growing buzzword within physical security and video surveillance. But what is 'deep learning'? In this tutorial, we explain...
Multipoint Lock Access Control Tutorial on Oct 17, 2017
Doors are notoriously weak at stopping entry, and money can be misspent on wrong locks that leave doors quite vulnerable. While closed and locked...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact