Key and asset management tips

March 2014 Access Control & Identity Management

Key control and asset management technology is seeing significant growth across a broad range of applications, and for good reason. It’s a reliable and cost effective method to improve building security by ensuring that facility keys are properly managed with regard to access, storage and tracking. Key management systems can reinforce access control policies that are already in place and can also help to reduce the costs associated with lost keys or unmanaged access.

The effective implementation of a key control and asset management system can be achieved through best practices to realise decreased operational and financial risk and provide the best value from the application.

Fernando Pires, VP, sales and marketing, Morse Watchmans.
Fernando Pires, VP, sales and marketing, Morse Watchmans.

This white paper presents several best practices for deploying key control and asset management solutions, including:

* What you need to know about the technology.

* Getting started.

* Designing and customising the system.

* System integration.

* Software add-ons.

* Mobile applications.

* Application examples.

* Conclusion.

What you need to know

Key control and management systems are defined as an orderly and secure solution for addressing controlled usage and safekeeping of mechanical keys. The tamper-proof systems are designed so that only authorised users – using pre-programmed PIN codes, access cards or biometrics – can access keys, while on-board advanced technology automatically records all access activity.

A basic system typically consists of a computerised key storage cabinet, a key locking mechanism and a tracking system. From this basic package, several options and design variations can be added to customise the solution and help protect the investment as needs grow and change. For networked installations, management software can also be included in the system. Permission levels can be established for each user and data can be monitored from any desktop connected to the network. Additionally, the software can run activity reports, sort based on different criteria and view and print reports, among other uses.

Vital documents, cash, employee badging/access control cards, data drives and even small electronic gear can also be controlled and secured using asset management lockers or keycard modules that can be integrated into a key control system. Asset locker systems are identical in function to key control systems; users can access items only from the lockers/modules for which they have been pre-authorised and any activity such as removing or returning items or opening lockers/modules is automatically recorded in an audit trail.

Today’s key control and management systems have become a higher level management tool for effectively addressing the safety and security of building occupants and the security of the building assets. Knowing the identity of authorised key holders, which keys they have in their possession or have access to and when they were used are all essential pieces of information needed to help ensure a safe and secure environment.

Further, technological developments and open protocols have made it possible to integrate key control with access control and other security systems as part of a facility’s networked security system. Now, a user who has taken a specific key can be denied egress from the facility until the key is returned – and selected management can be alerted via e-mail if a key has not been returned on time.

Key management systems have become an operational necessity in environments such as correctional institutions, hospitals, car dealerships, property management, casinos and educational facilities, to name just a few examples. Key management is also a critical function for anyone overseeing security at conference centres, government agencies, control rooms, automotive businesses and corporate buildings. However, key control can and should also be applied to businesses of all sizes because of the measurable benefits of enhanced security and convenience, as well as increased staff productivity and accountability.

Getting started

Implementing a key control and management system is a straightforward process that involves a few basic steps: take inventory of the facility to identify all access points and installed locks; ascertain the operational needs of employees as well as of others who may need access to the facility (e.g., service repair or cleaning crew); and establish a policy with easy to follow procedures for effective key control and management.

The first step is to catalogue every access point and every piece of door hardware. This process is followed by management assessing which individuals have keys, which keys they have and which doors they access. Without this preliminary audit, it’s almost impossible to know what size and type of key cabinets will best fit your needs, and where the key control systems should be located.

System growth should also be factored in at this stage of planning. What may seem adequate today may become insufficient in a year or two. The ability to add on the exact components you need, or change modules where and when you need, helps protect your investment. This way you will avoid having to rip and replace an entire key control and asset management system because the current system cannot accommodate lockers for securing cellphones or other valuable items, or does not integrate with a new access control system.

Next, review operational needs to understand how the facility works on a day-to-day basis, so that use of a key control and management system is efficiently optimised and daily operations are disrupted as little as possible. Whether the facility is a hospital, dormitory, hotel or an office building, having a comprehensive grasp of daily activity will help in implementing a key control system and will also help in minimising the trade-off between security and convenience.

If a networked key control system is planned, a review of the network topology will reveal any configuration and performance alterations that may need to be applied. Compatibility with other security systems should also be reviewed to maximise interoperability for more comprehensive integrated operations.

A simple but strong set of guidelines for administration and use of the key control system will help to define areas of responsibility and enable better control of the keys.

Designing and customising the system

Configuring a key control solution is as easy as identifying needs and then building the system with modular components that meet those needs. Users select a cabinet size, and if more than one cabinet is required, the arrangement can be linear (side by side) or stacked. Cabinet doors may be solid steel or they may be see-through polycarbonate designs.

Choices for modules to fill the cabinets may include a selection of key storage modules, credit card modules or simply blank modules (to be filled at a later time). The combination of modules is entirely up to the user, providing the ability to customise and also change the system to meet growth or other specific needs.

Custom modules and lockers that can accommodate plastic card keys or other valuable items may also be included in the system. Lockers, available in various configurations, can be used for storing credit cards, small firearms, cellphones, 2-way radios, laptop computers, tablets, cash trays and so on, and can be managed as efficiently as keys in key control systems. Items can be returned to any open locker for convenience, and systems can be set up as personal storage spaces for one or multiple users.

Key control and asset management systems can also be configured with additional security features to help enhance the integrity of the system. For example, where protection of asset lockers itself is mission-critical, installation of a remote access device provides an additional layer of protection by enabling the locker system to be placed in a secure room. A second individual’s PIN input and verification are then required in order for an authorised employee to access the contents of a locker.

Access to the key and asset cabinets can also be customised, with options including a built-in keypad, biometrics such as a fingerprint reader and a magnetic or proximity card reader. Systems that integrate card readers for access can often utilise the access control cards that are already in use throughout the organisation, making the system implementation easier and more convenient. Changes to an individual’s access authorisation can be made instantly by program administrators. The optional user interfaces can be integrated directly into the cabinet for easy accessibility or they may be separate. In either design, users can access only the stored items that they have been authorised to remove or return.

System integration

A key control and asset management solution can usually be integrated with the existing physical security system without costly upgrades or overhauls. For example, asset control systems featuring alarm and relay inputs/outputs can be integrated with existing video surveillance systems for additional security. Ethernet and USB capability help to ensure system compatibility and integration. Key management systems can also integrate with a facility’s existing identification cards.

The compatibility with other security systems and network access offer an added richness and usability and integration with existing databases saves time and money.

Ethernet or TCP/IP communications ports allow ease of use for direct connectivity to printers or other devices, or networked connectivity via Ethernet.

Software add-ons

One of the enabling factors for successful key control implementation is the ability to manage all programming, remote functions and reports for the system with a software-driven solution. Similar in concept to popular access control systems, the PC-based package of key management software helps make day-to-day operations and activities easier and more fluid. Users can be added from a global list and all specific settings (added or modified) will be automatically synchronised across the system. Profiles can be assigned for improved user control, and administrative access levels have various options to be tailored to specific needs such as reports only or alarms only.

Built-in schedulers can be programmed to automatically download all data to a secure PC as required by the user. With this capability, management can better sort and analyse information to maintain maximum control of access and security issues.

Scheduled email reports, detailing what keys are in or out and who has/had them, keeps security management informed and up to date. If an incident occurs, management can query the system for specific details, such as a listing of all transactions between certain times; and when doing a follow up investigation, management can request a report for the hour preceding the incident. Or, immediately following an incident, a report can be generated showing which keys are back in the system and which keys are still out and who last accessed them. Together with the audit data from an access control system, a key control system’s reporting system provides a strong evidence trail.

Mobile applications

Advanced communication capabilities also enable key control systems to be monitored and administered remotely from PDAs or smartphones as well as from the desktop. Apps for automated key control systems enable users to maintain control of keys no matter their location. At any time, an authorised user can see real-time transactions and information about keys that are in use and any keys that are overdue, as well as about where and when alarms may have been triggered or overall system status.

For investigative purposes, managers can even review key usage to determine who may have last accessed a key for a vehicle that was found to be damaged. Having this information available on a mobile device is like having a remote office.

Notifications and events are automatically sent to authorised personnel, allowing them complete control of the system. They can cancel an alarm and even, if necessary, remotely disable user privileges. These features, along with multiple others, provide the mobile user with a greater level of convenience and control when it comes to key control management.

Mobile applications are quickly becoming a preferred platform for security managers accessing key control data and even to perform transactions. The result is improved safety and integrity of the facility.

Application examples

Educational facilities: A robust key control and management system can provide an additional layer of security and information for first responders in an educational environment. For example, badges can be pre-configured and distributed to designated first responders and, in the event of an incident, when they reach the scene they simply scan the badge into the system and the critical emergency keys will be released. It’s also important to remember that in addition to traditional first responders such as fire, law enforcement and EMS (emergency medical services) personnel, there is a wider circle of school staff and departments that play an integral role in emergency situations.

Key control systems that are strategically located, networked and easy to use/manage, add to an individual’s ability to efficiently cope with an emergency. Many schools (both public and private) today at all levels are battling budget cuts to their operational expenditures, and key control systems may help reduce costs. For example, services by janitorial or maintenance staff can be shared among several schools in a district rather than be dedicated to a single school, or teaching/support staff may be assigned to more than one school.

In these instances, instead of issuing duplicate sets of keys to several employees (and potentially creating a security vulnerability), a single set of keys can be stored in a key control system that is located in the building for which the keys are used. Using their pre-authorised PIN codes, visiting staff can quickly and easily access needed keys without having to go looking for them or interrupt another individual to dispense the needed key. All access activity is recorded and any changes to authorisations can be made quickly and easily by the system administrator.

Casinos: To effectively manage casino assets, key control systems store, control and track keys that are used for access to all the most sensitive and highly secured areas of the casino where money and chips are held, including the slot department and cages.

Customised features and advanced technology in key control systems also make it easier for casinos to comply with gaming commission regulations pertaining to key control and management. For example, to meet gaming regulations that require the three-man rule to access sensitive or restricted key sets, the key control system can be programmed to recognise these keys or key sets and only open the cabinet door and release them once the three required logins are completed and the credentials verified.

These measures ensure that no one person acting alone can access a sensitive or restricted key and that these keys never leave the property.

Finally, it should be easy to use, as training time can be costly and many employees will need to be able to access the system.

Fleet management/car dealerships: The benefits of adding a key bank system to a dealership operation are many. Management controls who accesses vehicle keys, who enters the system, who takes a key and why it is removed and how long the key is out.

No more missing keys. No more mystery damage or mileage. In applications for automated key control and management systems used in fleet operations or dealerships, software is available to track key usage so that management knows at any given time who has accessed keys and when. Dealerships that network their key control systems can experience additional benefits in managing vehicle usage.

For example, scheduling can be used to ensure that drivers can’t simply grab the newest car on the lot while older cars sit unused. Additionally, networked systems allow keys to be returned to any fleet key cabinet in the system. This makes it easier to track a vehicle that has been returned to a location different from where it was picked up. The system software will record the location and time so anyone looking for that vehicle will know where it – and its keys – is currently located. This benefit allows vehicles to be moved around and located as needed.

Conclusion

By following these best practices for key control and asset management systems, users may experience decreased operational and financial risk and achieve best value from the application. The guesswork is removed and the technology can be implemented with measurably higher levels of success.

For more information contact Morse Watchmans, +1 203 264 4949, [email protected], www.morsewatchmans.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

New State of Physical Access Control Report from HID
HID Global Editor's Choice Access Control & Identity Management News & Events
HID released the 2024 State of Physical Access Control Report, identifying five key trends shaping access control's future and painting a picture of an industry that has been undergoing considerable transformation.

Read more...
Smart intercoms are transforming access control
Access Control & Identity Management Products & Solutions
Smart intercoms have emerged as a pivotal tool in modern access control. They provide a seamless and secure way to manage entry points without the need for traditional security guards to validate visitors before granting them access.

Read more...
Easy, secure access for student apartments
Paxton Access Control & Identity Management Surveillance
Enhancing Security and Convenience at Beau Vie II Student Accommodation, a student apartment block located at Banghoek Road, Stellenbosch, with Paxton's access control and video management solution

Read more...
Invixium acquires Triax Technologies
News & Events Access Control & Identity Management
Invixium has announced it has acquired Triax Technologies to expand its biometric solutions with AI-based RTLS (Real-Time Location Systems) offering for improved safety and productivity at industrial sites and critical infrastructure.

Read more...
ControliD's iDFace receives ICASA certification
Impro Technologies News & Events Access Control & Identity Management
The introduction of Control iD's iDFace facial biometric reader, backed by mandatory ICASA certification, underscores the commitment to quality, compliance, and innovation.

Read more...
The future of workplace access
HID Global Access Control & Identity Management
Mobile credentials are considerably more secure than physical access control, because they eliminate the need for physical cards or badges, support multiple security protocols, and add layers of protection on top of basic card encryption.

Read more...
Integrated, mobile access control
SA Technologies Entry Pro Technews Publishing Access Control & Identity Management
SMART Security Solutions spoke to SA Technologies to learn more about what is happening in the estate access world and what the company offers the residential estate market.

Read more...
Bespoke access for prime office space
Paxton Access Control & Identity Management Residential Estate (Industry)
Nicol Corner is home to a six-star fitness club, prime office space, and an award-winning rooftop restaurant. It is also the first building in South Africa to have its glass façade fully incorporate fritted glazing, saving 35% on energy consumption.

Read more...
Next-generation facial recognition access control system
Enkulu Technologies Products & Solutions Access Control & Identity Management Residential Estate (Industry)
With a modern and innovative design, iDFace is the ideal device for monitoring and controlling people entering and exiting a building using facial recognition technology, including liveness detection, for enhanced security.

Read more...
Long-distance vehicle identification
STid Security Products & Solutions Access Control & Identity Management Residential Estate (Industry)
The STid SPECTRE reader can identify vehicles up to 14 metres away, across four traffic lanes, ensuring secure access to an estate without disrupting the traffic flow.

Read more...