Access Control Planning Guide

The most common access control mistake isn't choosing the wrong reader -- it's controlling the wrong doors, or trying to control every door when only a handful actually need it. This guide walks through planning an access control system properly, before any hardware gets specified.

Step 1: Identify what you're actually protecting

Access control exists to protect one of four things: people, money, data, or stock. Before choosing any hardware, list the doors in your building against these categories:

• People -- restricted areas where safety or safeguarding matters (labs, plant rooms, childcare areas)
• Money -- cash offices, finance departments, safes
• Data -- server rooms, records rooms, IT infrastructure
• Stock -- stores, warehouses, high-value inventory

Doors that don't clearly protect one of these four things usually don't need electronic access control -- a normal lock and key is often sufficient, and adding unnecessary readers just adds cost and complexity.

Step 2: Decide reader type per door, not per building

Different doors in the same building can reasonably use different reader types:

Reader type	Best suited to
Biometric (fingerprint/face)	High-assurance doors where credential sharing is a real risk -- server rooms, cash offices
Card / fob	General staff access, larger teams, visitor and contractor management
PIN code	Low-cost option for a small number of doors, or as a backup method
Multi-factor (card + biometric)	The highest-risk doors where a single credential type isn't enough assurance

Step 3: Plan for people leaving, not just people arriving

A surprising number of access control plans focus entirely on how staff get in, and never plan for what happens when someone leaves the company. Before installation, decide:

• Who has authority to revoke a departing staff member's access, and how quickly it happens
• Whether lost cards or forgotten PINs have a clear, fast process to disable and reissue
• How visitor and contractor access is time-limited so it doesn't quietly remain active indefinitely

Step 4: Plan integration, not just the door

Access control rarely stands alone. Common integrations worth planning for from the start:

• Time attendance -- the same reader on a staff entrance can double as a clock-in/out system
• CCTV -- a camera at each controlled door records who used it, alongside the electronic log
• Fire alarm -- controlled doors should release automatically on a fire alarm signal so escape routes stay clear

Step 5: Budget realistically

Cost scales with the number of doors, not the size of the building -- a small building with five controlled doors can cost more than a large building with two. Get an itemised, per-door quote rather than a single lump sum, so you can see exactly what's driving the cost and adjust scope if needed.