Key Control Program
A key control program identifies every controlled key, the door or asset it operates, the person or position authorized to hold it, and the date it was issued or returned. Responsibility should be assigned to a designated key-control manager or office.
Issuance and Records
Issue keys only after documented authorization. Use signed receipts, unique key identifiers, secure records, and periodic holder verification. Avoid labels that reveal the protected location when a key is lost.
Master Keys and Restricted Systems
Master-key privileges should be limited because one compromised key can affect many openings. Restricted keyways, patented systems, controlled duplication, and serialized components can improve accountability when supported by clear procedures.
Lost, Stolen, or Unreturned Keys
Require immediate reporting. Evaluate the affected doors, key hierarchy, identifying information, and threat circumstances. Responses may include temporary controls, rekeying, cylinder replacement, access monitoring, or broader system changes.
Audits and Storage
Conduct regular inventories and reconcile issued, spare, emergency, and returned keys. Store unissued keys in a secured cabinet or room with limited access, and document who may enter the storage area.