Key control for small offices

How it happens to everyone

Nobody sets out to lose track. Somebody needed weekend access for a project. A cleaner was given one. A contractor kept theirs at the end of a fit-out. Two people left and the keys were assumed returned.

Each individual decision was reasonable. The aggregate is a building whose access list nobody can produce. And unlike a break-in, this failure is invisible until the day it matters.

The cheapest first step costs nothing

Write down every external and internal lock in the premises. Then, beside each, list who you believe holds a key. Not who should — who you actually think does.

The gaps in that document are the entire problem, stated plainly. Most people are surprised by how quickly it becomes uncomfortable reading, and that discomfort is what justifies doing anything about it.

Cylinder changes versus a master key system

If your premises are small and every key opens everything, changing the cylinder resets the situation in one visit: the locks stay, the pins change, and every old key is scrap. For a modest office that may be all you need, repeated after any significant departure.

Once you have more than a handful of doors and more than a handful of people, the flat approach starts costing more than it saves — every departure means changing the cylinder everything. That is the point where a hierarchy earns its cost.

What a master key system does

One key opens many doors while each individual key opens only what its holder needs. A cleaner reaches communal areas; a department key reaches that department; a manager holds a master.

The valuable part is the design conversation before any hardware is touched. Mapping who genuinely needs which door reliably uncovers arrangements nobody had recorded — including several that should not exist.

It also contains a loss. One departmental key going missing means changing the cylinder that branch, not the building. A hierarchy of this kind is set out on the master key systems page.

Restricted profiles are the part that makes it real

A hierarchy built on ordinary cylinders can be undone by anyone who takes a key elsewhere and obtains more. Restricted profiles close that: blanks are controlled and additional keys are only issued through the authorised channel against proof of authority.

Without this your hierarchy is a diagram. With it, the register you keep actually matches the building.

Someone has to own the register

Which key, issued to whom, on what date, returned when. Unglamorous, and the thing that makes everything else true.

Name one person and review it quarterly. Tie key return to your offboarding checklist so it happens automatically rather than depending on somebody remembering during a resignation.

Write the list before you buy anything

The cheapest part of solving this is also the part everybody skips. Before any hardware is quoted, write down every door on the premises and every person who plausibly holds a key to each one.

Include the people who have left. Include the cleaning company rather than "the cleaners", because the company employs people who come and go without telling you. Include contractors who finished a job, the landlord, the managing agent, and — in a surprising number of small offices around Rivonia and Woodmead — a previous tenant nobody thought about.

That list is the diagnosis. It tells you whether you have a problem that a single cylinder change fixes, or one that needs structure. Buying hardware before writing it is how offices end up with an expensive lock on the wrong door.

The copying problem, and what restricted keys do

An ordinary key can be copied at a hardware counter for small change, without a record, without permission, and in about ninety seconds. That is worth stating plainly because most key registers are built on the assumption that it cannot.

A restricted key profile changes that. The blanks are controlled, and copies are cut only against a signed authority held by the supplier. It costs more per key and it is the difference between a register that describes reality and one that describes an intention.

For a small office it is usually worth it on the entrance and on any door protecting stock, records or cash, and not worth it on internal doors nobody would bother copying. That is a judgement about which doors matter, and it is part of specifying a master key system properly.

When keys stop being the right tool

There is a point at which key control stops being a paperwork problem and becomes a physics problem. It arrives faster than people expect.

Past about five doors and five or six people with different access needs, a key system requires a level of discipline that a small business genuinely cannot sustain — every change of staff means collecting keys, and a key that is not returned means changing a cylinder.

Access control removes the whole question. A credential is switched off from a screen rather than collected from somebody who has already left, and the record of who opened what is generated rather than remembered. The hardware costs more; the administration costs almost nothing, which is the reverse of a key system.

What good looks like in practice

It is less impressive than people imagine, which is the point. A departing employee hands back key number seven. Somebody crosses it off the register, issues it to their replacement, and writes the date.

That is the whole routine, and it takes five minutes rather than a meeting. When somebody asks who can open the store room, there is an answer with names against it. And when a key genuinely goes missing, the affected doors can be changed to a new level without rebuilding the system, because it was specified with room in it.

The hardware is the smaller half of that. The register is the larger half, and it is free.

Reviewing it once a year

A key register is not a project, it is a habit, and the habit is one meeting a year that takes fifteen minutes.

Read down the list and ask two questions about each line: does this person still work here, and do they still need this door? Both answers change more often than anybody expects, and a register that has not been read in three years is a historical document rather than a control.

Then check the physical side. Are there keys in a drawer nobody can account for? Has anybody been issued a key for a temporary reason that became permanent? Those two questions surface most of what goes wrong on small premises around Rivonia and Woodmead. Where the fault turns out to be mechanical, it is dealt with as a lock repair.

What to do when a key cannot be accounted for

The decision is smaller than it feels, provided the register exists. Look up which doors that key opened, and change those cylinders — not every door on the premises.

Without a register the honest answer is that every door is affected, which is the expensive version of the same event and the real argument for keeping the paperwork in the first place.

Then close the loop: reissue with a new number, write the date, and note what happened. A single line in a register is what turns a lost key from a crisis into an ordinary Tuesday, and it costs nothing but the discipline of writing it down.

When the premises are shared with other tenants

In a building with several tenants, your key control stops at your own suite door, and it is worth being clear-eyed about that.

You cannot compel another tenant to return keys to a shared entrance, and you cannot stop one propping it open for deliveries every morning. What you can do is make your own entrance genuinely sound: a door that latches every time, a bolt that engages the frame rather than a light latch, and a known list of who holds a key.

The shared door is a separate conversation with the landlord or the body corporate, and it moves faster when framed as maintenance rather than as an upgrade. That is covered under securing a shared entrance.

The cheapest version of this

For a very small office the whole thing can be done in an afternoon and it does not require a system.

Change the cylinders on the entrance and any door protecting records, stock or cash. Cut a known number of keys. Write a list with a number against each key and a name against each number. Decide who is responsible for that list, and put a date in the calendar to read it once a year.

That is key control. It costs one visit and a page of paper, and it covers most premises under about five doors. Past that, the structure is a master key system in Rivonia rather than a longer list.

One page, once a year

The whole of this fits on a single sheet kept with the lease rather than inside the office it describes: the doors, the key numbers, the names, and the date each was issued or returned.

Read it once a year and ask two questions about every line — does this person still work here, and do they still need this door. Both answers change more often than anybody expects, and a register nobody has read in three years is a historical document rather than a control.