Plan commercial access control to support defined workplace entry rules while preserving required exit functions and keeping safety decisions with the responsible facility team.
Start with the hazard and the required control
An access system can help manage entry to a room, building, or work area. It does not remove the hazard inside that area or replace the employer’s safety program. Before choosing readers and credentials, the facility’s safety and operations contacts should identify the hazard, the applicable requirements, and the role that controlled entry is intended to perform.
OSHA’s hazard prevention and control guidance calls for selecting controls through a hierarchy, involving workers, and checking whether measures remain effective.
A locked entrance should not be treated as a complete solution to machinery, electrical, chemical, or other workplace hazards. Determine what additional safeguards, work procedures, training, supervision, and emergency arrangements are needed. The security scope should state its boundaries so a successful door test is not mistaken for approval of the activity taking place beyond it.
Turn approved entry rules into usable permissions
List the areas to be controlled and the people who have authority to approve access. Separate employee, contractor, visitor, maintenance, and delivery routines. Define permitted hours and temporary access periods, including early arrivals, overtime, cleaning, and work outside the usual schedule. Each permission should have a business reason and an owner who can review it.
Individual credentials can make administration clearer than shared codes, but the records are only as useful as the process behind them. Keep credential assignments current, remove access when it is no longer needed, and limit who can change permissions. Give staff a clear process for lost credentials and unexpected visitors rather than encouraging door propping or informal sharing.
Training records need an accountable process
If entry depends on current training or another approval, identify the authoritative record and the person responsible for it. Confirm whether the selected platform supports the intended connection or whether an administrator must update permissions manually. Define how expired, missing, or disputed records are handled and how authorized exceptions are approved.
A credential system does not independently establish that someone is trained, competent, or authorized for every task in an area. Test the complete administrative workflow: a new employee, an expired approval, a changed role, and a departing contractor. Keep the relevant safety records in the organization’s designated process instead of assuming that a door-access database replaces them.
Preserve required exit and emergency operation
Controlled entry and required exit behavior must be considered together. Review the complete opening, including the door, frame, lock, closer, exit hardware, power supply, monitoring devices, and any connected release functions. The appropriate design depends on the opening and the requirements that apply to that building.
OSHA’s exit-route requirements in 29 CFR 1910.36 address opening exit doors from inside without keys, tools, or special knowledge and restrictions that could arise when a device fails.
Do not assume that every door should unlock on every alarm or that adding a fire-alarm connection automatically establishes compliance. The responsible design professionals and authorities should determine the required sequence. Document it and coordinate testing before placing the opening into normal operation. Include what authorized staff should do when equipment or communications fail.
Keep specialized safety programs separate
Restricting entry to a machine room does not perform energy isolation for servicing machinery. Where the hazardous-energy standard applies, the employer’s program includes the required procedures, training, and inspections. A security credential is not a substitute for the task-specific controls required by that program.
Use OSHA’s control of hazardous energy standard as the primary reference for lockout/tagout requirements.
Similarly, a reader at an approach to a confined space does not replace a permit-space program, its entry conditions, or its assigned responsibilities. The security work may support a defined boundary, but the facility must determine and maintain the measures required for the actual space and activity.
OSHA’s permit-required confined spaces standard describes the relevant general-industry framework and its scope.
Understand what access records can establish
An access event normally records a credential presentation and the system’s response. It does not necessarily identify every person who passed through the opening, prove that the credential holder entered, or establish why the entry occurred. Tailgating, shared credentials, door propping, and an unmonitored route can affect the interpretation.
Useful records need consistent door names, accurate time settings, defined retention, and controlled access to reports. Where a compatible video connection is included, it may provide additional context for a selected event. Review the actual recording rather than assuming that a linked camera captured a recognizable person or the complete sequence.
Keep system records distinct from required safety documentation. Access data can be supporting information during an internal review, but its availability does not guarantee a particular inspection finding, legal outcome, insurance result, or reduction in citations. The responsible team should decide what to preserve and how it relates to the incident under review.
Coordinate installation and acceptance
Bring security, facilities, IT, operations, and safety contacts into the planning discussion. Identify who approves the opening’s behavior, maintains the network and accounts, reviews alerts, and manages users. Separate equipment responsibilities from workplace safety decisions, and include any required external professionals in the coordination plan.
Test authorized and denied entry, schedules, door status, and the agreed response to held-open or forced-door events. Verify the required exit and release functions with the responsible parties. Review how interruptions are reported and how the system returns to normal. Record unresolved limitations rather than describing the installation as complete while important functions remain unverified.
At handover, provide the approved door list, user-administration instructions, equipment information, relevant test records, and service contacts. Staff should know how to report a fault, remove a lost credential, and request a permission change. Keep those records current when layouts, operating hours, personnel, or the use of an area changes.
Frequently Asked Questions
Does controlled entry replace a workplace safety program?
No. Access control manages entry; it does not remove the hazard inside a room or replace the employer’s safety program. The responsible safety and operations teams should define the hazard, required safeguards, and the role of controlled entry before equipment is selected.
What should be reviewed before restricting access to a work area?
Agree the approved entry rules, permission owners, and required exit and emergency operation. Keep training records and specialized safety procedures accountable to the responsible facility team. A successful door test is not approval of the activity beyond the door.
Plan the next step with NERSA
NERSA reviews commercial and industrial openings, existing equipment, entry routines, and supporting infrastructure to define an access-control scope. Describe the area involved, the approved entry policy, any known door problems, and the operational concern you want to resolve. Include the facility contacts who can confirm safety and emergency requirements.
The commercial access control guide covers credentials, complete openings, system architecture, and ownership responsibilities.
Use security and life-safety planning resources to identify related topics for your project team.
Request a security assessment or call 1-888-344-3846 to discuss the property and proposed work.