Who: Ensuring only active employee and contractors have access to restricted doors with proper approvals and permissions.
What: Ensuring that the new hire gets the appropriate access privileges for the role and location of the person. If the role changes, the associated physical access privileges will also be updated.
Where: Ensuring the person’s access depends upon their location and that if the location changes, the physical access adjusts accordingly.
When: Ensuring access is granted when it is needed, especially for contractors and third parties to ensure elimination of risks with 24×7 access. Granular physical access controls can provide temporary access for a limited amount of time. For example, a contractor could be given credentials that are set to time out at the end of their contract. Or traveling sales-people get building access only when they are visiting.
Why: Physical access granted is mapped to the role the person has and also takes into account their peers under the same management hierarchy, location, etc. This approach helps keep physical access tightly managed as opposed to getting privileges amassed over time.