IFCPP PROTECTION TIP OF THE MONTH

 Keys & Access Control: Your Keys Are Part of Your Security System

Access control is one of the most fundamental layers of physical security. Every employee, volunteer, contractor, vendor, and security professional plays a role in protecting cultural institutions by ensuring that only authorized individuals have access to sensitive areas.
Every key, access card, PIN, and electronic credential represents trust. While sophisticated security technologies—including electronic access control, surveillance systems, intrusion detection, and alarms—are essential components of a comprehensive security program, even the most advanced systems can be compromised when access credentials are not properly controlled.
A misplaced key, a borrowed access card, a shared PIN, or a door left unsecured can provide unauthorized access to restricted areas, placing staff, visitors, collections, facilities, and operations at unnecessary risk.
For museums, libraries, archives, historic sites, and other cultural institutions, the consequences can be especially significant. A single compromised credential may provide access not only to offices, but also to collections storage, conservation laboratories, archives, mechanical spaces, evidence rooms, or other secure locations housing irreplaceable cultural assets.
Access credentials should always be treated as personally assigned security tools—not items to be shared for convenience. Every credential carries accountability. Promptly reporting missing or stolen keys allows security personnel to respond quickly before a small issue becomes a major security incident.

 Best Practices

•  Never loan or share keys, access cards, PINs, or electronic credentials.
•  Report lost or stolen keys and access cards immediately.
•  Never prop open secured doors—even "just for a minute."
•  Prevent tailgating by ensuring unknown individuals do not follow you through secured entrances without authorization.
•  Verify the identity and authorization of anyone requesting access to restricted areas.
•  Wear identification badges where required and professionally challenge individuals without proper identification.
•  Escort visitors, contractors, researchers, and vendors in restricted areas unless they have been authorized for unescorted access.
•  Ensure temporary staff, interns, volunteers, and contractors receive only the access necessary for their assigned responsibilities—and that access is removed promptly when their work is complete.
•  Keep keys and access cards secure at all times, both on and off duty.
•  Return all keys, credentials, and access cards immediately when changing positions or leaving the organization.

 Cultural Institution Reminder

Cultural institutions often rely on volunteers, seasonal employees, contractors, researchers, visiting specialists, and partner organizations. Applying the principle of least privilege—granting only the minimum level of access necessary for assigned duties—helps reduce risk while maintaining operational efficiency.
Strong access control protects not only buildings, but also collections, staff, visitors, institutional reputation, and public trust.

 Professional Tip

Security isn't just about keeping people out—it's about ensuring that the right people have access to the right places at the right time.
Every key, access card, and credential represents accountability. One unsecured door, one shared credential, or one lost key can undermine an entire security program.
Protect your credentials just as carefully as you protect the collections, facilities, and people entrusted to your care.

Remember: A door is only as secure as the person controlling the key.