Access Control Specification: A Door-by-Door Checklist

Most commercial access control problems start at the quote, not at the door. Usually, the brief said “ten doors with readers”. However, nobody wrote down what each door had to do.

This guide is a buyer’s checklist. In short, it covers what to specify before you sign. For the cabling the system runs on, see our post on access control systems and backbone cabling. For the whole-system view, see our guide to security system installation in Brisbane. TFD’s part is the cabling and network infrastructure these systems run on, so that is the lens we bring. To compare platforms feature by feature, see our guide to the 8 features to check in a commercial access control system.

1. Build a door schedule first

The problem: Quotes list readers by count. However, a count hides the differences between doors. As a result, every door gets the same treatment.

The fix: Every door access control system is only as good as its door schedule. List each door and record who uses it, when they use it, which direction is controlled, which credential it needs and whether the system must record entries. Then bring the schedule to the site survey. It becomes the basis for the design, the quote and the commissioning checks. Example only:

Door	Users	Hours	Credential	Entries recorded
Main entry	Staff and visitors	Business hours, reception after hours	Card or fob	Yes
Server room	IT staff only	Any time	Biometric or card with PIN	Yes
Store room	Named staff	Business hours	Fob	Yes

2. Choose credentials by risk, not habit

The problem: Installers often apply one credential type to every door because it is simpler to quote.

The fix: Instead, match the credential to what the door protects.

• Card or fob: suits everyday doors. Easy to issue and revoke. Can be lost or lent.
• Keypad or PIN: nothing to carry. Codes get shared and rarely get changed.
• Biometric: suits higher-security areas such as server rooms and medication stores.
• Combined methods: suit the doors where a lost credential would cause real harm.

Also decide how you will handle visitors and contractors. Temporary credentials should expire on a schedule, not on someone’s memory.

3. Specify how each door behaves when something fails

The problem: The spec leaves door behaviour to the hardware default. As a result, the first power cut or network fault decides the outcome.

The fix: Write down what each door does in four situations: power loss, a fire alarm, a network or controller outage, and a door held open. A fail-safe lock releases when power is lost. In contrast, a fail-secure lock stays locked. The right choice depends on the door and on emergency exit requirements under the National Construction Code. For this reason, confirm release behaviour with your building certifier before you order locks.

Next, ask whether readers keep working when the controller or network goes offline. A system that stops granting access during an outage fails at the worst moment.

4. Decide who runs the system

The problem: Nobody owns the system. Credentials for people who left months ago are still active.

The fix: Name an administrator and a backup. Define who can issue access, who approves access to restricted doors and how often you review the access list. A good system lets an administrator issue or revoke access in seconds from one dashboard. Most importantly, tie revocation to your staff exit process so it happens on the last day, not the last audit.

5. Plan the audit trail

The problem: The system logs every entry, but nobody can retrieve the record when they need it.

The fix: Specify what is logged (who, which door, when), how long records are kept and who can export them. In particular, for sites with compliance or duty-of-care obligations, a clear record of who entered a restricted area matters as much as restricting it.

6. Integrate commercial access control with CCTV from the start

The problem: Many sites buy access control and cameras separately. As a result, reviewing an incident means matching timestamps across two systems.

The fix: Decide which doors need a camera and where it sits. For example, entry points and restricted areas are the usual candidates. Then decide whether door events should link to video. Our commercial CCTV installation in Brisbane page covers the camera side. For planning cameras that scale, see our guide to business security cameras.

7. Put the network and power requirements in writing

The problem: The spec lists readers and controllers. However, it leaves out the cabling that connects them.

The fix: Ask the installer to state the cable type, who tests and certifies each run and what evidence you receive at handover. This is the part of the system TFD installs and certifies. Our backbone cabling guide covers why this decides reliability, so we won’t repeat it here.

8. Allow for growth and ongoing cost

The problem: The first quote is for ten doors. Then the eleventh door costs far more than expected.

The fix: Ask what it costs to add a door, a reader or a user. Also check spare controller capacity, software licensing and support terms. Sites add doors as tenancies and security needs change, so the system should expand without replacing the core.

Questions to ask any commercial access control installer

• Who installs, programs and commissions the system?
• What cabling is used, and what test evidence do I receive?
• What happens to door access if the network goes down?
• Who holds the administrator login at handover?
• What documentation do I receive: as-built drawings, door schedule and device list?
• What support and warranty terms are in writing?

Start your commercial access control project with the infrastructure

TFD installs and certifies the cabling an access control system runs on. Our trusted subcontractor installs, programs and commissions the access control hardware, so you get one coordinated project. In addition, we work with IT teams, electrical contractors and security companies who need the cabling done right without losing their client.

If you are specifying a new system or expanding an existing one, start with our commercial access control in Brisbane page or call 1300 111 020 to book a site survey.

Commercial access control FAQ

What is commercial access control? It controls who can enter a space and when, and it records every entry. It replaces keys with credentials that an administrator issues and revokes centrally.

How much does a door access control system cost? Cost depends on the number of doors, the credential types, controller and software choices, cabling and ongoing licensing. For this reason, a site survey gives a quote based on your actual doors.

What does access control system installation involve? A site survey and door schedule, design, cabling and containment, hardware installation, programming, commissioning and testing, then handover documentation and training.

What entry methods are available? Card, fob, keypad or PIN, and biometric entry, depending on the level of security each door needs.

Can access control work with our existing CCTV? In most cases, yes. First, we assess your existing setup at the site visit and design around it rather than requiring a full replacement.

Closing question

If one of your doors failed tonight, would you know who last used it, and could you remove their access within minutes?