Define the site requirements
Map doors, users, restricted areas and visitor workflows. Confirm applicable building, life-safety, sector and authority requirements with qualified parties; electronic access design must not compromise emergency egress. Verify compatibility before agreeing the scope.
Limit and review permissions
Grant access by role and time where appropriate. Use individual accounts, restricted administration and audit records. Remove lost credentials and departed staff promptly. Define retention for visitor records and access history and protect exports.
Secure connections and continuity
Protect controllers, servers, APIs and cloud integrations. Review offline behaviour, power loss and recovery with site safety owners. If biometric recognition is proposed, perform a separate privacy and necessity assessment before deployment.
Planning recommendations are distinct from legal obligations. Confirm the rules and current specifications for your facility, sector and contract. This guide is not a certification or legal opinion.