Every Fob Has a Name: Access Governance for Works in Live Commercial Buildings

Access is often treated as a reception task. A contractor arrives, a name is written in a book, a key is handed over and the work proceeds. In an occupied or multi-tenant commercial building, that casual approach is difficult to defend. The key register, fob list, permit system and sign-in record together form a control system. If they are incomplete, the programme may still appear to be progressing, but the client is carrying unmanaged security, insurance and handover risk.

For clients and project teams in the UK, the issue is not simply whether contractors can get into the building. It is whether access has been granted deliberately, recorded accurately, reviewed periodically and withdrawn conclusively. That distinction matters when works run alongside tenants, service users, managing agents and existing building management teams.

Access is a controlled asset, not a courtesy

A key or fob is a physical authorisation. It allows a person to cross a security boundary, and in doing so it may trigger obligations under the lease, the building's insurance arrangements, fire strategy or security policy. Treating access as an asset means giving it an owner, a register and a lifecycle.

The lifecycle is straightforward in principle: request, approval, issue, use, review, return or revocation, and final reconciliation. The difficulty lies in applying it consistently when there are multiple sites, shifting contractor teams and out-of-hours attendance. A workable model begins with a single access register that records the person, the organisation, the authorisation route, the item issued, the date of issue and the expected return date. Where permits are used, the register should cross-refer to the permit reference. Where sign-in sheets are used, they should reconcile to the register rather than sit beside it as a separate record.

This need not be elaborate. A controlled spreadsheet can work on a smaller project if it has named ownership, version control and a review cadence. Larger schemes may require an electronic access management system. In either case, the principle is the same: no anonymous access, no unexplained fobs and no key that cannot be traced to a named individual.

Issue and induction belong together

Access should not be issued before induction is complete. Contractor induction is often treated as a health and safety formality, but it is also the point at which access rules are explained. The induction should cover the building's security arrangements, permitted routes, restricted areas, fire procedures, out-of-hours rules and the process for reporting lost or faulty access devices.

The register should record that induction has taken place before a fob or key is released. This creates a simple audit trail: who attended, what they were told, what they were issued and when. For works in live buildings, the induction should also explain how access interacts with tenant movements, loading bays, shared corridors and secure floors. A contractor who understands the building's operational rhythm is less likely to prop open a fire door, borrow a tenant's lift key or create an unauthorised shortcut through an occupied area.

Permits add a further layer. Hot works, roof access, confined spaces and isolations should not rely on a key alone. The permit authorises the activity; the key authorises the movement. Keeping the two records linked prevents a situation in which a contractor holds valid access but no valid permit for the task being undertaken.

Revocation is where registers fail

Most access registers are adequate at issue. Fewer are reliable at revocation. Contractors leave, shifts change, packages complete and sub-contractors demobilise. If the register is not updated at those points, the building retains live access in the names of people who no longer have a legitimate reason to enter.

A practical control is to set a review point at every package completion and at least monthly during active works. The review should ask three questions: who still needs access, what access do they hold, and what evidence confirms it has been returned or disabled? For electronic fobs, deactivation should be confirmed by report rather than assumed. For physical keys, return should be recorded against the original issue entry. Where a key cannot be returned, the lost-key procedure should be triggered without delay.

The lost-key procedure should be written before it is needed. It should identify who is notified, how the loss is assessed, whether locks or cylinders require change, how the cost is allocated and what temporary access controls apply in the meantime. In multi-tenant buildings, the landlord or managing agent may need to be involved. The insurance position should also be considered, because some policies and lease obligations depend on reasonable security measures being maintained.

Out-of-hours access needs a tighter standard

Out-of-hours working is where access governance is most often stretched. The building may be empty, the reception may be closed and the usual supervision may be absent. That is precisely when a clearer standard is required.

Out-of-hours access should be authorised in advance, recorded against named individuals and linked to a specific work activity. The record should show the expected arrival and departure times, the route to be used, the person responsible for securing the area and the emergency contact. If the building has a concierge or security desk, the register should reconcile with their records. If it does not, the contractor's own supervision arrangements should be confirmed in writing.

This is not about creating bureaucracy for its own sake. It is about ensuring that the client can answer a simple question after an incident or near miss: who was authorised to be in this part of the building, doing what, and under whose control? A register that cannot answer that question is not functioning as a control system.

Handover evidence closes the loop

Access governance does not end at practical completion. The final account and handover process should include a reconciliation of all keys, fobs, passes and temporary access devices. The client should receive a clear statement of what has been returned, what has been disabled, what has been replaced and what remains outstanding.

This evidence matters for more than security. It supports the completion record, informs the building's ongoing management arrangements and reduces the risk of a post-handover dispute about missing keys or unexplained access. Where works have taken place in occupied premises, it also gives tenants and managing agents confidence that the project has left the building in a controlled state.

A key register will never be the most visible part of a construction or refurbishment programme. But in occupied commercial property, visibility is not the test. Control is. Giving access a named owner, a linked induction and permit record, a disciplined revocation process and a handover reconciliation turns a routine administrative task into a dependable programme control. For clients, that is the difference between convenience and custody.