Access Control in the Retail sector

A guide to Access Control in the Retail sector

What is access control?

Access control provides the ability to control, monitor and restrict the movement of people, assets or vehicles in, out and around a building or site.

Access control is essential in the protection of people and assets and has the additional benefit of being expanded from controlling, for example, a single entrance door to a large integrated security network.

There are also huge potentials in terms of integrating access control with other systems, such as CCTV and intruder alarms, allowing for cost savings and greater security benefits.

What risks does the retail sector face and how can these be countered by access control?

The retail sector faces a variety of threats all year round, including shoplifting, organised retail crime and dishonest staff, and these risks can increase significantly during busy shopping periods such as seasonal sales.

Recently, the BSIA carried out a survey of its members to discover the trends in retail security over the last year. Over 50% of respondents felt that the use of private security measures in retail had increased over the past twelve months, with a further 65% anticipating this use to increase over the course of the next year.

Members perceived the biggest threat to retailers to be shoplifting and petty theft, with theft by employees following in second. Online theft and armed robberies were also considered to be risks.

Retail environments are full of valuable assets, both on the shop floor and in the stock room. Access control systems are all designed to permit access only to people with the necessary authority to enter a particular area, ensuring that goods and people are protected and helping to manage known or anticipated threats.

Generally, systems are comprised of three main components:

1. The physical barrier – to physically restrict access to a building or area. This can be achieved through methods such as:

• Doors – secured by either a magnetic or strike lock, or can be revolving or sliding.

• Turnstiles and speed gates – designed to limit access to one person per identification device.

2. The identification device – there are a number of different technologies available to identify users of an access control system, including:

• A proximity card and reader via Radio-Frequency Identification (RFID) – these cards can be programmed to work at a short or long read range

• A smart card and reader

• A swipe card and reader

• PIN pads

• Biometric devices such as fingerprint or iris scanning

3. The door controller and software – these are at the heart of the access control system and are used to decide who can gain access through which entry point and at what time of the day are they permitted. These can vary depending on the size of the system and how many readers or sites you are trying to control from one point. Some of the options include:

• A stand-alone door controller linked to a single door with no software

• A number of door controllers all linked together to a single PC to control one site

• A number of sites all interlinked together over a wide network area

The added benefits of access control

Retail environments often incorporate large numbers of staff working varied shift patterns. Access control systems can offer a wide range of benefits, including Human Resource management and integrated security systems.

Time and attendance

Retail security does not necessarily just offer protection for the shop floor itself, but can encompass all stages of the supply chain – including staff offices, warehouses and even the delivery process. Naturally, various different employees and outside visitors are involved in these processes and access control systems can assist with staff management.

Badge/token technology can be used to record employee hours and monitor visitor movement within a specific site. If appropriate, these can be processed against working hours, applicable for both temporary and permanent staff – this can be useful for busy shopping periods when additional seasonal staff are employed temporarily. This can work in real time to feed transactions through to the company’s payroll. Time and attendance systems also accurately help keep employers on the right side of the European Working Time regulations and manage holidays and absences effectively. Fast, accurate and easy-to-use, these systems are suitable for businesses employing just a few people, right up to large multinational companies.

Automatic Number Plate Recognition

To monitor the movement of vehicles around an area, CCTV-style cameras and computer software can be used to identify number plates of vehicles. Some systems can also store photographs of the driver and vehicle for subsequent analysis.

This sophisticated software allows critical information to be passed to the police to assist in the pursuit, identification and capture of offenders should an incident occur. For example, if a shoplifter flees the scene of a crime via a vehicle, ANPR cameras situated around an area could help identify the criminal. Visual proof of parking offences with the corresponding time and date information is provided as evidence and to avoid disputes. Using a Driver and Vehicle Licensing Agency (DVLA) link, monitors are then able to identify the owner of a vehicle and process the offence automatically.

Fire roll call

Health and safety is a key consideration for any business. Since retail environments involve multiple staff members with varying shift patterns, it can be difficult to keep track of all employees during an emergency. Fire roll call technology generates a report containing crucial information in relation to who is within the building and potentially where they are. This software operates via the access control smart card or fob that an employee uses to gain access to or exit a building. In the event of an emergency, the fire roll-call software alerts occupants to the emergency whilst simultaneously activating the report at a safe pre-determined remote point.

Please note: In order for the fire roll call software to effectively carry out its function, employees and visitors must always present their card or badge. The use of smart card or RFID controlled turnstiles can help in this situation.

Integrated security systems

For maximum security, retail environments can benefit from a fully integrated access control system with CCTV, intruder alarms, fire detection and building management systems. One way to attain this is by adopting the use of Internet Protocol (IP) technology, which allows these systems to communicate with each other to maximise their effectiveness.

Separate access control and intruder alarm systems, for example, could allow an employee to access an area that is set with an alarm.

However, unless the employee has the authority to unset the system, the access would result in a false alarm being activated – potentially causing panic in a retail environment. An effectively integrated system would recognise that the user does not have the authority to unset the system, so would not allow them in the area to begin with.

What else should you know when considering access control?

An initial risk assessment of an area can determine the level of security required and subsequently influence the access control system you choose. BSIA access control members and professional security consultancies can assist with this.

BSIA members are subject to rigorous checks before they are admitted into membership, meaning that you are selecting a quality company. Below are just some of the reasons why BSIA members can offer you peace of mind:

• They are independently inspected to the quality standard ISO 9001 with a UKAS accredited inspectorate

• They comply with relevant British and European Standards and codes of practice

• Are financially sound

• Professional

• Staff vetting has been conducted where necessary

• They are technically proficient and committed to quality training and development

• They are up-to-date with the latest developments in British and European policy and legislation

What legislation should you be aware of?

The Disability Discrimination Act was amended in 2005 and has a significant impact not only in terms of the design of new systems, but also means that many systems may need to be upgraded to ensure compliance and adequate, user friendly access to the building for all staff and visitors.

Other considerations to be aware of:

National minimum care standards

Health and Safety at Work Act

Occupiers Liability Act
Management of Health and Safety at Work Regulations.

Stop Unwanted Visitor in the School premises

School Security – Stop Unwanted Visitor in the premises

The security of any organization is the major concern, whether it be a corporate house, a manufacturing unit or schools and colleges. We have previously discussed about the security concern of the corporate houses and other work places. But through this write-up I will focus light upon the security concern of Schools and colleges. Recent happening across the globe have sent a thrill for the security of school going kids. So the safety of kids is more important for any authority. Thus, in the course of providing security for kids or students, technologically updated security system is a must.

The major components of security for schools and colleges are security cameras for video surveillance, access control of the movements of the visitors, and visitor management system for maintaining the records.

Video Surveillance: - Probably one of the most important aspect of the security of schools and colleges is a video surveillance through security cameras. The reason for this is simple, as to keep an eye at each and every corner of the campus through cameras to know what is happening on the campus ground or any classroom or in corridors. Security cameras prevent vandalism, bullying, criminal activity and sexual predators. With surveillance you will always have a record of near school property or any unwanted movements. Video surveillance will help to protect the facility from potential lawsuits as well as protect students from intruders. This whole thing is impossible if done physically.

Access Control Solution: - Another crucial and important feature that plays an important role in the security of the school premises. It does not require anyone to keep waltzing into the facility as access control lets you monitor who comes and goes. You can also do the setting in the installed access control with pin and password, which can restrict the unwanted access in the premises. It helps to reduce or stop the unauthorized movements in the arena of school. Also, you can manage the groups accordingly restricting the movement in unauthorized zones. Access Control Solution will add a deepness in the security.

Visitor Management System: - Each visitor can be managed through visitor management system, keeping his/her complete records, including the concerned person or student with whom they have to meet. As this software generates the gate pass of the visitor with his/her photograph. Until and unless all these processes are not done, the access cannot be granted to enter the premises. This helps a lot to stop the unwanted movements and entry of intruders.

The safety of school kids is the major concern for any authority or school administration. So keeping these things in mind, one should look after the security of school premises. Though this one time investment can be benefiting many lives, as nothing is precious than LIFE.

The safety of school kids is the major concern for any authority or school administration. So keeping these things in mind, one should look after the security of school premises. Though this one time investment can be benefiting many lives, as nothing is precious than LIFE.

Access Control Standards Revolution Now In Progress

Access Control Standards Revolution Now In Progress 

Access control provides the ability to control, monitor and restrict the movement of people, assets or vehicles, in, out and round a building.

Access control is essential for all businesses to protect people and assets and has the added benefit of being expanded from controlling, for example, a single entrance door, to a large integrated security network. There are also huge potentials in terms of integrating other systems, such as Time and Attendance, Visitor Management, ANPR, Fire, Intruder and CCTV.

Few specifications are seen more commonly in access control than UL 294. However, aside from seeing it in print, very few understand what it means. In this note, we break apart and define this spec, describing why it is a vital part of many Access RFPs.

A Standard Defined

The scope of UL 294 covers three aspects of Access Control systems: 

• Construction (Installation)
• Performance
• Operation

Essentially, the heart of UL 294 is a safety standard, where testing proves that system components can be assembled and operate reliably without hazard. In the case of access control, this is a step beyond just validating devices will not catch fire or spark - it attests that the system will not harm the safety or impede egress of those using the system.

In practical terms, this means doors will not accidentally stay locked and keep people in harm's way even during a malfunction. The UL standard subjects each labeled device to a range of testing designed to show the equipment meet relevant code expectations from:

• NEC (NFPA 99): Requirements that each component will not create a hazard either during (recommended) install or use (Sparking, Grounding)
• NFPA 72: Fire Code compliance, assures that controllers include interfaces with fire alarm/suppression systems 
• NFPA 101: System devices 

A UL 294 mark is a 'extra step' the vendor has taken to 'prove' their equipment is safe, and it stands as a 'mark of assurance' when included in buying specifications that dubious equipment will not be purchased.

The Mark

While Underwriter's Laboratories offer a range of 'UL Symbols' that can be interpreted to signify different standards. In the case of UL 294, the mark looks like this:

The UL 'Security Mark' applies only to products such as intrusion detectors, burglar alarms, access control, safes, and vaults.

Performance Tests

UL 294 includes several tests that evaluate how well devices withstand damaging environments. Devices are subjected to atypical electrical, environmental, and brute force situations, including:

• Variable Voltage
• Variable Ambients (Environment)
• Humidity
• Endurance (Ruggedness)
• Transients
• Corrosion
• Standby Power (Battery backup)
• Physical Attack Toughness

Tests are performed individually and are not 'layered' or 'stacked' simultaneously as might occur in the field. The exact methodology for each test depends on the device being tested, but the resulting grade is given in four levels of security performance with Level I (lowest level security equipment) to Level IV (highest level security equipment). 

Exclusions

However, not all parts and features of an Access platform fall under the scope of UL 294. Two areas excluded from the scope include:

• Headend Server/Database: The scope reads "The accuracy of logged data is not evaluated by this standard", and also "This standard does not apply to supplementary computer equipment that is not necessary for operation of the access control system..."
• Intrusion Detection: Again, the scope details "Where an access control equipment and/or system incorporates the features and functions of a burglar alarm control unit, the requirements of the Standard for Proprietary Burglar Alarm Units and Systems, UL 1076, shall also apply"

This is important to note when careless specs are written that "All Access Equipment shall be UL 294 Certified", because this is inherently not possible. There will be major functional aspects outside the scope of the standard.

Large System Adoption

Especially for larger systems, UL 294 is common, including devices from: Mercury Security, C*Cure, S2, Maxxess, Sargent, etc.

However, certification is done on a component basis, and there may be gaps in a brand's portfolio. If UL 294 compliance is required in a system, every hardware component must be checked for conformity, as there is no 'system' certification.

Systems and platform intended for smaller deployments (<100 doors) typically forego the certification, because it simply is not a purchasing driver for many non-enterprise customers.

Prime Use

Regardless of the 'safety' overtures, like UL certification for surveillance equipment, 294 is primarily used to exclude non-compliant systems from specifications. UL 294 evaluation is not mandatory for Access Equipment, and many vendors forego the cost of certification especially when their offerings are not well suited for larger government, institutional, and hospital verticals where 294 is commonly cited. 

Likewise, while the mark's testing 'proves' that devices are safe, the onus remains on the field technician to install them in the correct fashion to indeed live up to the certification.

Remember once UL certification has void OEM is not responsible for any health & safety incident of your premises. UL certification void due to repairing through unauthorized service provider....etc.

NFPA 101

While NFPA 101 is comprehensive, the most relevant passages for access control include:

• NFPA 101: 'Electrically Controlled Egress Doors' (2012: 7.2.1.5.6; 2009: 7.2.1.5.5)
• NFPA 101: 'Releasing Devices' ( 2012: 7.2.1.5.10-12; 2009, 2006, 2003: 7.2.1.5.9 -7.2.1.5.11)
• NFPA 101: 'Access Controlled Egress Doors' (7.2.1.6.2)

Specifically, requirements like Access Control Request to Exit (RTE), Exit Devices, and Delayed Egress foundationally conform to NFPA 101.

NFPA 72

In general, this code is the foundation of requirements that doors must release when fire alarms or smoke detectors go into alarm.

NFPA 80

Specifically, this code examines Fire Doors and how they are properly used for protection in a building. In many cases, these door types are also slated to become access-controlled openings, and the 'Locks or Latches (6.4.4)' section describes which modifications are permitted for access use without voiding their fire door ratings.

IBC: International Building Code

The IBC, published by the International Code Council, is essentially a guidebook for designing and engineering safe buildings.

If not observed directly as the authority, then whatever resulting codes that do have authority take guidance from the source.

• ·     IBC: 'Door Operations' (2012, 2009: 1008.1.9; 2006, 2003: 1008.1.8)
• ·       IBC: 'Sensor Release of Electrically Locked Egress Doors' (2012: 1008.1.9.8; 2009: 1008.1.4.4; 2006, 2003: 1008.1.3.4)
• ·       IBC: 'Electromagnetically Locked Egress Doors' (2012: 1008.1.9.9; 2009: 1008.1.9.8)