This is more in the realms of physical security, but in our IT section (tier 1 and 2 support, so service desk right - desktop support type roles), we have an electronic key cabinet which stores the keys for endless other storage units, but specific to this questions, stores the keys to a stock room which is full of reasonable specification "yet to be allocated to users" laptops. My concern at present is anyone in the section has the PIN to the key cabinet, so everyone could in theory go and get the stock room key and steal a laptop. I am struggling to think of a compensating control/process to minimise this risk. In theory all staff need access to the cabinet for one reason or another, but perhaps not all users require access to the stock room. Any ideas welcome.
similar to the link below: