physical security query stockroom concern

pma111 used Ask the Experts™
This is more in the realms of physical security, but in our IT section (tier 1 and 2 support, so service desk right - desktop support type roles), we have an electronic key cabinet which stores the keys for endless other storage units, but specific to this questions, stores the keys to a stock room which is full of reasonable specification "yet to be allocated to users" laptops. My concern at present is anyone in the section has the PIN to the key cabinet, so everyone could in theory go and get the stock room key and steal a laptop. I am struggling to think of a compensating control/process to minimise this risk. In theory all staff need access to the cabinet for one reason or another, but perhaps not all users require access to the stock room. Any ideas welcome.

similar to the link below:
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
That special room, the stock room, should have a different key-lock system.
It should be with a card-like, a logging system.
Each time when someone goes in the stock room it should be logged as time and date and ID. Not an universal key, but individual ID (RFID) cards. Then you know exactly who went in/out and at what time/date.
Are the keys in the cabinet labeled, or just numbered?
If they are numbered and sit on numbered tags and referenced from a separate book or list to find what they open then you could 'hide' them by only issuing the relevant parts of that list to different individuals or sections.
Only those that should know are told that the stock room is key 25, and it is their responsibility not to share that information.
It's not secure, but is a step closer than having all the keys and their purpose available to everyone.
I mean, replace the existing door lock with something like this:
On Amazon, below the device, at recommendations, you may see various models.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

In Theory (IT)
agreed with viki2000 first comment, but if you do not want to change your current system then assign two key holder, and a logging system so each time they sign in and document what was removed from the room, or install cameras that records 24 hrs a day however with camera you will want to store videos for a month or reviewed and delete on a 24hr basis


>then assign two key holder

can you elaborate on that?
Natty GregIn Theory (IT)

Two people that are most trust worthy to hold the key to lock and unlock the system -whom will be held accountable for everything in the room.
You need two in case one is one vacation or sick. But they will be the go to person whenever anyone needs anything - in other words each person is watching each person because no one wants to be blamed for missing items.
Distinguished Expert 2018
Based on what you've mentioned, natty's idea actually sounds the most ideal. Minimizing the number of people who can even get into the room, but ensuring that there is a backup.

Otherwise, I'd suggest installing tying the door of the stock room to your existing access control system if you have one. That way you'd be able to audit who actually entered. If you actually have to badge yourself into a room, you're going to think more carefully about it because a record of entry will exist. Cameras in the vicinity would help as well.
In a nice world you would be able to trust the people you work with. Addition of levels of security remove the feeling of trust and create 'sides'. You are no longer a team all pulling together, but two sides, management and workers. The workers don't feel trusted so they start not to share what they are doing. Management feel they can't trust the workers and start to impose working conditions. More time is spent keeping to these rules and ensuring that everyone does, and job satisfaction and the feeling of teamwork gets forgotten.
You should be able to trust the people you work with.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial