Challenge

A multi-story site secured by shared keys.

The organization occupied a multi-story facility with shared workspaces, department offices, restricted operational areas, and project-sensitive rooms. Access control was inconsistent and relied on manual key management — creating both security risk and administrative burden.

Key challenges

  • No centralized access management
  • Shared keys between employees
  • Limited visibility into access events
  • No way to restrict access by department
  • No project-specific security zones
  • Manual onboarding and offboarding
  • Security risk from lost or duplicated keys

Solution

Centralized, identity-based access control.

Working alongside the client’s security service, we designed and implemented a centralized identity-based access control system that unified employees, departments, and security zones on a single management platform.

Permissions were structured using hierarchical security groups, enabling distinct access levels for:

  • Common building areas
  • Floor-specific locations
  • Department-restricted zones
  • Project-specific rooms
  • Executive and administrative offices
  • Technical infrastructure rooms

The platform introduced badge-based authentication, centralized access logging, automated permission assignment, and role-based access management — significantly improving physical security while reducing the overhead of onboarding, transfers, and offboarding.

Results

Controlled, auditable physical access.

  • Centralized control over physical access across the building
  • Eliminated reliance on shared and duplicated keys
  • Department- and project-level access segmentation
  • Full visibility through centralized access logging and audit trails
  • Automated onboarding, transfers, and immediate offboarding
  • Reduced security risk and administrative overhead

Technical specifications

What was put in place.

Identity management

  • Centralized access control platform
  • Employee identity database
  • Role-based access control (RBAC)
  • Department-based security groups

Security infrastructure

  • RFID / NFC access cards
  • Electronic door controllers
  • Secure access readers
  • Building security zones

Access segmentation

  • Public areas
  • Department areas
  • Project-specific areas
  • Executive offices
  • Data center / server rooms

Monitoring & auditing

  • Access event logging
  • Security reports
  • Audit trails
  • Real-time access monitoring

Operational features

  • Automated user provisioning
  • Immediate access revocation
  • Visitor access management
  • Temporary project permissions
AuthorDmytro DoianovClientConfidential / NDADateMay, 2019Share