Re: Physical Key Management

["Kurtz, Eric" <kurtz () SUSQU EDU>]

+1 for Morse Watchman Keywatcher
Can use with HID cards for access
Can alarm for overdue keys

https://www.morsewatchmans.com/product/keywatcher


Eric Kurtz
Senior Systems Engineer
Office of Information Technology
Susquehanna University
514 University Avenue
Selinsgrove, PA 17870-1164

kurtz () susqu edu<mailto:kurtz () susqu edu>

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Kimmitt, Jonathan
Sent: Friday, August 16, 2019 10:20 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Physical Key Management

Hi all,

  I'm curious on what people have had success with for physical key management?

Specifically the master & grandmaster keys that the IT department uses to get into buildings, offices,  and residential 
areas, so they may work on the network, computers, etc.?

We have tried a few things in the past, and are looking for something new:


  *   Check out system at your Campus Security/Facilities department?  (Staff are extremely resistant to this)
  *   Physical key management lock box (that only allows each person only their assigned key)  (This can be very 
expensive)
  *   Regular lockbox (the hanging tag type, that anybody could take anything from the box)?   (Our current setup)

Specifically, we have concerns on a couple of issues....


  1.  Technicians/engineers taking keys home
  2.  Technicians taking keys that are not assigned to them
  3.  Technicians taking keys that have greater access than they are approved for

Is this an issue at other institutions?  Has anybody found a good balance between security and convenience?

-Jonathan


~
Jonathan Kimmitt
CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743
jonathan-kimmitt () utulsa edu



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ckurtz%40SUSQU.EDU%7Cbbc5e8bd418843209a8008d72254e18e%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637015620283201704&sdata=o%2BwtXtkR%2B9BwRQFtp95LfYT4nqdgn7JtN%2Bl5I1krKac%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community