One of the first principles of excellent locksmithing we all learned as apprentices is "good enough is always good enough." That's the idea that we can always add a second or even a fourth deadbolt to the door, but that doesn't make the door twice or four times as secure. As Mark Garfinkel, the...
To access the remainder of this piece of premium content, you must be registered with Locksmith Ledger. Already have an account? Login
Register in seconds by connecting with your preferred Social Network.
Complete the registration form.
One of the first principles of excellent locksmithing we all learned as apprentices is "good enough is always good enough." That's the idea that we can always add a second or even a fourth deadbolt to the door, but that doesn't make the door twice or four times as secure.
As Mark Garfinkel, the master locksmith I apprenticed under in Wilmington, Del., told me more than 20 years ago, "Give the customer everything she needs and only what she needs."
That phrase says a lot. It tells us to give as much value as we can, but not to add unnecessary costs and layers of security. Why? So we have a healthy profit margin, but still have a happy, safe, repeat customer.
However, I've noticed that "good enough" keeps changing. The line in the sand that marked how much to sell is drifting in a surprising direction. Today our customer doesn't just want a lock change on the office vestibule; he or she wants an access control system or an identity management system. And that change is signaling a major transformation of the future of locksmithing.
From the customer's point of view, the service provided by locksmiths simply is not good enough.One customer told me the entire problem. He has 300 doors in six buildings in two cities. Some of the doors use Schlage sectional keys. Others use HID card readers. In addition to the doors, he has guard desks at the front desks and parking lots. Employees and contractors have ID badges, separate key cards, and a ring of metal keys.
So in order to solve the customer's whole problem, we have to break it down into components. The employees and contractors are specific people with specific privileges. The customer has a lot of people doing a lot of things, so he needs an easy way to manage it. And at the end of the day or end of the month, he wants a report saying who did what, so that he can check to see that the security program is working as expected and fix problems.
The 4As of Security
Who are you? What may you do? How do we manage it? Is it working? These are the four fundamental questions of security and point to the four basic categories of security -- Authentication, Authorization, Administration, and Audit, The 4As.
Locksmiths are masters of Authorization, which is allowing and disallowing access. But few locksmiths deliver excellent solutions for authentication, administration or audit.
Authentication is the process of identifying the person who holds the key — essentially making sure people are who they say they are and are holding precisely the right keys.
Administration is the process of enrolling new people, assigning precise privileges or access rights, and un-enrolling or deprovisioning keys and privileges when the person's privileges change.
Audit is the process of collecting information about how the keys and locks and doors are actually being used. Is someone propping open the rear door? Does a change key unexpectedly operate a master-keyed cylinder in the north wing?
Some of you are reading this and thinking that you deliver some of those other As. But I think it's safe to say that most locksmiths install and key the locks, hand the keys to the person writing the check, and head for the bank.
Even if a very progressive locksmith offers advice and services around all four As, he still is likely not coordinating the enrollment and provisioning of the electronic key cards with the clipboards or software used at the guard desks, and with the database of employees in the human resources department.
But that is precisely the problem from the customer's point of view. He wants an authentication, authorization, administration and audit architecture for his entire business. In short, the number of customers who merely want new locks is being outpaced by customers who want the entire identity management system.
A History of Locksmithing 1939-2004
Transit authority locksmiths primarily establish and maintain master key systems while issuing keys and keeping related records.
Enroll and manage up to 90 users right at the reader using the hand-held programmer. Use with a door control module to create a stand-alone door access control system