What is the correct procedure when a key or access device is lost?

What is the correct procedure when a key or access device is lost?

• A. Document incident after the end of shift and ignore immediate risk.
• B. Notify only the inmate population.
• C. Reissue an identical credential without updating access controls.
• D. Immediately secure affected area, invalidate credentials or rekey, log incident, replace device.

Answer: (D)

When a key or access device is lost, the priority is to stop any potential unauthorized entry and restore secure control quickly. The best procedure is to immediately secure the affected area, invalidate the lost credentials or rekey the access controls, log the incident for accountability, and replace the device. This sequence directly reduces risk, prevents misuse, and provides an auditable record of what happened and what was done to fix it. Waiting until later to address it, only telling inmates, or reissuing the same credential without updating access controls would leave the system exposed to unauthorized access.

When a key or access device is lost, the priority is to stop any potential unauthorized entry and restore secure control quickly. The best procedure is to immediately secure the affected area, invalidate the lost credentials or rekey the access controls, log the incident for accountability, and replace the device. This sequence directly reduces risk, prevents misuse, and provides an auditable record of what happened and what was done to fix it. Waiting until later to address it, only telling inmates, or reissuing the same credential without updating access controls would leave the system exposed to unauthorized access.