Ask a board how many people can open the front door, the boiler room, the roof hatch and the electrical closet, and you will usually get a long pause and then a guess. The honest answer in most associations is: more people than anyone knows. Former trustees who never returned their keys. A landscaper from three seasons ago. A plumber's apprentice given the lockbox code for one job in 2023. Fobs belonging to tenants who moved out two leases ago. The code on the side door that has not changed since it was installed. None of that is dramatic until something goes missing from the bike room, a fire door is found propped open, or an insurer asks after a loss who had access. Then it is the whole story. Access control is one of the few security measures a volunteer board fully controls, and it costs very little. Here is the sequence. Start with an inventory. List every way into every part of the building: exterior doors, garage, mechanical rooms, electrical and telecom closets, roof access, storage, laundry, the trash room, the mail room. For each one, record what opens it - a key, a fob, a code, a lockbox - and who currently has that key, fob or code. The last column is where most associations fail, because nobody kept a record. That tells you what you need to build. Keep a key and fob log from now on. Each key or fob gets a number. The log shows who holds it, when it was issued, who authorized it, and when it came back. A signature on issue is enough. The point is that there is a record. Know which keys are master keys and treat them differently. A master key that opens every common door is the most valuable object in the building. Limit how many exist, record every holder by name, and consider a restricted keyway, which prevents copies from being cut at a hardware store. Retrieve access when people leave. Build it into the departure steps for trustees, managers and vendors: keys and fobs back, codes changed, portal access removed. Ex-trustees are the most common gap. Nobody wants to ask a neighbor for their key back, so nobody does.