Table of Contents
Every building requires some form of access control as a way of increasing security and controlling who can go where and when.
A traditional door entry system consists of a door with a lock and key, but with the advancement in technology, we now have access control systems that guarantee security, allow remote access, and prioritise user experience.
From main entrance doors to other points of access inside the building, everything must be secured and managed properly, and the best way to do it is through installing the best access control systems.
There are different types of access control systems that work in different ways to restrict access within your property. They include:
- Discretionary Access Control (DAC)
- Mandatory Access Control (MAC)
- Role-Based Access Control (RBAC)
In this article, we will focus on Discretionary Access Control (DAC), its advantages and disadvantages, uses, examples, and much more. Read on to find out:
WHAT IS ACCESS CONTROL?
Before we talk about the different types of access control and how they differ from each other, let’s look at how access control works and how it can benefit you and your property.
Access control is a system that allows you to understand how your property is being used. It does this by tracking when individuals are entering and leaving specific areas and locations.
One of the first steps in securing your property against threats such as burglaries, theft, and intrusions is to prevent unauthorised individuals from accessing it. It is very important to know who is in your building and when, and that is where access control systems come into play.
While traditional locks and metal keys have been used for centuries for the same purpose of keeping intruders away, they come with their fair share of drawbacks such as an increased likelihood of getting stolen or lost, ability to be easily copied, difficult to manage, and the absence of remote capabilities.
Here is how access control systems work:
- The user’s credentials are presented to a reader on the system. The credentials can be in the form of a code, pin, card, fob, biometrics, or mobile-based access.
- The credentials are forwarded to the access control panel to be verified.
- The request is processed by the control panel by comparing the credentials against predefined access permissions in the database.
- If the credentials do not have access permission for the area, access is denied and the door remains locked.
- If the credentials have access permission for the area, access is granted and the control panel sends a relay to the system to unlock the door.
- Both the access rejections and acceptances are logged into the system.
BENEFITS OF ACCESS CONTROL
Here are some of the reasons why access control systems are a great option for all kinds of properties in terms of safety, security, and better control and management:
No need for traditional keys
The basis of access control systems is that they eliminate the need for traditional keys and use electronic locks and different authentication methods.
Keys can often get lost or misplaced, creating a potential security risk every time it happens. Also, if there are several doors within a building, it could mean multiple keys for each individual which can be such a hassle to carry and manage.
Track who enters and leaves
By tracking who enters and leaves the building, you can keep a better check on your employees and visitors, and whether everyone is working in their designated spaces.
This could also help in case an incident, accident, or theft occurs, as you would easily be able to identify who was in the area when it happened.
Reduced theft
By controlling and restricting access within a building, you make sure that no unauthorised individual is allowed to enter and burglars and intruders will find it incredibly difficult to break in and commit a theft.
Since the system tracks all movement in and out of the doors and logs in both successful as well as failed attempts to unlock them, you can be alerted every time an unauthorised individual tries to make their way in.
Reduced costs
In addition to providing great security benefits, access control systems can also help reduce your overall costs. This is because of not having to replace and supply keys and locks to users in order to keep the property secure, especially for large-scale businesses with multiple floors and locations and thousands of employees.
With certain access control systems, such as those using codes, biometrics, and mobile access, you can manage permissions with a simple click from anywhere in the world.
Also, access control systems can be integrated with other systems such as lighting and heating to automatically turn off when the area is not in use, thus saving quite a lot on energy bills.
Improved employee experience
By stopping unwanted visitors from entering your premises, you will be able to significantly increase the security of your site and the safety of all those in it.
This creates a safer environment where employees feel cared for and can access various areas of the workplace without any fear. It also improves overall employee satisfaction and results in a much more productive experience.
TYPES OF ACCESS CONTROL
There are three main types of access control that you can use on your premises, all of which focus on authentication and permissions.
Depending on the nature of your property and your security needs and requirements, you can opt for either one to achieve your goals.
Discretionary Access Control (DAC)
Discretionary Access Control (DAC) allows you to set permissions as you please, to whomever you want. The end-user has the means to determine the security level settings by giving access to others, such as by lending them their key card or telling them their code.
Although convenient and easy to manage, DAC is suitable only for small premises with one or two entry points. It has the potential to introduce both physical and cybersecurity threats and is unsuitable for large premises or high-risk properties with sensitive information and where access must be delegated and closely monitored.
Mandatory Access Control (MAC)
Mandatory Access Control (MAC) is generally considered the most secure option used in organisations with an increased emphasis on security and data confidentiality, such as military and scientific sites.
It has strict protocols when it comes to access permissions, where only the owner and system administrator are given access control, not the end-user.
Role-Based Access Control (RBAC)
Role-Based Access Control (RBAC) is one of the most commonly used solutions in private organisations and offers greater security, flexibility, and control.
It is more restrictive than DAC and there are more options to grant the individual users of the system varying levels of access based on their role in the household or organisation.
Access is determined by the system administrator based on the user’s job responsibility and limitations. For instance, certain high-security areas of the property can only be accessible to those with certain access permissions.
DISCRETIONARY ACCESS CONTROL (DAC): DEFINITION
In Discretionary Access Control (DAC), the owner of the property can decide on the number of people who will have access to a specific location, and each access control point has a list of authorised users.
What happens is that every time a code is entered, a key card is swiped, or a fingerprint is scanned, the system checks it against the list and grants or denies access based on it.
These systems are incredibly flexible and allow the highest number of allowances when compared to other types of access control.
However, since they are so flexible, they are not the most secure. This is because since one person has total control over the system, they might grant access to someone who shouldn’t have it.
Also, since DAC systems allow the business owners, rather than the security experts, to control the access rights and permissions for the users, they are required to have full knowledge of security policies as well as best practices.
Discretionary Access Control is best suited for properties that require the most flexibility and ease of use, and for organisations where a high level of security is not required. Some common use-cases include start-ups, small businesses, and schools and coaching centres.
DISCRETIONARY ACCESS CONTROL (DAC): ADVANTAGES AND DISADVANTAGES
Following are the advantages of using discretionary access control:
- User-friendliness: the user interface is easy to work with and operate and it is very easy to manage data and permissions with this system.
- Flexibility: as mentioned earlier, discretionary access control is extremely flexible, allowing for the highest number of allowances and the ability to easily grant access to others as well.
- Minimal maintenance: these systems do not require regular upkeep and maintenance and put less responsibility on the administration to manage them.
Following are the disadvantages of using discretionary access control:
- Less secure: since access can easily be given from one person to another, DAC is not the most secure system and information can be leaked outside the organisation.
- Difficult to keep track: since DAC is not centralised, the only way to monitor data flow and access permissions is by going through the ACL (access control list). This, however, can only be done in the case of a small organisation with few employees.
HOW TO CHOOSE THE RIGHT ACCESS CONTROL?
When it comes to choosing the right access control, there is a no “one size fits all” approach. The selection depends on several factors and you need to choose one that suits your unique needs and requirements.
If you are looking for flexibility and ease of use, go for a Discretionary Access Control (DAC) system. For maximum security, a Mandatory Access Control (MAC) system would be best. If you want a balance of security and ease of use, you may consider Role-Based Access Control (RBAC).
Some factors to consider include the nature of your property, the number of users on the system, and the existing security procedures within the organisation. Here are a few basic questions that you must ask yourself before making the decision:
Who will manage the system?
Before investing in an access control system for your property, the owners and managers need to decide who will manage the system and help put operational policies into place. This responsibility must cover all aspects of the system including protocols to follow when hiring recruits, firing employees, and activating and deactivating user access privileges.
How many areas need access control?
Identifying the areas that need access control is necessary since it would determine the size and complexity of the system. Some areas may be more high-risk than others and require added security in the form of two-factor authentication.
How many users are on the system?
The number of users is an important aspect to consider since it would set the foundation for the type of system along with the level of security required. For smaller organisations with few employees, a DAC system would be a good option, whereas a larger organisation with many users would benefit more from an RBAC system.
What level of security is required?
Determining the level of security is a crucial part of choosing the right access control type since they all differ in terms of the level of control, management, and strictness. A MAC system would be best suited for a high-risk, high-security property due to its stringent processes.
Which authentication method would work best?
There are several authentication methods for access control systems, including access cards, key fobs, keypads, biometrics, and mobile access control. Deciding which one is suitable for your needs depends on the level of security you require, the size of the property, and the number of users.
Which functions and integrations are required?
Access control systems come with a range of functions such as access reporting, real-time notifications, and remote monitoring via computer or mobile. You must select the features your property requires and have a custom-made solution for your needs. Access control can also be integrated with other security systems such as burglar alarms, CCTV systems, and fire alarms to provide a more comprehensive security solution.
How scalable is the system?
It’s always good to think ahead. When choosing an access control system, it is best to think about future growth and business outlook for the next 5 to 10 years. A flexible and scalable system would allow the system to accommodate growth in terms of the property size and number of users.
CONTACT CALDER SECURITY
Calder Security provides complete access control system services for homes and businesses that include professional installation, maintenance, and repair.
We’ve been working in the security industry since 1976 and partner with only the best brands. Our MLA approved locksmiths can advise you on the best type of system for your property by helping you assess your security needs and requirements.
Because an access control system operates the locking and unlocking mechanism of your door, installation must be completed properly by someone with detailed knowledge of how these systems work.
We are SSAIB approved installers and can work with all types of access control systems including intercom, proximity fob, card swipe, and keypad. We also offer biometric systems that use fingerprints or retina scans.
Access control systems are very reliable and will last a long time. But like any technology, they require periodic maintenance to continue working as they should.
We conduct annual servicing to keep your system working well and give it a full check including checking the battery strength, power supply, and connections. That way you won’t get any nasty surprises further down the line.
While generally very reliable, sometimes problems may occur with access control systems that can potentially compromise the security of your property.
Common issues include simple wear and tear or faults with the power supply or batteries, and to preserve the security of your property, you need to get the problems fixed ASAP.
We operate a 24-hour emergency service run by qualified security specialist engineers who understand access systems and can resolve issues efficiently and effectively.
Contact us here or call us on 0800 612 9799 for a quick consultation and quote for our state-of-the-art access control systems that are right for your property!
Photo by Viktor Forgacs on Unsplash