Free access control system inspection checklist

• The MapTrack access control system inspection checklist contains 22 checks across 8 sections. Sections covered: Card Readers, Biometric Devices, Electric Locks, Door Contacts, Controller Panel, Wiring, Software & Database, Emergency Override.
• Card readers and input devices: test each card reader, biometric scanner and keypad for responsiveness, verify credentials grant and deny access correctly, check for physical damage or tampering.
• Electric locks: test magnetic lock holding force (should meet the rated specification, typically 270 kg to 545 kg), test electric strike operation, verify fail-safe or fail-secure configuration matches the fire and security design intent.
• Door hardware and sensors: inspect door closers for correct operation and closing speed, check door position sensors (reed switches or contacts) for correct state indication, test request-to-exit (REX) devices and push-to-exit buttons.

Learn more about maintenance and work orders in MapTrack.

• Security assurance: systematic inspection of every controlled opening confirms that all readers, locks and sensors are functioning correctly, preventing unauthorised access through failed components.
• Audit trail integrity: verifying that the system is logging all access events accurately supports compliance obligations, incident investigations and forensic analysis.
• Proactive fault detection: identifying degraded card readers, weak magnetic locks, failing door sensors and low backup batteries before they cause security breaches or lockout events.
• Credential hygiene: reviewing the active credential database during inspections identifies accounts for former staff, expired visitors and unused credentials that represent security vulnerabilities.
• Integration reliability: testing the integration between access control, CCTV and alarm systems ensures that a door forced open triggers the correct camera recording and alarm notification.
• Compliance support: documented inspection records demonstrate due diligence for insurance, workplace health and safety obligations, data centre certification (e.g. ISO 27001) and industry-specific security requirements.

• Card readers and input devices: test each card reader, biometric scanner and keypad for responsiveness, verify credentials grant and deny access correctly, check for physical damage or tampering.
• Electric locks: test magnetic lock holding force (should meet the rated specification, typically 270 kg to 545 kg), test electric strike operation, verify fail-safe or fail-secure configuration matches the fire and security design intent.
• Door hardware and sensors: inspect door closers for correct operation and closing speed, check door position sensors (reed switches or contacts) for correct state indication, test request-to-exit (REX) devices and push-to-exit buttons.
• Access control panels: verify each panel is powered on, communicating with the head-end server, and has current firmware, check panel battery backup voltage, inspect panel enclosure for tamper evidence.
• System software and credentials: verify the access control software is running correctly, review the active credential database for expired or unused accounts, confirm access schedules and time zones are correctly configured.
• Audit logs: verify that access events (granted, denied, door forced, door held) are being logged correctly with timestamps, confirm log storage meets the retention requirement.
• Cabling and network: inspect all data, power and lock wiring for damage, loose connections and correct labelling, verify network connectivity between panels and the head-end server.
• Power supply and backup: test main power supply output, verify battery backup engages when mains power is interrupted, measure backup battery voltage under load, check UPS runtime capacity.
• Integration: test integration with CCTV (verify camera triggers on access events), test integration with alarm system (verify alarm on door forced or door held open), test fire alarm integration (verify locks release on fire alarm activation).

1. Prepare the inspection by gathering the access control system layout, door schedule, credential policy and the previous inspection report. Notify security and building management of the inspection.

   Obtain the system documentation showing all controlled openings, their lock types, reader types and panel assignments. Review the previous inspection report for outstanding defects. Notify the security control room and building management that inspections will involve testing locks, alarms and fire integration, which may trigger alerts. Carry test credentials (valid and invalid) and any tools required for panel access.

2. Test each controlled opening: present a valid credential to the reader, verify the lock releases and the door opens, then present an invalid credential and verify access is denied. Check door closer operation and sensor state.

   At each controlled opening, present a valid test credential and verify the reader indicates acceptance (LED, beep), the lock releases within 1 to 2 seconds, and the door opens freely. Present an invalid or expired credential and verify access is denied. Check that the door closer pulls the door fully closed and latched within the specified time (typically 5 to 10 seconds). Verify the door position sensor correctly reports open and closed states on the system. Test the REX device and confirm it releases the lock from inside.

3. Inspect the physical condition of each reader, lock, door frame and hardware. Check for tamper evidence, damage, corrosion or loose mounting.

   Inspect each card reader or biometric scanner for cracks, loose mounting screws, exposed wiring or signs of tampering (pry marks, adhesive residue from skimming devices). Check magnetic lock mounting plates and armature plates for alignment and air gap. Inspect electric strikes for debris or corrosion in the keeper. Check door frames for warping, damaged weather seals or gaps that could allow the door to be bypassed. Inspect hinges for wear, loose pins or modifications.

4. Inspect each access control panel: verify power, communication status, firmware version and battery backup. Test battery backup by simulating mains power interruption.

   Open each panel enclosure (verify tamper switch triggers an alert) and inspect for signs of moisture, rodent damage or loose wiring. Verify the panel status LEDs indicate normal operation and communication with the head-end server. Record the firmware version and note any panels requiring updates. Measure the backup battery voltage (typically 12V or 24V sealed lead-acid) and compare against the minimum threshold. Disconnect mains power briefly to verify the panel switches to battery backup without interruption. Reconnect mains and confirm the panel resumes normal operation.

5. Review system software, credential database and audit logs. Test CCTV and alarm integration. Test fire alarm release integration. Document all findings and create corrective actions.

   Log in to the access control management software and verify the system is operating normally with all panels online. Review the active credential database for accounts belonging to former staff, expired visitor passes and dormant credentials. Verify access schedules and time zones are correctly configured. Check audit logs for completeness and confirm the retention period meets organisational requirements. Test CCTV integration by triggering an access event and confirming the associated camera records. Test alarm integration by simulating a door-forced event. Test fire alarm integration by coordinating with the fire system to verify controlled locks release on alarm activation. Document all findings and create corrective action items for failures.

Practical answers about the form, record keeping and using MapTrack.

This form is a starting point. Check the current requirements that apply to your equipment, work and location. The form alone does not establish compliance.

• AS 4178 (Access Control - Design and installation)
• AS 1670.1 (Fire detection, warning, control and intercom systems)
• BCA/NCC (Building Code of Australia - egress requirements for fail-safe locks)
• Privacy Act 1988 (Cth) - handling of biometric and access log data

MapTrack publishes this template. The linked authorities publish their own guidance; they haven't endorsed this form.

• CCTV system inspection checklist
• Facility maintenance checklist
• Building maintenance checklist
• Fire extinguisher inspection checklist
• Maintenance management
• Asset tracking
• Facility management
• Pricing