Short answer: when locks, keys, fobs, gate controls or alarm-access details change, the keyholding arrangement should be formally handed over before the new arrangement is relied on. Confirm who authorised the change, exactly when it takes effect, which credentials are withdrawn or issued, whether the keyholder can reach every agreed area, how alarms are operated, which hazards or restrictions apply, and who accepts the completed test.
This is more than an exchange of keys. A new cylinder can make an old response set unusable; a valid fob may open the outer door but not the alarm-control area; and a changed code may never reach the approved responder. A controlled handover helps the client, monitoring provider and keyholding company work from the same current instructions.
This article provides general operational guidance for commercial premises. It is not locksmithing advice, an alarm-engineering instruction or a site-specific risk assessment. Keep codes, key references, routes and vulnerability details in controlled records rather than in an open email, public document or general guard log.
Treat every access change as a security change
Start with a named change owner and an effective time. Record why the arrangement is changing, who approved it and which part of the premises is affected. Typical triggers include a lost key, staff or contractor departure, a lock replacement, new tenant or managing agent, altered gate controls, a refurbished entrance, or a change to the alarm system.
Do not assume that “all locks changed” means every credential is obsolete. A site can contain mechanical keys, master keys, fobs, cards, PINs, gate transmitters, key safes and alarm credentials controlled by different people. List each affected access method by a safe internal identifier and owner, without copying the actual secret into the change summary.
The National Protective Security Authority notes that mechanical keys can be lost, stolen or copied and that loss of a master key can compromise a mastered suite. Its guidance on locks is a useful reminder that key management must be considered alongside the lock itself.
Confirm who may hold and use the credentials
Separate ownership, custody and authority. The client may own the lock and authorise access; the keyholding company may hold a sealed or controlled set; the alarm company may manage system credentials; and a facilities manager may maintain the approved contact list. State who can issue, copy, replace, return and withdraw each item.
Where contracted security work involves keeping or controlling access to a key or other device used to operate a lock, it may be a licensable keyholding activity. GOV.UK’s SIA licensing guidance explains when a licence is required and distinguishes keyholding from other licensable duties. If the response role also includes guarding or another activity, confirm the licence appropriate to the actual work rather than relying on a job title.
Ask for relevant evidence for the proposed assignment, but do not publish licence numbers, key identifiers or responder details. A licence check does not replace a site brief, safe system of work or agreement about what the responder is authorised to do.
Reconcile the old and new credential sets
Use a controlled register to show what was issued, returned, cancelled, destroyed or left active. For a mechanical key, record its safe identifier, custody status and the doors it is intended to serve. For an electronic credential, confirm its identity, permissions, activation date and expiry or withdrawal status. For shared codes, record that an authorised change occurred without placing the code in the ordinary handover record.
If a key or credential is missing, do not mark the handover complete merely because a replacement exists. Record the unresolved item, assess what it could still operate and assign a decision to the responsible person. That decision may involve cancellation, reprogramming, re-keying or another control chosen for the real site.
Our physical access-control offboarding checklist covers the related task of removing access when staff or contractors leave. The keyholding handover should then confirm that the responder’s approved access still works after those removals.
Update alarm and response instructions together
A new key set is not useful if the responder cannot correctly operate the alarm or reach the agreed control point. Confirm which monitoring centre or contact initiates a call-out, how the responder is identified, which areas they may enter, what information can be shared, and who must be contacted if access fails.
Keep technical configuration with the responsible alarm or access-control contractor. A keyholder may be authorised to set, unset, silence or reset a system under the agreed instructions, but that does not automatically authorise programming changes, fault repair or bypassing a detector. Define the boundary before the handover test.
Update the alarm receiving centre, client contact list and any insurer- or police-response arrangement through the proper provider. Do not assume that changing an internal spreadsheet updates the records held by an external monitoring service.
Check lone-working and site hazards
A responder may attend an unfamiliar or unoccupied site alone, sometimes after an alarm activation or reported damage. The handover should identify foreseeable hazards, restricted areas, utilities or plant that require special controls, construction activity, animals on site and any rule that limits entry. Do not put a keyholder into the role of testing an unknown hazard.
HSE guidance says employers must manage risks before people work alone, including training, supervision, monitoring, keeping in touch and responding to an incident. Its lone-working risk guidance should inform the response plan. The instructions should also state when the responder must stop, withdraw and seek assistance.
Agree a check-in and completion method appropriate to the assignment. A reliable close-out is especially important if the visit takes place outside normal hours. The responder should not be expected to investigate beyond the agreed scope simply because they can open the door.
Test the real response route
Complete a controlled test before the old arrangement is withdrawn where practical. Use the normal arrival route and confirm that the approved credential opens every agreed access point, the responder can reach the alarm-control area, lighting and communication are adequate, and the system can be operated under the authorised procedure.
Testing should not expose live codes or create a false alarm. Coordinate with the alarm or monitoring provider and clearly identify whether the exercise is a credential test, an alarm test or both. If a fault appears, record it and assign it to the competent contractor rather than improvising a workaround.
The acceptance record should name the tester, date and time, access points tested, result, exceptions, actions and person accepting the handover. It should not reproduce the actual code, key-safe combination or detailed route.
Control electronic records and access logs
Electronic access systems can create logs linked to identifiable people. Decide who may review those records, why they are retained and how long they are needed. The ICO’s system and network security guidance recommends documented logging requirements, protection of logs and checking that recorded information complies with data minimisation.
A handover does not justify exporting the full access history to every party involved. Give each role the information it needs, preserve relevant records for an open incident through the authorised process, and keep credentials separate from routine activity reports.
Keyholding changeover checklist
- Name the client change owner and effective time.
- List affected locks, doors, gates, fobs and alarm-access methods by safe identifier.
- Confirm who owns, issues, copies, returns and withdraws each credential.
- Reconcile old, new, missing and cancelled items.
- Verify the responder’s authority and relevant licensing for the actual duties.
- Update monitoring, alarm and escalation contacts through the correct provider.
- Brief foreseeable hazards, restricted areas and lone-working controls.
- Test the normal access and alarm route without exposing secret information.
- Record exceptions, owners and completion dates.
- Have an authorised person accept the completed handover.
- Store keys, codes, logs and response instructions in the approved controlled system.
A concise handover is most useful when it proves that the current arrangement works and makes unresolved items visible. It should never become a convenient copy of every secret needed to enter the site.
Discuss keyholding and commercial-site response
For a commercial keyholding enquiry, provide the site postcode, operating hours, alarm and access-control arrangement, expected response duties, foreseeable site hazards and the date any access change takes effect. Review the current keyholding service information and use the contact page to outline the requirement. Availability, scope and feasibility are considered for the individual site.
Do not include alarm codes, key-safe combinations, master-key references, hidden access routes or private vulnerability details in an initial enquiry.
Featured image: an illustrative security officer holding keys and a torch outside a commercial building from the site’s media library. It does not depict K9 Security Services personnel, a client site, an actual response or a completed assignment.