Hospital Key Control After Department Turnover
A 350-bed hospital has a manual key cabinet in the security office. The cabinet contains 1,850 keys on hooks, indexed by department. Over 18 months, three department managers retired, 40 keys were returned without tags, and 12 keys are listed as 'lost' but still active. The pharmacy, operating room, and behavioral health unit use the same restricted keyway as general administration. The hospital is preparing for a Joint Commission survey and a new electronic access control system in 9 months. The security director wants to avoid a full rekey before the EAC system is installed. The CFO asks for a cost-effective plan.
1. Assess the risk and prioritize corrective action.
Read the worked answer
The highest risk is not the total count of keys; it is the combination of lost-but-active keys, untagged returns, and a shared keyway across pharmacy, operating room, and behavioral health. A lost key that opens pharmacy or the OR is an immediate controlled-substance and patient-safety risk. The 40 untagged keys cannot be verified, so treat them as compromised until matched. Do not wait nine months for the EAC system. Prioritize: first, rekey or replace cylinders in pharmacy, the OR, behavioral health, and any door opened by the 12 lost keys; second, audit the 40 untagged keys against issue records; third, secure the key cabinet and start signed issuance; fourth, separate high-risk keyways. General administration can be phased. The Joint Commission survey will look for a key-control policy, logs, and evidence that lost keys were addressed.
2. Recommend interim controls and permanent changes.
Read the worked answer
Interim: change the key cabinet lock, assign a key control officer, inventory every hook, tag unidentified keys temporarily, and require signed return of all keys. Rekey high-risk areas first and issue new keys with serial numbers. Use lockable key boxes or electronic key cabinets for high-risk keys. Permanent: adopt a written key-control policy with authorization levels, issuance and return receipts, annual audit, lost-key reporting, and disciplinary consequences. Move high-risk doors to electronic access with audit trails, but keep mechanical override keys controlled. Use a separate keyway for pharmacy, the OR, and behavioral health, and do not let one restricted keyway cover all departments. Consider keyless access for general administration after the EAC system is operating.
3. How should the hospital integrate the new EAC system without creating new key-control or life-safety gaps?
Read the worked answer
EAC does not eliminate mechanical keys; it adds a second path. Decide which doors are fail-safe versus fail-secure and ensure life-safety release. Keep override keys in a secure cabinet with audit, and do not issue one override that opens all high-risk doors. Use door position switches, request-to-exit, and alarm monitoring. During design, map the existing key hierarchy to access levels so you do not create a new master-equivalent card. Test failover and power loss. Train staff that propping doors defeats both systems. Schedule a parallel run and retire mechanical keys only after the EAC system is proven and the AHJ accepts the life-safety sequence.