Access Control Systems for Utah Businesses: Keycards, Fobs, and Smart Locks Compared

The Problem With Traditional Keys

If your Utah business still relies on traditional metal keys, consider the risks you are carrying. When an employee leaves, do you rekey the locks? Every lock they had access to? Do you even know which keys they had? When a key is lost, do you know who found it — or if anyone did? Can you tell who entered the building at 11 PM last Tuesday? Traditional keys offer zero visibility, zero audit trail, and zero ability to revoke access instantly. Rekeying a commercial building can cost hundreds to thousands of dollars — and most businesses do not do it every time an employee departs. The result is a growing population of uncontrolled keys in circulation, any one of which provides physical access to your business, your equipment, and your data. Modern access control systems solve every one of these problems. At Brivy IT, we design and install physical security systems for Utah businesses that integrate access control, surveillance, and monitoring into a single managed platform.

Types of Access Control Credentials

Before selecting a system, you need to understand the credential options available. Each has strengths and appropriate use cases. Proximity cards (keycards). The traditional standard for commercial access control. Credit-card-sized plastic cards with an embedded RFID chip. Users hold or tap the card near a reader to unlock the door. Keycards are inexpensive to produce, easy to issue and revoke, and familiar to most employees. The downside: they can be shared, lost, or cloned (older 125 kHz cards are particularly vulnerable to cloning). Modern deployments should use encrypted smart cards (13.56 MHz, such as MIFARE DESFire or iCLASS SE) that resist cloning. Key fobs. Functionally identical to keycards but in a smaller, keychain-mounted form factor. Some employees prefer fobs because they attach to existing key rings and are harder to forget. The same technology and security considerations apply — choose encrypted fobs over legacy proximity formats. Mobile credentials. The fastest-growing segment in access control. Employees use their smartphone (via Bluetooth Low Energy or NFC) to unlock doors. The credential is stored in a secure enclave on the phone, making it significantly harder to clone than a physical card. Mobile credentials can be issued and revoked remotely in seconds — no physical card to print or mail. For Utah businesses with remote or distributed teams, this is a meaningful operational advantage. The requirement: employees need a compatible smartphone, and the access control system must support mobile credentials. PIN codes. A numeric code entered on a keypad. PINs are simple and require no physical credential. The drawback: PINs can be shared, observed (shoulder surfing), and cannot identify which specific person entered. PINs are best used as a second factor alongside a card or mobile credential, not as a standalone method. Biometric readers. Fingerprint scanners, facial recognition, and iris scanners provide the strongest identity verification — the credential is the person. Biometric readers are appropriate for high-security areas: server rooms, pharmaceutical storage, financial vaults, executive offices. Cost is higher, and privacy considerations require clear employee communication and policy documentation. Biometrics work best as a second factor combined with a card or mobile credential.

Cloud-Managed vs. On-Premise Systems

This is the most important architectural decision in your access control deployment. On-premise systems store all data and run all management software on a local server at your facility. The access control panel, user database, and audit logs all live on hardware you own and maintain. This was the standard approach for decades, and it still has valid use cases — primarily in environments with strict data residency requirements or no internet connectivity. The drawbacks are significant: you need to maintain the server, back it up, patch it, and replace it when it fails. Remote management is limited or requires VPN access. Scaling to multiple locations means deploying and maintaining servers at each site. Software updates require manual intervention. Cloud-managed systems store configuration and audit data in a secure cloud platform. Management is performed through a web browser or mobile app from anywhere. Firmware and software updates are pushed automatically. Multi-site management is seamless — one dashboard for all locations. Scaling means adding controllers and readers, not deploying servers. For most Utah businesses, cloud-managed access control is the right choice. The total cost of ownership is lower, the management burden is dramatically reduced, and the feature set is typically richer. Systems from manufacturers like Verkada, Openpath (now Motorola), and Brivo offer cloud-native architectures with strong security and reliability.

Integration With Camera Systems

Access control becomes significantly more powerful when integrated with video surveillance. Here is what that integration looks like in practice: When someone badges into the building at 6 AM on a Saturday, the access control system logs the event (who, which door, what time) and triggers the nearest camera to capture video of the entry. Your security dashboard shows the access log entry alongside the corresponding video clip. You can verify that the person who used the credential is actually the person it was issued to. When an unauthorized access attempt occurs — a denied credential, a door forced open, a door held open beyond the timeout — the system generates an alert and captures video evidence automatically. At Brivy IT, we deploy integrated access control and camera systems that provide this unified view. The combination of “who went where when” data from access control and visual verification from cameras creates a physical security layer that is substantially stronger than either system alone.

Audit Trails: The Feature You Do Not Know You Need

Every modern access control system generates detailed audit logs: which credential was used, at which door, at what time, and whether access was granted or denied. This data serves multiple purposes: Security investigations. When an incident occurs — theft, vandalism, unauthorized access to a sensitive area — audit trails provide immediate, precise information about who was present. Compliance. Industries with physical security requirements (healthcare, finance, government contracting) require documented proof of access control. Audit trails satisfy these requirements automatically. HR and operational insights. First-in, last-out timestamps. Attendance patterns. Building utilization data. Access control audit trails provide data that informs operational decisions beyond pure security. Liability protection. In the event of a workplace incident, access logs provide objective evidence about who was — and was not — on premises.

Why Utah Businesses Are Upgrading Now

Several trends are driving the shift from traditional locks to modern access control across Utah: Insurance requirements. Commercial property and liability insurers increasingly ask about physical access controls. Demonstrating a managed access control system with audit trails can positively influence premiums and coverage terms. Remote and hybrid work. When not every employee is on-site every day, managing physical keys becomes impractical. Access control systems let you grant time-limited access — an employee who works on-site Tuesdays and Thursdays gets access only on those days during business hours. Multi-location growth. Utah’s business growth often means expanding to additional locations. Managing keys across multiple sites is operationally painful. A cloud-managed access control system scales seamlessly — add a location, add readers, manage everything from one platform. Employee turnover. Revoking access from a departing employee should take seconds, not require a locksmith visit. With modern access control, credential deactivation is immediate and verifiable. Integration with IT systems. Modern access control systems can integrate with directory services (Azure AD/Entra ID), allowing access rights to be managed alongside IT permissions. When an employee is offboarded in the directory, their physical access credential can be automatically revoked.

What a Typical Deployment Looks Like

For a Utah business with a single office location and 20-50 employees, a typical access control deployment includes: – Cloud-managed controller installed at the facility – Readers at all exterior doors and sensitive interior areas (server room, executive offices, storage) – Encrypted keycards or mobile credentials for all employees – Integration with existing or new camera system – Web-based management dashboard – Mobile app for administrators – Door sensors and request-to-exit devices for compliance and safety Installation typically takes one to three days depending on the number of doors and the existing infrastructure. We handle design, cabling, hardware installation, configuration, credential issuance, and employee orientation.