Design to recognised UK standards and codes (and say so in the spec)
Anchor the specification to BS EN 60839-11-1 for electronic access control systems. It sets minimum functionality and performance requirements for systems and components, giving all parties a common baseline for reliability and behaviour. Pair that with NSI NCP 109 as the delivery code of practice for design, installation, commissioning and maintenance; it turns expectations into a process your supplier can evidence at handover.
Where doors sit on escape routes, design and testing must comply with BS 7273-4:2015+A2:2023. The recent update clarifies the critical signal path between the fire alarm and release devices and offers guidance on acoustic and radio-actuated mechanisms—detail that matters when you’re selecting hardware and deciding whether any radio elements are suitable for your fire strategy.
Treat life safety as a design line-item
Security must never impede evacuation. Agree, in the design stage, how each relevant door will release on fire alarm and on relevant fault conditions in line with BS 7273-4—then prove it during commissioning and drills. Document fail-safe vs fail-secure choices by door function (e.g., perimeter escape routes typically fail-safe; high-risk internal rooms may be fail-secure if appropriate alternative egress exists). Include manual emergency release points where required, and ensure fire system interfaces are monitored and supervised along the entire critical signal path.
Engineer doors properly: hardware, placement and inclusive access
A door that closes smoothly and is correctly hung is cheaper and safer to control. Specify the right lock type (maglock vs electric strike vs motorised lock), monitored keeps, robust door contacts, and request-to-exit devices suited to the environment. Plan reader placement for natural approach and accessibility; the BSIA’s specifier guidance reminds us to design with the Equality Act in mind—think mounting heights, approach clearances, and when to add automatic operators. Build inclusive access into the brief; it’s far easier than retrofitting later.
For visitor control, integrate video entry so reception can verify arrivals and log releases rather than bypass the audit trail. (See: Entry Phone Installation)
Cabling, power and electrical safety are non-negotiable
Reliable access control depends on clean low-voltage power and tidy, labelled cabling. Use structured cabling for readers and contacts; plan PoE where appropriate, and size local PSUs with standby batteries for orderly operation during outages. Electrical work should conform to BS 7671 (IET Wiring Regulations); installations following BS 7671 are recognised by the HSE as likely to meet legal duties—an important assurance point when you hand over documentation.
Cable routes should be fire-stopped where they penetrate fire compartments, with as-built drawings noting routes, device addresses, breaker/PSU references and test points. Label everything—future you (and your maintenance team) will thank you.
Network and cybersecurity: segment, secure, supervise
Most modern platforms are IP-based. Place controllers and gateways on segmented VLANs, change default credentials, restrict management interfaces, and plan secure remote access if administrators will manage sites from off-premises. Even if the management plane is cloud-hosted, access decisions at the door should continue using cached permissions during WAN or server outages; events can reconcile later. This design principle (deterministic decisions at the edge) protects day-to-day operations while you keep the management plane secure. Where appropriate, you can also leverage NPSA evaluation schemes and assured product lists when specifying components for higher-risk environments.
Integrate deliberately (and test those journeys)
Integrations multiply value when engineered intentionally. Link door events to CCTV bookmarks so operators can instantly review forced-door alarms; coordinate with intruder alarms for first-in/last-out arming; feed visitor management so temporary credentials expire cleanly; and, where required, link to barriers and long-range readers so vehicle permissions mirror staff permissions. We outline practical integration patterns here: CCTV–Access Control–Alarm Integration
