Security Magazine logo
search
cart
facebook twitter linkedin youtube
  • Sign In
  • Create Account
  • Sign Out
  • My Account
Security Magazine logo
  • NEWS
    • Security Newswire
    • Technologies & Solutions
  • MANAGEMENT
    • Leadership Management
    • Enterprise Services
    • Security Education & Training
    • Logical Security
    • Security & Business Resilience
    • Profiles in Excellence
  • PHYSICAL
    • Access Management
    • Fire & Life Safety
    • Identity Management
    • Physical Security
    • Video Surveillance
    • Case Studies (Physical)
  • CYBER
    • Cybersecurity News
    • More
  • BLOG
  • COLUMNS
    • Cyber Tactics
    • Leadership & Management
    • Security Talk
    • Career Intelligence
    • Leader to Leader
    • Cybersecurity Education & Training
  • EXCLUSIVES
    • Annual Guarding Report
    • Most Influential People in Security
    • The Security Benchmark Report
    • The Security Leadership Issue
    • Top Guard and Security Officer Companies
    • Top Cybersecurity Leaders
    • Women in Security
  • SECTORS
    • Arenas / Stadiums / Leagues / Entertainment
    • Banking/Finance/Insurance
    • Construction, Real Estate, Property Management
    • Education: K-12
    • Education: University
    • Government: Federal, State and Local
    • Hospitality & Casinos
    • Hospitals & Medical Centers
    • Infrastructure:Electric,Gas & Water
    • Ports: Sea, Land, & Air
    • Retail/Restaurants/Convenience
    • Transportation/Logistics/Supply Chain/Distribution/ Warehousing
  • EVENTS
    • Industry Events
    • Webinars
    • Solutions by Sector
    • Security 500 Conference
  • MEDIA
    • Videos
      • Cybersecurity & Geopolitical Discussion
      • Ask Me Anything (AMA) Series
    • Podcasts
    • Polls
    • Photo Galleries
  • MORE
    • Call for Entries
    • Classifieds & Job Listings
    • Continuing Education
    • Newsletter
    • Sponsor Insights
    • Store
    • White Papers
  • EMAG
    • eMagazine
    • This Month's Content
    • Advertise
  • SIGN UP!
Access Management

Metrics: The Evaluation of Access Control and Identification

By Bernard Scaglione
Bernard J. Scaglione
June 1, 2012

Using metrics provides a quantifiable way to measure the effectiveness of security programs and processes. As the popularity of metrics has increased over the past few years so has the number and type of metrics that are used to evaluate efficiencies. However, without proper vetting, metrics may not effectively evaluate the process or program that is being measured. Believe it or not, the design and application of metrics is not as easy as it seems. Metrics must be chosen carefully to ensure they measure exactly what they were intended to measure. 

We can use identification and access control to demonstrate how to effectively utilize metrics when evaluating the effectiveness of a security process or program. When evaluating the effectiveness of an identification program, creating metrics begins with the evaluation of the ID program itself. Why was the program created? What is the intended target audience? Who implemented the program? What is the breakdown of processes that make up the program? For argument’s sake let’s assume that the ID program resides in a corporate headquarters and was developed by senior administration in order to identify outsiders (persons that visit the building and who are not employees). This process started after an unhappy customer came into the headquarters and was verbally abusive about his particular dissatisfaction with one of the company’s product lines. 

Knowing the history of the program is important to the creation of metrics. In this case, it is important to understand why employees had to be issued ID cards and the purpose of the ID cards.

Since the identification badge was not implemented as a tool to authenticate an individual’s identity, only to determine if they are an employee versus a visitor, metrics should be designed around compliance in wearing the badge and issuing a badge.

The metrics for this ID program could include:

  • Tracking ID compliance at the entrances since employees are required to present their ID cards at entry.
  • Proper display of the ID card when the ID is presented when entering the building. It could measure data on whether the ID card can be seen when the employee enters the building.
  • Because employees are required to wear ID cards, making it easier for the employee to obtain and wear the card may be a good metric. An employee survey could be utilized to determine employee opinion on the program and ask for suggestions for improvement. 

These examples demonstrate metrics that evaluate the ID program based upon the program’s objectives and goals — based upon the rational and purpose of the program.

Using program or process objectives is not the only way to develop effective metrics, though. Metrics development can be accomplished through general data collection. For example, access control can be a door with a magnetic lock and card reader, it can be a security officer standing at an entrance or it can be a password or firewall that pre-selects persons for access. Either way, data can be collected on the specific processes that make up the access control program or process. Using the example of a security officer standing at an entrance, data collection can be developed when the officer’s job functions or job processes are reviewed and broken down into simple tasks. Where the security officer stands, what the officer says, how many people he stops or lets through, how many people sign the visitor logbook and the legibility of the logbook are all basic tasks that the officer may go through when standing and screening persons entering the building. Data collection could include:

  • Number of minutes or hours the officer is present at the entrance compared to the assigned hours.
  • Number of times the officer is standing at the spot required, or not standing at the spot.
  • How many times the officer verbally greets persons entering the building, or does not greet persons.
  • The number of persons that are stopped at the entrance compared to the number that are not.
  • The number of persons that are asked for identification compared to those who are not.
  • The number of employees who voluntarily showed their IDs compared to the number that did not.

All this data can be collected by tally sheets either by the officer during the course of the job or by observation of a supervisor or other person and over 30 days. Then, analyze the data to determine what story it tells. The data should become the permanent metrics used to evaluate that program’s effectiveness.

When selecting metrics for your particular programs and processes, remember to identify the objectives of the program and its goals. Develop metrics that will demonstrate the effectiveness of those objectives and goals. Additionally, break down the job functions of each security function to its simplest tasks. Then, utilize basic techniques to collect data on those tasks. Once gathered, analyze each data collection technique in order to determine its effectiveness in demonstrating effective performance.  

KEYWORDS: effectiveness of a security program security metrics

Share This Story

Looking for a reprint of this article?
From high-res PDFs to custom plaques, order your copy today!

Bernard J. Scaglione, CPP, CHPA, CHSP is the Director of Healthcare Security Services for G4S Secure Solutions. He has 30 years of experience in the healthcare security field including a Master’s Degree from Rutgers University School of Criminal Justice in New Jersey. Ben currently serves on the Board of the International Association for Healthcare Security and Safety (IAHSS). He served on IAHSS Education Council from 2005 until 2011. Ben is past Chairman of the ASIS International Healthcare Council and the Past President of the New York City Metropolitan Healthcare Safety and Security Directors Association. He has been a columnist for Security Magazine and contributing author for the Journal of Healthcare Protection Management. Ben was an adjunct faculty member at Pratt Institute in New York teaching engineers and architects in physical security. He taught at Interboro Institute in New York and at New Jersey City University. He was also an instructor at John Jay College Peace Officer Academy.

Recommended Content

JOIN TODAY
To unlock your recommendations.

Already have an account? Sign In

  • Security's Top Cybersecurity Leaders 2024

    Security's Top Cybersecurity Leaders 2024

    Security magazine's Top Cybersecurity Leaders 2024 award...
    Cybersecurity
    By: Security Staff
  • cyber brain

    The intersection of cybersecurity and artificial intelligence

    Artificial intelligence (AI) is a valuable cybersecurity...
    Logical Security
    By: Pam Nigro
  • artificial intelligence AI graphic

    Assessing the pros and cons of AI for cybersecurity

    Artificial intelligence (AI) has significant implications...
    Cybersecurity Education & Training
    By: Charles Denyer
Subscribe For Free!
  • Security eNewsletter & Other eNews Alerts
  • eMagazine Subscriptions
  • Manage My Preferences
  • Online Registration
  • Mobile App
  • Subscription Customer Service

More Videos

Sponsored Content

Sponsored Content is a special paid section where industry companies provide high quality, objective, non-commercial content around topics of interest to the Security audience. All Sponsored Content is supplied by the advertising company and any opinions expressed in this article are those of the author and not necessarily reflect the views of Security or its parent company, BNP Media. Interested in participating in our Sponsored Content section? Contact your local rep!

close
  • Crisis Response Team
    Sponsored byEverbridge

    Automate or Fall Behind – Crisis Response at the Speed of Risk

  • Perimeter security
    Sponsored byAMAROK

    Why Property Security is the New Competitive Advantage

  • Duty of Care
    Sponsored byAMAROK

    Integrating Technology and Physical Security to Advance Duty of Care

Popular Stories

Pills spilled

More than 20,000 sensitive medical records exposed

Coding on screen

Research reveals mass scanning and exploitation campaigns

Laptop in darkness

Verizon 2025 Data Breach Investigations Report shows rise in cyberattacks

White post office truck

Department of Labor Sues USPS Over Texas Whistleblower Termination

Computer with binary code hovering nearby

Cyberattacks Targeting US Increased by 136%

2025 Security Benchmark banner

Events

May 22, 2025

Proactive Crisis Communication

Crisis doesn't wait for the right time - it strikes when least expected. Is your team prepared to communicate clearly and effectively when it matters most?

September 29, 2025

Global Security Exchange (GSX)

 

View All Submit An Event

Products

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

See More Products

Related Articles

  • Ben Scaglione

    The Identification and Control of Fraudulent Behavior

    See More
  • Open door to a room

    Managing Modern Risks in Access Control and Identification

    See More
  • Ben Scaglione

    Why Access Control and Identification is Healthy for Your Organization

    See More

Related Products

See More Products
  • 9781138378339.jpg

    Surveillance, Crime and Social Control

  • 150 things.jpg

    The Handbook for School Safety and Security

  • Physical-Security-and-Safet.gif

    Physical Security and Safety: A Field Guide for the Practitioner

See More Products
×

Sign-up to receive top management & result-driven techniques in the industry.

Join over 20,000+ industry leaders who receive our premium content.

SIGN UP TODAY!
  • RESOURCES
    • Advertise
    • Contact Us
    • Store
    • Want More
  • SIGN UP TODAY
    • Create Account
    • eMagazine
    • eNewsletter
    • Customer Service
    • Manage Preferences
  • SERVICES
    • Marketing Services
    • Reprints
    • Market Research
    • List Rental
    • Survey/Respondent Access
  • STAY CONNECTED
    • LinkedIn
    • Facebook
    • YouTube
    • X (Twitter)
  • PRIVACY
    • PRIVACY POLICY
    • TERMS & CONDITIONS
    • DO NOT SELL MY PERSONAL INFORMATION
    • PRIVACY REQUEST
    • ACCESSIBILITY

Copyright ©2025. All Rights Reserved BNP Media.

Design, CMS, Hosting & Web Development :: ePublishing