What is the procedure for handling a lost or stolen key or access device?

• A. Notify only the inmate population.
• B. Report immediately; secure affected area; invalidate credentials or rekey; log incident; replace device.
• C. Do not report; ignore.
• D. Reissue an identical credential without updating access controls.

Answer: (B)

When a key or access device is lost or stolen, act fast to prevent unauthorized entry. Start by reporting the loss to the supervisor or security authority so a proper incident response can begin. Secure the affected area to limit access while the situation is assessed, which may involve locking doors, enabling temporary access restrictions, or tightening surveillance. Invalidate the credentials tied to the missing device or rekey the locks to ensure the item can’t be used. Log the incident to create a traceable record for accountability and future investigations. Finally, replace the device with a new credential and ensure the access controls are updated so operations can resume securely.

Skipping reporting or ignoring the loss creates ongoing security risk, and reissuing an identical credential without updating access controls would leave the system vulnerable to misuse.