Access Control for Commercial Properties in KZN: What Facilities Managers Need to Know
Effective access control at a business park or industrial site is not just about boom gates. It is a documented process that protects your tenants, your liability exposure, and your POPIA compliance — and most sites in KZN are not running it correctly.
What access control actually is
Access control is the operational management of who enters and exits a commercial property, when they do so, and under what authorisation. At a business park or industrial site, this includes pedestrian entry, vehicle access, contractor management, and visitor registration.
A boom gate with a guard who waves vehicles through is not access control. It is a checkpoint with no verifiable record. True access control produces a documented audit trail that you can review, present to tenants, and rely on in the event of an incident or a POPIA compliance query.
The POPIA dimension
The Protection of Personal Information Act requires that personal information collected at access points — visitor names, ID numbers, vehicle registration details, company affiliations — is processed lawfully, stored securely, and retained only for as long as necessary.
A paper visitor register left on a security desk is not a POPIA-compliant access control system. It is an unprotected collection of personal information accessible to every visitor and guard who passes through. Digital records, appropriately secured and with defined retention periods, are the operational standard.
If your business advertises POPIA compliance — or if your tenants require it of you — your access control records need to meet that standard.
The five components of effective commercial access control
01
Vehicle management
Every vehicle entering the site should be logged with registration number, driver identity, time of entry, destination, and authorisation reference. Unannounced or unauthorised vehicles should have a defined challenge process — not a default waving-through because the guard is uncertain.
02
Visitor registration
Visitors should be registered against a named host tenant, with time of arrival, time of departure, and purpose of visit recorded. Visitor badges should be issued and returned. The data should be digitally captured, not handwritten in a book.
03
Contractor management
Contractors present a higher access risk than standard visitors because they typically carry tools and equipment, operate in restricted areas, and may require multiple site visits. A contractor management protocol — pre-authorisation, escort requirements, equipment logging — should be standard on any commercial site.
04
Pedestrian control
On high-footfall commercial sites, pedestrian access control is often neglected in favour of vehicle management. A site with documented vehicle access and ungated pedestrian entry has a significant gap. Both points require active management and a physical barrier.
05
Shift handover and record integrity
Access records are only useful if they are complete and unbroken. Shift handovers must include a formal record transfer process so that data is continuous regardless of which guard is on duty. Gaps in access records undermine the entire audit trail.
Integrating with your existing VMS
Many commercial property managers in KZN are already running a visitor management system (VMS) — either as part of a building management platform or as a standalone tool. A properly structured security contract should integrate with your existing system rather than running a parallel paper process.
Where no VMS is in place, a security provider should be able to advise on a suitable system and operate it as part of the service contract. The records belong to you, not to the security company.
What to ask your current provider
- How are vehicle entry and exit records currently being captured and stored?
- Who has access to those records, and how are they protected?
- What is the data retention period for access records?
- How are contractor visits managed — is there a pre-authorisation process?
- Can I access a full access log for the past 30 days right now?
- Does your access process meet POPIA requirements for handling personal information?
If the answers to any of these questions are unclear or unavailable, you have an access control gap — regardless of how many guards are physically present.
Request a site assessment for your commercial property.
We assess your current access control setup and provide a costed proposal within 48 hours of the site visit — at no charge.