Commercial security starts with a repeatable process
Security is not a single product on a door. For a small shop, office, clinic, warehouse, or multi-unit property, it is a set of decisions that helps the right people get in, lets the business respond when something goes wrong, and makes it harder for an unattended opening to become an easy target. This guide is general information for Ontario business owners and managers; the right measures depend on the building, lease, insurer, occupancy and local requirements.
1. Walk the property as a visitor would
Start outside, in daylight and after dark. List every public entrance, staff entrance, loading door, overhead door, gate, window, storage room and shared corridor. Note where a visitor could wait unnoticed, where sightlines are poor, and which doors are routinely propped open for deliveries. Photograph existing hardware and record the make or keyway where practical. A simple inventory makes later maintenance and budgeting far more reliable.
2. Give each door a job
Exterior doors should close and latch consistently without needing to be pushed, lifted or slammed. The frame, strike plate, hinges, closer and door itself matter as much as the cylinder. Interior doors often need a different level of control: a staff washroom is not the same as a records room, cash office, server closet or medicine cabinet. Match the hardware and access rule to the actual risk instead of applying the same lock everywhere.
3. Treat keys as accountable assets
Many commercial security gaps begin with an untracked key. Keep a written or digital key register showing the key number, recipient, issue date, return date and the doors it opens. Decide in advance who can authorize copies. When an employee, contractor or tenant leaves, collect issued keys promptly and review whether a rekey, credential deletion or other change is warranted. A restricted key system may help some organizations, but it is not a substitute for a clear process and trained managers.
4. Use access technology thoughtfully
Electronic access can make it easier to change permissions without collecting every physical key, but it introduces its own responsibilities. Choose a system with named users, sensible permission groups, an audit trail where appropriate, secure administrator access and a plan for power or network interruption. Avoid shared administrator passwords. Before buying, ask who owns the account, how credentials are removed, what recurring fees apply, and how doors behave during an outage. For many sites, a modest, well-managed system is more useful than an elaborate system nobody maintains.
5. Prepare for incidents before they happen
Write down who is called after a lost key, break-in, attempted entry, damaged door or suspicious access event. Preserve relevant records and photographs, notify the landlord or insurer where required, and avoid making broad changes before the situation is documented. If a crime may have occurred or anyone is at risk, contact emergency services. After the immediate issue is safe, review the cause: was it hardware failure, a process failure, poor lighting, an unauthorized copy or a door that did not latch?
6. Schedule maintenance and review
Doors move with weather, heavy use and building settlement. Review closers, latches, hinges, weatherstripping, panic hardware and access permissions at least seasonally and after staffing changes. Keep invoices, key records and inspection notes together. That record helps a manager spot repeat problems, communicate with a property owner, and make a measured decision about upgrades. The goal is not to eliminate every risk; it is to build a practical system that can be checked, explained and improved over time.