Office · Risk and compliance research
Key-Holding and Alarm Management for Office Cleaners
How key-holding and alarm management should work when an office cleaning contractor holds access to your Melbourne premises, including registers, arm and disarm procedures, and what to do when a key goes missing.
5 min read
The moment you let a cleaning contractor into an empty building, you are trusting them with two things that matter more than the cleaning itself: the keys that open your premises and the alarm that protects them. Handled well, key-holding and alarm management are routine and almost invisible. Handled poorly, they become the source of lost keys, mystery alarm activations, and a building that no one can confirm was locked. The difference is almost entirely down to process.
This article sets out how key-holding and alarm management should work for an office cleaning contractor, and the questions to ask before you hand anything over.
Why key-holding needs a system, not a habit
Keys drift. A key issued to one cleaner is passed to a colleague covering a shift, then to a supervisor, and within a few months no one can say with certainty who holds what. That drift is the real risk — not the single act of handing over a key, but the slow loss of control over who can enter your building.
The fix is a key management system built on three ideas: every key is accounted for, every holder is named, and every movement is recorded. This applies equally to mechanical keys and electronic credentials. The technology matters less than the discipline of knowing, at any moment, exactly who can get in.
The key register
A key register is the backbone of any key-holding arrangement. It is a simple record, but it needs to be maintained rigorously. At a minimum it should capture the key or fob identifier, the named person it is issued to, the date issued, the areas it opens, and the date returned or disabled. When someone leaves the contractor's roster, the register tells you immediately what needs to be recovered or deactivated.
Ask to see how your contractor maintains this. A provider who can produce a current register on request is demonstrating control; one who has to "check with the team" is telling you the keys have drifted.
Secure storage and handling
Keys and fobs need to be stored securely between shifts, not carried loose or left in vehicles. Good practice includes a locked key cabinet at the contractor's premises, controlled issue and return each shift, and a rule against copying keys or sharing credentials. For higher-security sites, keys may be signed in and out for each visit so there is a record tied to individual shifts.
The same logic applies on your side. Where you provide access, decide whether keys live with named individuals or are drawn from a controlled cabinet, and make sure that decision is written down.
Alarm management: the arm and disarm sequence
If your cleaners disarm the alarm on entry and re-arm it on exit, that sequence is a security procedure in its own right. It should be documented clearly enough that a new authorised staff member can follow it without guesswork:
- The steps to disarm on entry, including any timing constraints.
- What to do if the alarm activates unexpectedly.
- Who the monitoring company should contact, and in what order.
- The arming sequence on exit and how to confirm it succeeded.
Codes should be treated with the same care as keys. Individual codes, where the system supports them, are far preferable to a single shared code, because they make each entry attributable and let you disable one person's access without disrupting everyone else.
Reading the alarm logs
One quiet advantage of alarm-based access is the audit trail it produces. Every arm and disarm event is timestamped, which gives you an independent record of when the building was entered and secured. Compared against the agreed cleaning schedule, these logs answer useful questions: Are visits happening as scheduled? Do disarm and re-arm events pair up cleanly? Is the building being secured on exit every time? Ask your contractor and your monitoring provider for periodic access to these logs so verification is routine rather than something you only do after a problem.
When something goes wrong: lost keys and failed arming
Even good systems have incidents, and the measure of an arrangement is how it handles them. Two situations deserve explicit procedures.
A lost or stolen key or fob should trigger immediate reporting and a defined response. For mechanical keys that may mean re-keying affected locks; for electronic credentials it means disabling and reissuing. Agree in advance who bears the cost and how fast the response must be, so an already stressful moment is not made worse by an argument.
A failure to arm the alarm on exit — whether through error or a fault — should also have a fallback. Cleaners should know how to confirm arming succeeded and what to do if it does not, including who to call so the building is not left unmonitored.
Key-holding and alarm responsibilities at a glance
| Element | Good practice | Question to ask your contractor |
|---|---|---|
| Key issue | Named individuals only | "Who currently holds keys to our site?" |
| Key register | Current and available on request | "Can you show me the register?" |
| Storage | Locked cabinet, controlled issue | "Where are keys kept between shifts?" |
| Alarm codes | Individual where supported | "Do staff share one code?" |
| Lost credential | Immediate report and response | "What happens the day a key goes missing?" |
| Verification | Alarm logs shared periodically | "Can we see arm/disarm event reports?" |
Building it into the agreement
Key-holding and alarm management should be written into the service agreement rather than left as an informal understanding. The document should name the arrangement, the register requirement, the storage standard, the alarm procedures, and the lost-credential response. That protects both sides: you have something concrete to review against, and the contractor has a clear definition of what they have signed up to.
None of this eliminates risk entirely — no key system can promise that a key will never be misplaced. What a disciplined arrangement does is keep you in control of who can enter your building, make every entry traceable, and turn an inevitable slip into a managed event rather than a crisis.
If you are setting up or reviewing key-holding for an after-hours contract, AfterFive runs controlled key and alarm arrangements as part of our after-hours office cleaning service, including sites across North Melbourne and the inner north. To put a proper arrangement in place, get in touch with our team.
FAQs
Should a cleaning contractor hold keys to our office?
Many after-hours contracts require it, and it is workable provided keys are issued to named individuals, recorded in a register, stored securely, and returned or disabled when someone leaves. The alternative is electronic access, which offers the same convenience with a clearer audit trail.
What happens if a cleaner loses a key or fob?
A lost key should be reported immediately under an agreed procedure. Depending on the building, that may mean re-keying affected locks or disabling and reissuing an electronic credential. The contract should say who bears the cost and how quickly the response must happen.
How is alarm management handled after hours?
Cleaners follow a documented sequence to disarm on entry and re-arm on exit, with the monitoring company holding current contact details. Alarm event logs then let you confirm the timing of each visit against the agreed schedule.