The access arrangement is the first thing to record
Keys, cards and codes need a documented chain: who is issued with what, how it is stored, what happens when a person leaves, and who is notified if something is lost. In a civic or health building the consequences of a missing key are significant, so the arrangement should be a written schedule rather than an informal handover. It is also the item most likely to drift over a long agreement as staff change on both sides.
Alarm codes deserve particular care. A unique user code per contractor allows a site to see which code disarmed the system and when, which is useful for both parties. A shared code shared again is how accountability disappears. Setting this up properly at mobilisation costs one conversation and removes a recurring source of doubt whenever an alarm activation needs explaining. It also gives the site a clean record when a monitoring company asks who was present.
