Key control written down rather than assumed
The questions are simple and rarely asked. How many keys exist, who holds each one, are they signed for, what happens when a cleaner leaves the company, and what is the process if one is misplaced. A practice that cannot answer these has a security exposure that has nothing to do with the quality of the cleaning and everything to do with an arrangement nobody documented.
Alarm codes deserve the same treatment. A shared code known to several people, unchanged for years, is a weaker control than most practices realise. Recording who holds the code, agreeing a change at any staffing change, and stating the procedure when an alarm activates gives the practice a position it can explain to its own insurer or professional body if asked.
