Map entrances and users
Document each controlled point, the groups that use it and who is responsible for managing access. This prevents equipment choices from leading the design.
Choose manageable credentials
Consider how credentials are issued, replaced and revoked. The simplest suitable method is often easier to administer consistently.
Plan visitors and exceptions
Include deliveries, contractors, after-hours access and what happens when normal systems are unavailable.