--- title: "Cards vs Keys: Why Physical Key Systems Still Dominate Critical Infrastructure" description: Cards or intelligent keys? Why physical key systems still dominate critical infrastructure, and how to govern them with your IAM. image: https://key2xs.com/hubfs/7033042_m.png --- [![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) ![Key2XS](https://key2xs.com/hubfs/img/logo-blue-horizontal.svg)](https://key2xs.com/?hsLang=nl) Why Governance? [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) Analyst recognition [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) Industries [Government](https://key2xs.com/sectors/government?hsLang=nl) [Utilities](https://key2xs.com/sectors/utilities?hsLang=nl) [Water management](https://key2xs.com/sectors/water-management?hsLang=nl) [Transport](https://key2xs.com/sectors/transport?hsLang=nl) [Telecom](https://key2xs.com/sectors/telecom?hsLang=nl) Platform [Product](https://key2xs.com/products?hsLang=nl) [How it works](https://key2xs.com/?hsLang=nl#how-it-works) [Integrations](https://key2xs.com/integrations?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) Partners Technology partners [SailPoint](https://key2xs.com/sailpoint-partnership?hsLang=nl) [One Identity](https://key2xs.com/partners/one-identity?hsLang=nl) [Microsoft Entra ID](https://key2xs.com/partners/entra-id?hsLang=nl) [Okta](https://key2xs.com/partners/okta?hsLang=nl) [OpenText](https://key2xs.com/partners/opentext?hsLang=nl) [iLOQ](https://key2xs.com/partners/iloq?hsLang=nl) [ASSA ABLOY](https://key2xs.com/partners/assa-abloy?hsLang=nl) Resell & Implementation partners [Hanab](https://key2xs.com/partners/hanab?hsLang=nl) Resources [Resource center](https://key2xs.com/resources?hsLang=nl) [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) [Events](https://key2xs.com/events?hsLang=nl) Meet us at Navigate [Navigate Austin · Oct 5-8](https://key2xs.com/events/sailpoint-navigate-austin?hsLang=nl) [Navigate London · Nov 2-4](https://key2xs.com/events/sailpoint-navigate-london?hsLang=nl) [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) [FAQ](https://key2xs.com/?hsLang=nl#faq) [News](https://key2xs.com/news-archive?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [← The Key2XS journal](https://key2xs.com/news-archive?hsLang=nl) ASSA Abloy Cliq # Cards vs Keys: Why Physical Key Systems Still Dominate Critical Infrastructure Oct 27, 2025 · 4 min read · by the Key2XS team ![Cards vs Keys: Why Physical Key Systems Still Dominate Critical Infrastructure](https://key2xs.com/hubfs/7033042_m.png) **In short:** Card systems dominate offices, but critical infrastructure still runs on intelligent key systems — keys work without power or network, survive harsh environments, and secure dispersed assets at far lower cost per door. The real question is not cards versus keys, but whether your keys are governed like your digital identities. ## **Cards vs Keys: Why Physical Key Systems Still Dominate Critical Infrastructure**   When it comes to access management in critical infrastructure, the debate between *card systems* and *intelligent key systems* is more than a matter of technology preference, it’s about operational resilience, compliance, and safety in high-risk environments. While digital transformation continues to push identity and access management (IAM) deeper into operational technology (OT), the reality on the ground is that physical security remains the final line of defence. The question is not *which system is more modern*, but *which system is more resilient, auditable, and compliant* under the **[CER Directive](https://key2xs.com/cer-directive?hsLang=nl) (EU 2022/2557)**and **[NIS2](https://key2xs.com/nis2-directive?hsLang=nl)**. ![98ABF1B0-E6E9-4FD2-B4E6-66D63EF2FCEE](https://key2xs.com/hs-fs/hubfs/98ABF1B0-E6E9-4FD2-B4E6-66D63EF2FCEE.png?width=101&height=101&name=98ABF1B0-E6E9-4FD2-B4E6-66D63EF2FCEE.png) ### **The Promise and Pitfalls of Card Systems** Card-based access systems, whether RFID, NFC, or smartcards, have long been the default in office environments and data centres. They integrate well with IAM solutions like **[Entra ID](https://key2xs.com/integrations/entra-id-iloq?hsLang=nl)**, **Okta**, and **[SailPoint](https://key2xs.com/integrations/sailpoint-iloq?hsLang=nl)**, providing convenience, scalability, and centralized management. However, in the context of critical infrastructure, such as energy distribution, water management, rail transport, and telecom these systems face practical and operational challenges: 1. **Connectivity dependency** – Most card systems rely on online controllers and wired or wireless connectivity to function. In remote substations, tunnels, or pumping stations, network availability is often unreliable or deliberately air-gapped. 2. **Tamper risk** – Controllers, readers, and cabling represent physical attack surfaces. A single compromised node can invalidate the security of an entire segment. 3. **Limited autonomy** – When power or network fails, card systems revert to fail-open or fail-closed states. Both create operational risks. 4. **Maintenance overhead** – Firmware updates, network audits, and patch management across thousands of sites quickly become cost-intensive. In short: **card systems are designed for convenience, not for isolation or resilience.**   ### **The Case for Intelligent Key Systems** Modern electromechanical key systems, such as **[ASSA ABLOY](https://www.assaabloy.com) [CLIQ](https://key2xs.com/integrations/assa-abloy-cliq?hsLang=nl)** or **[iLOQ](https://www.iloq.com) S5,** offer a hybrid model that combines mechanical reliability with digital accountability. Every key and cylinder acts as a secure, autonomous access node, operating without permanent network connectivity. Key advantages: 1. **Offline operation** – Each key carries its own access rights and audit trail, functioning in disconnected environments while still ensuring full traceability. 2. **Strong cryptographic security** – Keys and cylinders use end-to-end encryption and challenge-response authentication; no reader, no controller, no cables. 3. **Simplified compliance** – CER and NIS2 emphasize continuity, accountability, and supply-chain security. Intelligent key systems deliver provable control over who accessed which site, when, and why — even in isolated OT zones. 4. **Operational flexibility** – Access rights can be updated via mobile or desktop platforms, allowing time-limited or role-based permissions aligned with IAM policies. 5. **Lower TCO** – Without cabling, networking, or power infrastructure, lifecycle costs are lower, and deployment is faster. The result: **a distributed, cyber-resilient access ecosystem** that aligns with OT security requirements and regulatory compliance.   ### **Integrating IAM and Key Management: The Hybrid Future** The strongest security posture emerges when the physical and digital domains converge. By integrating **IAM platforms** with **intelligent key management**, organisations can enforce the same governance and role-based access controls (RBAC) across both IT and OT. This is precisely what **Key2XS** enables: - Synchronising key rights with IAM roles and policies. - Automating provisioning and de-provisioning across systems. - Delivering unified audit trails for compliance reporting. - Enabling AI-driven recommendations for key plans and access segmentation. In practice, this means a **transformer substation engineer**, a **harbour technician**, or a **rail maintenance crew** can receive just-in-time access based on identity attributes, without exposing the physical infrastructure to network-based vulnerabilities.   ### **Conclusion: Cards for Offices, Keys for Operations** In controlled, connected environments, card systems make perfect sense. But for dispersed, unmanned, or high-security operational sites, **intelligent keys remain unmatched** in resilience and compliance. The path forward is not replacement, but **integration**: combining the autonomy of physical key systems with the governance power of IAM. In a world where regulatory frameworks such as CER and NIS2 are redefining accountability, this hybrid approach is not just a best practice, it’s a necessity for critical entities. **Key2XS** bridges the gap between IAM and key management enabling secure, compliant, and automated control over every door, gate, and substation that matters. ![](https://key2xs.com/hubfs/1587550138006.jpeg)![](https://key2xs.com/hubfs/img/niels-bakker.png)![](https://key2xs.com/hubfs/1746630921693.jpeg)![](https://key2xs.com/hubfs/1696359051569.jpeg) **Written by the Key2XS team** Key2XS is founder-run. Questions about this piece land with the people who built the platform. [Talk to us](https://key2xs.com/contact?hsLang=nl). ## Keep reading [![](https://key2xs.com/hubfs/19294161_m.png) **Keeping Rotterdam’s Refineries Safe with Key2XS and Proving CER Compliance**Sep 08, 2025](https://key2xs.com/news/keeping-rotterdams-refineries-safe-with-key2xs-and-proving-cer-compliance?hsLang=nl) [![](https://key2xs.com/hubfs/key2xsplatform.png) **Direct Coupling vs. Key2XS Mediation: Two Paths to Managing Physical Key Systems with IAM**Sep 15, 2025](https://key2xs.com/news/direct-coupling-vs.-key2xs-mediation-two-paths-to-managing-physical-key-systems-with-iam?hsLang=nl) [![](https://key2xs.com/hubfs/scheveningen.png) **Securing Harbours in the Digital Age with Key2XS**Sep 01, 2025](https://key2xs.com/news/securing-harbours-in-the-digital-age-with-key2xs?hsLang=nl) ## Govern the keys you already have See identity, policy and physical keys in one 30-minute demo, scoped to your estate. [Book a demo](https://key2xs.com/contact?hsLang=nl) [More in the journal](https://key2xs.com/news-archive?hsLang=nl) ### Contact us [Wilhelmina van Pruisenweg 104, 2595 AN Den Haag](https://maps.google.com/?q=Wilhelmina+van+Pruisenweg+104+Den+Haag) Kraanspoor 50, 1033 SE Amsterdam, The Netherlands [info@key2xs.com](mailto:info@key2xs.com) [+31(0)70 2045180](tel:+31(0)702045180) ### Platform - [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) - [Product](https://key2xs.com/products?hsLang=nl) - [Integrations](https://key2xs.com/integrations?hsLang=nl) - [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) ### Compliance - [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) - [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) - [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) ### Company - [SailPoint partnership](https://key2xs.com/sailpoint-partnership?hsLang=nl) - [Resource center](https://key2xs.com/resources?hsLang=nl) - [Events](https://key2xs.com/events?hsLang=nl) - [News](https://key2xs.com/news-archive?hsLang=nl) - [Contact](https://key2xs.com/contact?hsLang=nl) [![Penetration tested and verified by Sekurno](https://key2xs.com/hubfs/img/badges/sekurno-pentest-badge-white.svg)](https://www.sekurno.com/verified/key2xs) [![KuppingerCole Analysts Rising Star 2026 badge for Key2XS](https://key2xs.com/hubfs/img/badges/kuppingercole-rising-star-2026-key2xs.svg)](https://key2xs.com/analyst-recognition?hsLang=nl) --- ![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) Key2XS, pronounced “key to access” © 2026 Key2XS B.V. All rights reserved [Privacy](https://key2xs.com/privacy-statement?hsLang=nl) Cookie Preferences Patent Pending Nr: 2040721 & 2041284 Key2XS & ActiveAuth are registered trademarks of Key2XS Assets B.V. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Key2XS", "url" : "https://key2xs.com/news/author/key2xs-2" }, "dateModified" : "2025-10-27T08:00:00.102Z", "datePublished" : "2025-10-27T08:00:00.000Z", "headline" : "Cards vs Keys: Why Physical Key Systems Still Dominate Critical Infrastructure", "image" : [ "https://key2xs.com/hubfs/7033042_m.png" ], "mainEntityOfPage" : { "@id" : "https://key2xs.com/news/cards-vs-keys-why-physical-key-systems-still-dominate-critical-infrastructure", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://key2xs.com/hubfs/logo%20blue.svg" }, "name" : "Key2XS B.V." } } ```