--- title: What is Physical Access Governance? | Key2XS description: "Physical access governance applies identity governance to physical keys and locks: role-based rights, automatic revocation and audit trails. The complete guide." image: https://key2xs.com/hubfs/img/og-image.png --- [![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) ![Key2XS](https://key2xs.com/hubfs/img/logo-blue-horizontal.svg)](https://key2xs.com/?hsLang=en) Why Governance? [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=en) [CER Directive](https://key2xs.com/cer-directive?hsLang=en) [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=en) [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=en) Analyst recognition [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=en) Industries [Government](https://key2xs.com/sectors/government?hsLang=en) [Utilities](https://key2xs.com/sectors/utilities?hsLang=en) [Water management](https://key2xs.com/sectors/water-management?hsLang=en) [Transport](https://key2xs.com/sectors/transport?hsLang=en) [Telecom](https://key2xs.com/sectors/telecom?hsLang=en) Platform [Product](https://key2xs.com/products?hsLang=en) [How it works](https://key2xs.com/?hsLang=en#how-it-works) [Integrations](https://key2xs.com/integrations?hsLang=en) [Book a demo](https://key2xs.com/contact?hsLang=en) Partners Technology partners [SailPoint](https://key2xs.com/sailpoint-partnership?hsLang=en) [One Identity](https://key2xs.com/partners/one-identity?hsLang=en) [Microsoft Entra ID](https://key2xs.com/partners/entra-id?hsLang=en) [Okta](https://key2xs.com/partners/okta?hsLang=en) [OpenText](https://key2xs.com/partners/opentext?hsLang=en) [iLOQ](https://key2xs.com/partners/iloq?hsLang=en) [ASSA ABLOY](https://key2xs.com/partners/assa-abloy?hsLang=en) Resell & Implementation partners [Hanab](https://key2xs.com/partners/hanab?hsLang=en) Resources [Resource center](https://key2xs.com/resources?hsLang=en) [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=en) [Events](https://key2xs.com/events?hsLang=en) Meet us at Navigate [Navigate Austin · Oct 5-8](https://key2xs.com/events/sailpoint-navigate-austin?hsLang=en) [Navigate London · Nov 2-4](https://key2xs.com/events/sailpoint-navigate-london?hsLang=en) [ROI calculator](https://key2xs.com/roi-calculator?hsLang=en) [FAQ](https://key2xs.com/?hsLang=en#faq) [News](https://key2xs.com/news-archive?hsLang=en) [Book a demo](https://key2xs.com/contact?hsLang=en) [Book a demo](https://key2xs.com/contact?hsLang=en) Category definition # What is physical access governance? Physical access governance extends identity governance to the keys and locks that protect physical assets: substations, pumping stations, cabinets, depots. Rights derive from the identity, pass through the same approvals and lifecycle as digital access, and produce the same evidence. **12 min** readUpdated **July 2026** [Request a demo](https://key2xs.com/contact?hsLang=en) [Start reading](https://key2xs.com/physical-access-governance#why) Identity governance (IGA) Physical identity governance Identity systems SailPointMicrosoft Entra IDOktaOne IdentityOpenText Identity sync Status updates Key2XS ### Extends identity governance to physical access - Access profiles derived from identity roles - Approvals stay in your IGA - Audit trail back to the identity Access sync Audit evidence Key systems iLOQASSA ABLOY CLIQeCLIQ · PROTEC² keysASSA ABLOY AccessASSA ACCESS · ASSA CUMULUS · ASSA PULSEASSA ABLOY Traka On cylinders, padlocks, cabinets and gates, including fully offline sites. Identity *decides*. Policy *governs*. Technology *executes*. In one sentence Manage physical keys and lock permissions through identity-driven controls: rights derived from roles, revoked with the identity lifecycle, evidenced automatically. **Why the category exists** On this page 1. [Why the category exists](https://key2xs.com/physical-access-governance#why) 2. [Authentication is not governance](https://key2xs.com/physical-access-governance#authentication) 3. [What it consists of](https://key2xs.com/physical-access-governance#consists) 4. [One identity, two worlds](https://key2xs.com/physical-access-governance#one-identity) 5. [How it differs](https://key2xs.com/physical-access-governance#coverage) 6. [Where PIAM stops](https://key2xs.com/physical-access-governance#piam) 7. [Offline assets](https://key2xs.com/physical-access-governance#offline) 8. [Who needs it](https://key2xs.com/physical-access-governance#who) 9. [The governance gap](https://key2xs.com/physical-access-governance#maturity) 10. [The identity control plane](https://key2xs.com/physical-access-governance#control-plane) 11. [The analyst view](https://key2xs.com/physical-access-governance#analyst) 12. [Buyer's checklist](https://key2xs.com/physical-access-governance#checklist) 13. [FAQ](https://key2xs.com/physical-access-governance#faq) [Request a demo](https://key2xs.com/contact?hsLang=en) 12 min read Origins ## Why the category exists For decades, digital and physical access grew up as separate worlds with separate owners. IT built identity governance: joiner, mover and leaver processes, role models, approval workflows, recertification, audit trails. Facilities managed keys: issue registers, key cabinets, deposit forms, and a great deal of institutional memory. That separation was tolerable while keys were purely mechanical and expectations were low. Three developments ended it. IT: identity governance Facilities: key management Locks became programmable iLOQ, ASSA ABLOY CLIQ: access rights that can be governed Regulation caught up NIS2 and CER in force, October 2024 The threat model converged Whoever enters the switch room owns the systems inside Physical access governance Physical access governance is the discipline that reunites the two worlds. The distinction ## Authentication is not governance A lock authenticates a key. A reader authenticates a badge. Both answer one question: is this credential valid at this door, right now? Neither knows whether the person holding it should still have it. Governance answers the questions that come before and after. Access control enforces. Governance decides and evidences. An organisation can have excellent locks and no governance at all, and most do. CYLINDER KEY Anna, contractor Valid at this door, now. What the lock knows What governance knows - *1* **Is this key valid at this door, right now?**The only question a cylinder can answer. - *2* **Should this person hold this right?**Derived from role, contract and lifecycle state. - *3* **Who approved it, against which policy?**Recorded in the same IGA that approves digital access. - *4* **When does it end?**With the contract, the role change, or the leaver event. - *5* **Can we prove all of it later?**Every grant, change and revocation, traceable to an identity. The lock is right. Anna's key is valid. Nobody has asked whether it should be. Anatomy ## What physical access governance consists of Four capabilities, implemented as middleware between the IAM system and the locking system, translating identity decisions into access rights in near real time. ROLEACCESS RIGHT ### Identity-driven provisioning Access rights derive from who someone is and which roles they hold in the IAM system, not from who happened to ask at the desk. POLICYapproval ### Policy and approval Which role opens which doors is defined once, as policy. Exceptions pass through approval instead of around it, in your own IGA. JOINERMOVERLEAVER ### Lifecycle enforcement Joiners receive access with their role, movers lose the old and gain the new, and leavers lose everything in the same movement that disables their accounts. Contract end dates end physical access too. SIGNEDidentity + decision ### Audit and evidence Every grant, change and revocation is logged, tamper-evident, and traceable to an identity and a decision, so compliance questions are answered from the system. The principle ## One identity, two worlds A person has one identity. Their digital access is derived from it: role, department, contract dates, lifecycle state. Their physical access should be derived from the same identity, not from a second record kept by facilities, a key register, or a badge system with its own copy of who works here. When the identity changes, both worlds should change in the same movement. A contract that ends on Friday ends the VPN and the substation key on Friday. DIGITAL ACCESS PHYSICAL ACCESS VPNActiveEmail and filesActiveSCADA consoleActive Substation 12ActiveCabinet 4, tracksideActiveDepot gateActive Anna de Vries Contractor, field maintenance Contract active Contract ends One event. Six revocations. Same movement. Adjacent categories ## How it differs The categories are complementary. Most critical entities run several of them. Physical access governance is the layer that makes the key-operated estate as governable as the badge-operated and digital parts. Hover a row. Category Digital applications Badge-controlled doors Key-operated sites, offline IAM / identity governance Governs No reach No reach Electronic access control (PACS) No reach Enforces No reach PIAM (physical identity and access management) Syncs from Governs No reach Key management software No reach No reach Registers Physical access governance Connects to Connects to Governs Hover a category to see what it does and where it stops. Governs or enforcesPartial: registers or syncsConnects toNo reach The badge estate and the rest ## Where PIAM stops PIAM was built for the badge estate: office buildings, wired doors, a reader on every entrance. It does that well, and physical access governance connects to it. Two things sit outside its reach. **The estate is the wrong shape.** A utility's risk lives in substations, cabinets and pumping stations, thousands of sites with no reader and no network, where a key is the entire security model. **The decision has to come from one place.** Physical access governance does not keep its own copy of the identity. It makes the IAM the source of every decision and treats the lock as one more system that carries it out. **IAM / IGA**one identity PIAM: reader-controlled estate Head office, depots, control rooms Physical access governance connects to Substations, cabinets, pumping stations no reader, no network, a key PIAM covers the circle. Physical access governance connects to it, and reaches the sites outside it from the same identity. Mechanics ## Offline assets Most operational sites are offline by design. Keys and cylinders stay disconnected for resilience, and governance has to work there anyway. With programmable keys, it does. Rights travel with the key and are refreshed when the key is used. Revocation is therefore near real time, not instantaneous: the window is closed by periodic blacklist checks the customer configures, and a shorter interval costs battery. The audit trail is collected when keys and cylinders sync. The site never needs connectivity. 1Control plane, online #### The decision A role changes, a contract ends, an approval lands in the IGA. The right is granted or withdrawn in the control plane. 2Key, on use #### The key carries it The next time the key is used it picks up its updated rights. Revocation propagates the same way, and through a scheduled blacklist check. 3Cylinder, offline #### The lock enforces it The cylinder never needs a network. It checks the rights the key presents, and the blacklist it holds, and opens or refuses. 4Control plane, on sync #### Evidence comes back Every open, refusal and update is collected when keys and cylinders sync, and linked to the identity and the decision that caused it. Blacklist check interval More oftenLess often A design choice the customer makes per estate, not a limitation to hide. **Exposure window** after a revocation **Battery life** of the key Industries ## Who needs it Physical access governance matters most where physical access affects safety, continuity or compliance. The common trigger is regulatory: organisations in scope of NIS2 or CER discover that their digital governance is mature while their physical access is still administered by hand, and that auditors have started asking about both. [**Utilities**Thousands of dispersed, unmanned sites where the key is the entire security model.*Utilities →*](https://key2xs.com/sectors/utilities?hsLang=en)[**Government**Diverse estates, many external hands, public accountability under NIS2.*Government →*](https://key2xs.com/sectors/government?hsLang=en)[**Transport**Safety-critical trackside and depot access with layered contracting.*Transport →*](https://key2xs.com/sectors/transport?hsLang=en)[**Telecom**Masts, exchanges and street cabinets: digital infrastructure with subcontracted hands.*Telecom →*](https://key2xs.com/sectors/telecom?hsLang=en)[**Water management**Pump stations, sluices and weirs across the polder, unmanned by design.*Water management →*](https://key2xs.com/sectors/water-management?hsLang=en) Self-assessment ## The governance gap Most critical entities today run mature identity governance on the digital side and capable locking technology on the physical side. What is missing is the connection between them: the point where an identity decision becomes an access right, automatically and with evidence. That is the governance gap, and it is narrower than most organisations think. Pick the stage that looks like yours. **Stage 1**The register **Stage 2**Key management software **Stage 3**Programmable locks **Stage 4**Governed Joiner Mover Leaver Audit **Stage 1.** The register is only as good as the discipline behind it, and discipline decays continuously. **Stage 2.** Better registration, same decisions. Every grant and revocation still originates outside the identity lifecycle. **Most organisations are here or at stage 3.** **Stage 3.** Capable systems on both sides, and nothing connecting them. This is the governance gap, and it is one integration wide. **Stage 4.** Governed. Nobody has to remember anything. The thesis ## The identity control plane Over the last decade the IAM system became the control plane for digital access: one place where lifecycle, policy, certification and audit are defined, and every application is an enforcement point. Physical access is the last domain still outside it. Physical access governance extends the control plane. The same joiner, mover and leaver events, the same approval flows, the same recertification campaigns and the same audit trail now reach the substation door. The lock becomes what an application already is: something that enforces a decision it did not make. **Approvals stay in your IGA. No decision originates anywhere else.** Identity control plane: lifecycle, policy, certification, audit SaaS apps enforcement point VPN and network enforcement point SCADA and OT enforcement point Cylinders and padlocks enforcement point Cabinets and gates enforcement point Offline sites via the key ### Identity *decides*. Who may hold access is derived from the identity in the IAM you already run. ### Policy *governs*. The same approvals, segregation rules and certification cycles that govern digital access. ### Technology *executes*. Keys and cylinders carry out what was decided. They enforce. They never decide. Analyst view · KuppingerCole Analysts, 2026 ## What KuppingerCole says about the category > “Physical Access Governance extends identity governance to the offline, mechanical, and electronic key systems protecting critical field assets such as substations, pumping stations, and bridges.” KuppingerCole Analysts, Rising Star report on Key2XS, September 2026 “Physical Access Governance is likely to grow steadily in the next two to three years, tracking the pace at which the CER Directive and NIS2 are transposed into national law and enforced.” ![KuppingerCole Rising Star 2026, Key2XS](https://key2xs.com/hubfs/img/badges/kuppingercole-rising-star-2026-key2xs.svg) ### Key2XS named a Rising Star 2026 by KuppingerCole Analysts Market segment: Physical Access Governance [Read the analyst recognition](https://key2xs.com/analyst-recognition?hsLang=en) Evaluation ## A buyer's checklist When evaluating a physical access governance solution, ask these. Tick what a vendor can show you, not what they tell you. **0** of 8 shown Copy the list Does it connect to the IAM system we already run, with pre-built, maintained connectors?Does it work with our existing locking system without replacing locks, keys or the locking plan?Does it make the IAM the control plane for physical access, or does it keep a second identity store that has to be synchronised?How fast do lifecycle events propagate, and how is the revocation window on offline keys closed?Is the audit trail tamper-evident, and does it link every right to an identity and a decision?Are the integrations certified by the vendors on both sides?What is the realistic implementation time, and does it require custom development?Does it handle external populations, such as contractors and agency staff, with automatic end dates? **Key2XS answers these by design:** certified integrations on both sides, pre-built connectors for SailPoint, Entra ID, Okta, One Identity and OpenText and for iLOQ and the ASSA ABLOY CLIQ ecosystem, approvals that stay in your IGA, near real-time propagation with configurable blacklist checks, a tamper-evident audit trail, and standard integrations live in under two hours. ## Frequently asked questions Physical access governance, defined and explained. What is physical access governance in one sentence? Managing physical keys and lock permissions through identity-driven controls: rights derived from roles, revoked automatically with the identity lifecycle, and evidenced in an audit trail linked to the identity. How is it different from access control? Access control enforces access at the door, whether by badge, key or code. Governance decides and proves who should have that access in the first place, based on identity, role and policy, and withdraws it when the reason ends. How is it different from PIAM? PIAM manages badge holders for reader-controlled doors and keeps its own identity records, synchronised from HR or IAM. Physical access governance connects to PIAM and to the IAM, makes the IAM the source of every physical right, and reaches the key-operated, offline estate that badges never covered. Does it work for sites without a network? Yes. Rights travel with programmable keys and are refreshed when the key is used. Revocation is enforced at the next use and by periodic blacklist checks, and the audit trail is collected when keys and cylinders sync. The site needs no connectivity. Is this required by NIS2 or CER? Both directives require governed, demonstrable control over physical access to premises and infrastructure. Neither prescribes a specific technology, but manual key administration cannot produce the evidence they ask for. Do we need to replace our locks? No. Physical access governance is a middleware layer. It connects the IAM system and the digital locking system you already run. Where does Key2XS fit? Key2XS is a physical access governance platform: a governance control plane connecting IAM systems (SailPoint, Microsoft Entra ID, Okta, One Identity, OpenText) to electronic key systems (iLOQ, ASSA ABLOY CLIQ), vendor-neutral in any combination. ## See physical access governance in practice A 30-minute walkthrough of how identity, policy and physical access come together in one auditable system. [Request a demo](https://key2xs.com/contact?hsLang=en) [NIS2 and CER guidance](https://key2xs.com/nis2-directive?hsLang=en) ### Contact us [Wilhelmina van Pruisenweg 104, 2595 AN Den Haag](https://maps.google.com/?q=Wilhelmina+van+Pruisenweg+104+Den+Haag) Kraanspoor 50, 1033 SE Amsterdam, The Netherlands [info@key2xs.com](mailto:info@key2xs.com) [+31(0)70 2045180](tel:+31(0)702045180) ### Platform - [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=en) - [Product](https://key2xs.com/products?hsLang=en) - [Integrations](https://key2xs.com/integrations?hsLang=en) - [ROI calculator](https://key2xs.com/roi-calculator?hsLang=en) ### Compliance - [CER Directive](https://key2xs.com/cer-directive?hsLang=en) - [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=en) - [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=en) ### Company - [SailPoint partnership](https://key2xs.com/sailpoint-partnership?hsLang=en) - [Resource center](https://key2xs.com/resources?hsLang=en) - [Events](https://key2xs.com/events?hsLang=en) - [News](https://key2xs.com/news-archive?hsLang=en) - [Contact](https://key2xs.com/contact?hsLang=en) [![Penetration tested and verified by Sekurno](https://key2xs.com/hubfs/img/badges/sekurno-pentest-badge-white.svg)](https://www.sekurno.com/verified/key2xs) [![KuppingerCole Analysts Rising Star 2026 badge for Key2XS](https://key2xs.com/hubfs/img/badges/kuppingercole-rising-star-2026-key2xs.svg)](https://key2xs.com/analyst-recognition?hsLang=en) --- ![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) Key2XS, pronounced “key to access” © 2026 Key2XS B.V. All rights reserved [Privacy](https://key2xs.com/privacy-statement?hsLang=en) Cookie Preferences Patent Pending Nr: 2040721 & 2041284 Key2XS & ActiveAuth are registered trademarks of Key2XS Assets B.V. ```json { "@context" : "https://schema.org", "@type" : "FAQPage", "mainEntity" : [ { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Managing physical keys and lock permissions through identity-driven controls: rights derived from roles, revoked automatically with the identity lifecycle, and evidenced in an audit trail linked to the identity." }, "name" : "What is physical access governance in one sentence?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Access control enforces access at the door, whether by badge, key or code. Governance decides and proves who should have that access in the first place, based on identity, role and policy, and withdraws it when the reason ends." }, "name" : "How is it different from access control?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "PIAM manages badge holders for reader-controlled doors and keeps its own identity records, synchronised from HR or IAM. Physical access governance connects to PIAM and to the IAM, makes the IAM the source of every physical right, and reaches the key-operated, offline estate that badges never covered." }, "name" : "How is it different from PIAM?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Yes. Rights travel with programmable keys and are refreshed when the key is used. Revocation is enforced at the next use and by periodic blacklist checks, and the audit trail is collected when keys and cylinders sync. The site needs no connectivity." }, "name" : "Does it work for sites without a network?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Both directives require governed, demonstrable control over physical access to premises and infrastructure. Neither prescribes a specific technology, but manual key administration cannot produce the evidence they ask for." }, "name" : "Is this required by NIS2 or CER?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "No. Physical access governance is a middleware layer. It connects the IAM system and the digital locking system you already run." }, "name" : "Do we need to replace our locks?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Key2XS is a physical access governance platform: a governance control plane connecting IAM systems (SailPoint, Microsoft Entra ID, Okta, One Identity, OpenText) to electronic key systems (iLOQ, ASSA ABLOY CLIQ), vendor-neutral in any combination." }, "name" : "Where does Key2XS fit?" } ] } ``` ```json { "@context" : "https://schema.org", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://key2xs.com", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "name" : "Physical Access Governance", "position" : 2 } ] } ```