INSIGHTS • ACCESS CONTROL • PROJECT DELIVERY
Planning an Access Control System Upgrade: What Should You Consider Before Installation Starts?
A practical guide to the physical, technical and operational considerations that should be addressed before an access control system upgrade begins.
Fortiva Projects
7 September 2026
9 min read
Introduction
An access control system upgrade can appear relatively straightforward: replace the existing readers and controllers, migrate the users and bring the new system online.
In practice, the system extends far beyond the reader mounted beside the door.
Locking hardware, door construction, power supplies, controllers, network infrastructure, cabling, emergency release devices, credentials and integrations with other building systems can all affect how an upgrade needs to be designed and delivered.
On a live site, there is an additional challenge: existing doors often need to remain secure and operational while the old system is progressively replaced.
Understanding these requirements before installation begins can significantly reduce disruption, unexpected additional works and programme risk later in the project.
THE KEY POINT
A successful access control upgrade starts with understanding the doors, infrastructure and operational requirements — not simply selecting a replacement system.
ARTICLE CONTENTS
In this Guide
01
02
03
Understand the Existing Access Control Estate
Define the Security and Operational Requirements
Survey Every Door Properly
04
05
Consider Controllers, Cabling and Power Infrastructure
Plan Credentials and User Migration
06
Consider System Integrations
07
Plan the Migration on a Live Site
08
09
Agree Testing and Acceptance Before Installation
Documentation, Training and Handover
01
Understand the Existing Access Control Estate
Before designing an access control upgrade, establish exactly what is already installed and how the existing system operates.
This should extend beyond identifying the manufacturer of the readers and controllers. Each controlled door may include locking hardware, request-to-exit devices, emergency break-glass units, door contacts, power supplies, interfaces and associated cabling that could influence the replacement design.
The existing control infrastructure should also be reviewed. Controller locations, available panel capacity, network connectivity, power supplies, battery backup and cable routes can determine whether existing infrastructure can be retained or whether additional enabling works will be required.
Existing documentation is useful, but it should not replace a physical survey. Door schedules and drawings may no longer accurately represent an estate that has been modified over many years.
• Reader types and locations
• Existing controllers and panel locations
• Locking hardware, including maglocks and electric strikes
• Request-to-exit devices and emergency door release arrangements
• Door contacts and monitoring
• Power supplies and battery backup
• Existing cabling and containment
• Network connectivity to controllers
• Existing credentials and user database
• Interfaces with other building systems
• Door schedules, drawings and system documentation
02
Define the Security and Operational Requirements
Before selecting equipment or developing the installation design, define what the access control system actually needs to achieve.
Access requirements are rarely identical across an entire building or estate. Staff entrances, management areas, plant rooms, loading bays, offices and restricted areas may all require different levels of control, monitoring and user permissions.
It is also important to understand how the site operates. Opening hours, shift patterns, contractors, cleaning teams, maintenance personnel and temporary users can all influence how access groups, schedules and credentials need to be configured.
Operational requirements should be agreed with the relevant stakeholders before the system design is finalised. This helps avoid discovering during commissioning that the proposed solution does not reflect how the building is actually used.
Consider:
Who requires access and to which areas
Access levels and user groups
Time schedules and operating hours
Staff, contractors and temporary users
Restricted or high-security areas
Visitor access requirements
Door monitoring and alarm requirements
Audit trail and reporting requirements
Lockdown or emergency operating requirements
Who will administer the system after handover
03
Survey Every Door Properly
Access control upgrades are heavily influenced by the physical condition and construction of each controlled door.
Even where readers and controllers are being replaced on a like-for-like basis, the existing locking arrangement and door hardware should be assessed before installation begins.
Different door types can require very different solutions. Timber, aluminium, steel and glazed doors may use maglocks, electric strikes, solenoid locks or other locking arrangements, each with different requirements for mounting, cabling, power and emergency release.
Existing equipment should also be checked rather than automatically assumed to be suitable for reuse. Locks, door contacts, request-to-exit devices, break-glass units and power supplies may have been in service for many years or modified since the original installation.
The survey should also identify practical installation constraints such as cable routes, containment, ceiling access, fire stopping and any requirement for builders' or electrical works.
Consider:
Door and frame construction
Existing locking hardware and its condition
Reader position and mounting requirements
Request-to-exit devices
Emergency break-glass arrangements
Door contacts and monitoring
Existing cable routes and containment
Power availability and power supply locations
Ceiling and service-area access
Fire stopping requirements
Interfaces with automatic door operators
Any builders' or electrical works required
DON'T OVERLOOK THE DOOR
Access control is not simply an IT system. The physical door, locking hardware, emergency release arrangements and surrounding infrastructure are fundamental to whether the finished system will operate reliably.
04
Consider Controllers, Cabling and Power Infrastructure
The equipment installed at the door is only one part of an access control system. Controllers, power supplies, network connections and cabling all need to be assessed as part of the upgrade design.
Existing controller locations should be surveyed to establish available capacity, condition and accessibility. Where a new system requires replacement controllers, consideration should also be given to whether the existing enclosures, power supplies and network infrastructure can be reused or need upgrading.
Power is particularly important. Locks, readers, controllers and associated devices may have different power requirements from the equipment being replaced. Battery backup and resilience requirements should also be considered, particularly where doors form part of critical security arrangements.
Existing cabling should not automatically be assumed suitable simply because it is already installed. Cable type, condition, routes, distances and available cores should be checked against the requirements of the proposed equipment.
Consider:
Existing controller and panel locations
Controller capacity and expansion requirements
Network connectivity and available switch ports
Existing cable types, routes and condition
Reader and locking-device cable requirements
Power supply capacity
Battery backup and resilience
Electrical supplies to controller locations
Additional containment requirements
Fibre or network infrastructure between buildings or areas
Space within existing cabinets and risers
Requirements for new electrical supplies or enabling works
05
Plan Credentials and User Migration
Replacing an access control system also means deciding how existing users and credentials will be transferred to the new platform.
On larger sites, the existing system may contain hundreds or thousands of cardholders, multiple access groups and complex time schedules. Simply recreating everything from the legacy system can carry forward outdated users, unnecessary permissions and historic configuration that is no longer required.
The migration therefore provides a useful opportunity to review who actually requires access, remove obsolete records and confirm that access permissions still reflect current operational and security requirements.
The type of credential should also be considered. A new platform may support physical cards or fobs, mobile credentials, biometrics or a combination of technologies. Any change of credential can introduce additional logistical requirements around enrolment, distribution and user communication.
The migration plan should consider:
Number of existing cardholders and credentials
Existing card or fob technology
Mobile credential requirements
Biometric requirements, where applicable
Existing access groups and permissions
Time schedules and access profiles
Removal of inactive or obsolete users
Whether existing user data can be migrated
Credential enrolment and distribution
Temporary or contractor credentials
Communication with building users
Administration responsibilities during the transition
06
Consider System Integrations
Replacing an existing CCTV system on a live site requires more than an installation programme. The transition from the old system to the new one needs to be planned so that security coverage and site operations are maintained throughout the project.
A phased approach is often appropriate, particularly on larger estates. Cameras, network infrastructure and recording equipment can be migrated in controlled stages rather than attempting to replace the entire system at once.
The sequence should consider which cameras are operationally critical, when existing equipment can be removed, when new equipment becomes available to operators and how any temporary loss of coverage will be managed.
Installation windows also need to reflect the environment. In retail, commercial and other operational sites, access restrictions, trading hours, permits, control-room coordination and out-of-hours working can all influence the programme.
THINK BEYOND ACCESS CONTROL
An access control upgrade can affect CCTV, intercoms, automatic doors, lifts and other building systems. Identifying these dependencies early helps prevent an apparently simple system replacement from creating operational problems elsewhere.
07
Plan the Migration on a Live Site
Replacing access control on an occupied building requires careful planning because security and day-to-day access often need to be maintained throughout the works.
Unlike some technology upgrades, taking an access-controlled door offline can immediately affect how people enter, leave or move around a building. Staff entrances, service areas, plant rooms, loading bays and restricted spaces may all need different temporary arrangements while equipment is being replaced.
A phased migration is therefore often preferable. Doors can be grouped into manageable areas or phases, with each stage installed, commissioned and proven before progressing to the next. The sequence should also consider controller dependencies, as replacing a panel may affect several doors simultaneously.
The project team should agree how each door will operate during the changeover and what happens if the new equipment cannot be commissioned as planned. Temporary security arrangements, manual guarding or the ability to revert to the existing system may be required for particularly critical locations.
Works should also be coordinated around building operations, access restrictions, permits and other contractors working in the same areas.
The migration plan should consider:
Which doors or areas should be migrated first
Controller and door dependencies
Maintaining secure access during changeover
Temporary access and security arrangements
Out-of-hours or restricted working requirements
Coordination with building management and security teams
User and occupant communication
Access permits and work-area restrictions
Commissioning immediately after installation
Contingency arrangements for failed migrations
Maintaining emergency escape arrangements
When legacy equipment can safely be decommissioned
LIVE-SITE ACCESS CONTROL UPGRADES
The objective is not simply to install the new system. It is to move from the existing platform to the replacement system while maintaining security, safe access and normal building operations throughout the transition.
08
Agree Testing and Acceptance Before Installation
Testing requirements should be agreed before installation begins rather than being determined at the end of the project.
Each controlled door should be tested as a complete system. This means checking more than whether a credential unlocks the door. Readers, locking hardware, request-to-exit devices, emergency release arrangements, door monitoring and associated alarms should all operate as intended.
Access permissions should also be tested using representative users and access groups. Where the system integrates with CCTV, intercoms, lifts, automatic doors or other platforms, these functions should form part of the acceptance process.
Any failures or outstanding works should be recorded and tracked through to resolution before the relevant area or phase is formally handed over.
Testing should consider:
Valid and invalid credential operation
Access groups and time schedules
Reader operation
Lock release and secure operation
Request-to-exit devices
Emergency break-glass operation
Door contacts and forced-door alarms
Door-held-open alarms
Controller communications
Battery backup and power-failure behaviour
CCTV, intercom and other system integrations
Automatic door and lift interfaces
Control room alarm/event visibility
Agreed fail-safe or fail-secure operation
Recording and resolution of defects
Client acceptance and sign-off
09
Documentation, Training and Handover
A successful access control upgrade should leave the client with a system that can be operated, supported and maintained effectively after the project team has left site.
Accurate documentation is particularly important where an existing estate has been progressively upgraded. Door numbers, controller locations, device details, network information and cable routes should reflect what has actually been installed rather than relying solely on the original design information.
System administrators and operational teams should also receive appropriate training. This may include creating and removing users, managing access permissions, responding to door alarms, reviewing events and understanding how integrated systems operate.
Handover documentation should be reviewed for completeness before the project is closed, with outstanding defects or actions clearly identified and assigned.
The final handover should typically include:
Updated door and equipment schedules
As-installed drawings and schematics
Controller and panel information
Reader and locking-device details
Network and IP information where applicable
Configuration and system records
Access group and permission information
Testing and commissioning records
Training for administrators and operators
User and system administration guidance
Warranty and support information
Outstanding defects and actions
Formal client acceptance and sign-off
ACCESS CONTROL PROJECT DELIVERY
Managing an Access Control Upgrade
A successful access control upgrade involves much more than replacing readers and controllers. The physical doors, locking hardware, infrastructure, user migration, integrations and operational requirements all need to work together.
On live sites, the migration itself can be just as important as the technology being installed. Maintaining security and normal building access while progressively moving from an existing platform to a new system requires careful planning, coordination and testing.
Fortiva Projects provides independent access control project management, helping clients plan and deliver upgrades from initial survey and design coordination through installation, migration, commissioning and final handover.
HOW WE CAN HELP