Issuing to a person rather than to a contractor
A key issued to a company is held by nobody in particular. When it goes missing, the honest answer is that it could have been any of several people, which is not an answer at all. Issuing to a named individual, recorded against their name and the date, means that a lost key produces a short list rather than a shrug. It also makes the holder personally accountable for it.
The same applies to access fobs and alarm codes. A code that four people know is a code that will eventually be known by someone who no longer works on the site. Individual codes, where the system supports them, are far preferable, because they also show which attendance disarmed the building and at what time. Where individual codes are not available, the change process on staff turnover matters much more.
