Run: Hotel Key Control SOP

The issuing role verifies the requester's identity, department, shift, and authorization level against the approved access list before any key is released. The issuing role confirms whether the request is for a guestroom key, staff access key, electronic key card, or master key. If the requester cannot be verified or the access level does not match the request, the issuing role stops the process and escalates to the duty manager.

The issuing role assigns the key to a single named person or approved role and records the key number, key type, date, time, recipient, and expected return time in the key log or electronic system. The issuing role confirms whether the key is physical or electronic and records any required deposit, seal number, or card identifier. The issuing role provides only the minimum access necessary for the task.

The issuing role releases a master key only to an authorized competent person with documented approval when required by property policy. The issuing role records the reason for issuance, the exact time issued, the expected return time, and the approving manager if applicable. The issuing role confirms that the holder understands the restriction against lending, copying, or leaving the master key unattended. If the master key is not returned by the due time, the issuing role escalates immediately to the duty manager and security.

The receiving role accepts the returned key, verifies the key number or electronic identifier, and confirms that the key matches the original issuance record. The receiving role checks for damage, tampering, missing tags, or signs of unauthorized duplication. If the key is damaged, altered, or does not match the record, the receiving role quarantines the key and escalates the discrepancy.

The receiving role places the returned key in the approved secure storage location or updates the electronic system to show the key as available. The receiving role ensures that master keys and restricted access keys are stored separately from general-use keys according to property policy. The receiving role confirms that the storage area remains locked and access-controlled.

The auditing role compares the physical key inventory or electronic key status against the key log at the scheduled interval or shift change. The auditing role verifies that each issued key has a matching return record, that master keys are accounted for, and that any temporary exceptions are documented. The auditing role records the audit result, including the count of keys checked, any missing keys, and any unresolved discrepancies.

The auditing role determines whether the audit found a missing key, overdue return, unauthorized issuance, damaged key, or record mismatch. If no discrepancy exists, the auditing role closes the audit record. If a discrepancy exists, the auditing role initiates the incident report, notifies the duty manager or security lead, and follows the property's lost-key or access-breach escalation procedure.

The responsible role signs or electronically confirms the completed transaction or audit record and stores it according to the property's retention schedule. The responsible role ensures the record includes the date, time, key identifier, recipient, return status, audit result, and any escalation notes. The responsible role retains the record as controlled documented information in line with the property's document control requirements.