Reconcile Lockboxes Without Publishing the Access Trail

Lockboxes move between listings, turns, and maintenance jobs. An inventory reconciliation shows where each device is assigned and who owns the next control action without placing codes in a broadly visible tracker.

Quick Overview

Track a device identifier, property, placement description, purpose, installed date, authorized custodian, code-vault reference, last rotation event, expected removal date, physical verification time, and exception status. The inventory should point to the approved credential system rather than duplicate secrets.

Pair the record with the access code rotation log and reconcile showing events through the showing access record.

Verify both directions

Start from the inventory and confirm each listed device. Then start from active properties and identify every device present. This two-way check catches an unlisted lockbox as well as a missing one.

Common Mistakes

Never put codes in filenames, photographs, email subjects, or general tickets. Do not reuse a credential merely because the physical box moved, and do not mark removal complete from a verbal update alone.

Common Questions Answered

If a device cannot be located, follow the approved security incident and credential rotation procedure. If ownership is disputed, restrict access and escalate rather than assigning custody by assumption.

Ready to close the inventory

Resolve every unmatched device, confirm credential references are restricted, and schedule removal for assignments that have ended.

See CISA guidance on physical security for general security context.

Published September 9, 2026.