Definition
An access control and alarm monitoring system is the combined hardware and software that decides who may pass through a given door at a given time and records every attempt: credential readers and electrified locks at the opening, controller panels that hold the access rules and make the decision, and a head-end server that issues credentials and stores the event log. It is abbreviated ACAMS and is also written as an access control and monitoring system.
The access decision does not happen at the reader and it does not happen at the server. It happens at the controller panel in the nearest closet, which is why a properly specified system keeps admitting the right people through a network outage, and why knowing where that decision lives separates a system that degrades gracefully from one that strands people on the wrong side of a locked door.
Key takeaways
- The access decision is made at the controller panel, not at the reader and not at the head-end server, which is why properly specified panels keep working through a network outage.
- Monitoring only works if door position switches are installed and commissioned. Without them, forced-door and door-held-open alarms never fire.
- Magnetic locks are allowed on egress doors, but sensor or hardware release, release on loss of power, and release on fire alarm must each work independently.
- The credential sets the security ceiling. Legacy 125 kHz proximity cards are unencrypted and can be copied with inexpensive tools no matter how the software is configured.
- Undersized power supplies and missing battery backup cause more intermittent access control faults than any software problem.
What is an Access Control and Alarm Monitoring System?
An access control and alarm monitoring system is layered architecture rather than a single product. At the opening sit the field devices, meaning a credential reader, an electrified lock, a door position switch that reports whether the door is actually closed, and a request-to-exit device. Those wire back to a controller panel in a nearby closet, which stores the cardholder database and the schedule rules and makes the lock-or-release decision itself. The panel reports upward to a head-end server running the management software, where credentials are issued, access levels are built, and the event log accumulates.
The monitoring half is not an accessory. Every grant, denial, forced-door and door-held-open condition is timestamped and retained, and on many projects that audit trail is the reason the system was purchased.
What it does
Every badge presentation sets off three jobs at once. An access control and alarm monitoring system authenticates the credential against a cardholder record. It authorizes that record against a schedule and an access level, deciding whether this person may pass through this opening at this hour. And it logs the outcome either way.
The logging is what makes it a monitoring system rather than an expensive lock. A denied badge at three in the morning at a door that cardholder has never used is worth reviewing, and it only exists to be reviewed if the system captured it. The same applies to a door propped open on a loading dock: with no door position switch reporting state, nothing in the system knows it is open.
How it is designed
Designing an access control and alarm monitoring system starts from the door schedule, which lists every opening, its lock type, whether it is fire-rated, whether it sits on a means of egress, and whether it should fail secure or fail safe. That drives panel count and placement, because panels are sized by door capacity and need to sit within cable distance of the openings they serve.
Degraded-mode behaviour comes next. Panels hold their cardholder database locally and keep deciding when the network or the head end is unavailable, so the real questions are how many cardholders a panel caches, how long it runs isolated, and what is lost while it does. Integration comes last: video tied to access events, elevator control, and visitor management. The credential technology is the exception and should be settled early, because it determines every reader on the job.
What it is built from
Readers, credentials, electrified door hardware, controller panels, power supplies with battery backup and management software make up an access control and alarm monitoring system. The credential sets the real security ceiling. Legacy 125 kHz proximity cards transmit a fixed facility code and card number with no encryption, and the tools that copy them cost less than a case of card stock, so no software setting compensates for the choice. Credentials at 13.56 MHz such as iCLASS Seos or MIFARE DESFire use encryption and mutual authentication, where the reader and the card each verify the other. Frequency alone is not the test: MIFARE Classic runs at the same 13.56 MHz but relies on a proprietary cipher that has been broken, and should not be treated as secure.
Locking hardware is the other half, and electric strikes, magnetic locks and electrified mortise locks each fail differently and carry different code implications. Power supplies are routinely under-specified and are a leading cause of intermittent faults that get blamed on software.
Where it fails
When an access control and alarm monitoring system fails, life safety is the failure that matters. Magnetic locks are permitted on egress doors, since they are fail-safe by nature and drop when power is removed, but IBC section 1010.1.9.7 and NFPA 101 section 7.2.1.6.2 require several release paths to work independently and missing any one is an inspection failure. The door must release on a sensor detecting an approaching occupant or on operation of door-mounted hardware, on loss of power to the lock or the sensor, and on fire alarm activation, remaining unlocked until the fire system is reset.
Where a push button is used it is typically mounted 40 to 48 inches above the floor within five feet of the opening, clearly labeled for exit, and it must interrupt lock power directly for a timed period rather than asking the access software for permission. Delayed egress is a separate provision with its own time limit. The recurring field failure is coordination: the fire alarm interface is scoped to a different subcontractor and never gets wired, and it surfaces at the inspection walk.
After life safety come the quieter ones. Door position switches installed but never commissioned, so forced-door and held-open alarms never fire and the monitoring half does nothing. Cardholder records left active after termination. And panels without battery backup, so a power blip drops an entire wing.