Securing a Small Business: Which Lock Grade and Access Control Actually Makes Sense
A small retail storefront or office suite has different security math than a house — the front door gets opened hundreds of times a day, more than one person needs access on different schedules, and there's usually a back-of-house door that matters as much as the storefront.
Start with the lock grade — this one isn't optional
ANSI/BHMA Grade 1 is the standard for commercial entrances, and it's not just about strength — it's about cycle count. A Grade 2 deadbolt is rated for 150,000 cycles; a door opened 200 times a day hits that number in about two years. Grade 1's 250,000-cycle rating (and an 800,000-cycle rating for the lockset handling day-to-day traffic) is sized for commercial use in a way Grade 2 simply isn't. Full numbers in the Lock Grade Guide.
Do the arithmetic for your own traffic pattern before assuming Grade 2 is "close enough": a door opened 50 times a day (a quiet professional office) crosses Grade 2's 150,000-cycle threshold in roughly 8 years — arguably acceptable. The same door at 300 opens a day (a busy retail entrance) crosses it in under 18 months, meaning mechanical wear failure, not a break-in, becomes the realistic near-term risk. Grade 1 exists precisely for that second scenario.
A basic security walkthrough, step by step
- List every exterior door — front entrance, back/delivery door, any emergency exit that's also a usable entrance. It's common to secure the front and forget the back.
- Check each door's lock grade against the traffic table below.
- Walk the perimeter for secondary entry points — ground-floor windows, a loading dock, a roof access hatch.
- Identify who currently has keys or codes, and whether that list is actually up to date — a surprising number of small businesses can't answer this accurately.
- Check camera coverage against the entry-point list from step 1, not the other way around — see how many cameras a small business actually needs.
| Daily door openings | Years to hit Grade 2's 150,000-cycle rating | Recommendation |
|---|---|---|
| ~50/day (quiet office) | ~8 years | Grade 2 acceptable, Grade 1 still preferable |
| ~150/day (moderate retail) | ~2.7 years | Grade 1 recommended |
| ~300/day (busy retail/food service) | ~1.4 years | Grade 1 required |
Access control: who needs a key, and when
Most small businesses outgrow "everyone has a brass key" faster than they expect — an employee leaves and now you're rekeying, or you want the stockroom locked to customer-facing staff but open to management. A keypad or fob system solves this without a locksmith visit every time staff changes:
| Method | Best for | Watch out for |
|---|---|---|
| Standalone keypad | A single door, low turnover, simple budget | Short codes with no lockout are weak — see the math in the keypad tool |
| Fob / card system | Multiple doors, need to revoke access instantly when someone leaves | Higher upfront cost than a keypad |
| Master key system | Multiple doors that need shared and restricted access tiers | Losing a master key is expensive to fix — see master key systems explained |
For a deeper comparison of keypad vs. fob vs. badge specifically, see choosing access control for a small business.
Don't forget the doors that aren't the front door
- Back-of-house / delivery doors — often lower-grade hardware than the customer-facing entrance, despite being a common break-in point precisely because they're out of sight.
- Interior doors to cash-handling or stock areas — Grade 2 is reasonable here even though it's technically interior, given what's behind the door.
- Camera coverage of every entry point, sized correctly — see how many cameras a small business actually needs and the Security Camera Storage Calculator for how much footage retention actually costs in drive space.
Common failure modes in small-business security setups
- The stockroom door is Grade 3 while the front door is Grade 1. Internal shrinkage and after-hours theft both make the stockroom a real target, not a low-risk interior door.
- Nobody updates the access list. A shared keypad code from three employees ago, or a fob nobody remembers issuing, is a real gap that costs nothing to close and gets ignored anyway.
- The alarm system's exit delay doesn't match the door layout — a delay set for the front entrance doesn't help if staff also use a back door with no matching delay, leading to nuisance false alarms that eventually get the system ignored entirely.
- Insurance requirements aren't checked before buying hardware. Some commercial policies specify minimum lock grades or alarm monitoring as a condition of coverage — worth confirming with your insurer before, not after, a claim.
Opening and closing procedures: the human half of the plan
Hardware only works if the daily routine around it is consistent. A written, posted opening and closing checklist — every exterior door locked and verified, alarm armed, cash secured, cameras confirmed recording — closes a gap no amount of lock grade or camera coverage fixes on its own: an otherwise well-secured business left unlocked because closing duties fell to whoever was on shift with no consistent process. This costs nothing to implement and is worth treating as seriously as the hardware decisions above.
A phased budget approach for a business that can't do everything at once
| Phase | Priority items |
|---|---|
| Phase 1 — immediate | Grade 1 locks on every exterior door; written opening/closing checklist |
| Phase 2 — near-term | Cameras on entrances and point of sale; keypad or fob access if multiple staff need entry |
| Phase 3 — as budget allows | Full interior camera coverage; monitored alarm system; master key or full access-control system |
This ordering reflects where the actual risk concentrates first — a business that's done Phase 1 well and nothing else is meaningfully more secure than one with an elaborate camera system behind a Grade 3 front door.
FAQ
Does my business actually need Grade 1 on every door?
Every exterior door, yes, given the cycle-count math above. Interior doors that aren't cash-handling or stock areas can reasonably stay at Grade 2 or even Grade 3.
Is a fob system worth it for a 3-person business?
Usually not — a keypad with a lockout is simpler and cheaper at that scale, and the instant-revoke advantage of a fob system matters most once staff turnover becomes routine.
How often should we audit who has access?
Quarterly at minimum, and immediately after any staff departure — access lists drift out of date faster than most businesses expect.
Does upgrading lock grade actually lower insurance premiums?
It depends entirely on the insurer and policy — ask directly rather than assuming, since some carriers do offer meaningful discounts for certified hardware and monitored alarm systems.
Is it worth hiring a security consultant for a single small location?
Usually not necessary for one location — the walkthrough process outlined above covers the core decisions a consultant would otherwise charge for; a consultant becomes more worthwhile for multi-location businesses needing consistent policy across sites, or for higher-risk operations (cash-intensive businesses, high-value inventory) where the stakes justify the added cost.
A minimum-viable setup
For a single-location small business: Grade 1 hardware on every exterior door, a fob or keypad system on doors more than one person needs (with a lockout enabled on any keypad), and cameras covering every entrance plus the point of sale. That's a defensible baseline without over-engineering a security budget a small business doesn't have.