Multi-Zone Access Control Securing ICU, Pharmacy & Medical Records in a Dhaka Private Hospital

Over a 12-month period preceding the project, the hospital experienced three confirmed medication theft incidents from the pharmacy. In each case, controlled and high-value medications — including opioid analgesics and injectable antibiotics — were found to be missing from the medication storage area, identified during routine stock reconciliation. The pharmacy manager had reported each incident to hospital management, but without access control logging, it was impossible to determine which staff members had accessed the storage area in the relevant periods. Two incidents were suspected to involve after-hours access, but the pharmacy was secured only with a standard key lock that had at least 12 key copies in circulation among pharmacy staff, nursing supervisors, and the facilities team. Internal investigation could not establish responsibility, and no disciplinary action was possible.

The pharmacy theft problem was compounded by the absence of any systematic access management. Keys were informally duplicated over years of staff turnover; there was no record of how many copies existed or who held them. A former pharmacy staff member who had resigned 14 months earlier had never returned their key — the pharmacy manager only realized this during the investigation of the second theft incident, when they attempted to inventory key holders. Rekeying the pharmacy lock had been discussed but not actioned due to operational disruption concerns.

The ICU access situation posed a different but equally serious problem. The ICU on Floor 4 had no access control at all — the unit's double doors were routinely left open to allow easy staff movement. Patient family members had learned that they could enter the ICU by simply walking through the doors during the frequent periods when they were propped open. The ICU Head Nurse had documented 14 incidents over eight months of family members entering the unit and disturbing other patients, interfering with nursing procedures, or distressing staff. In two of those incidents, family members in emotional distress had become verbally aggressive with nursing staff inside the ICU. The hospital's nursing union had formally raised ICU access control as a safety issue in their quarterly management meeting.

The medical records department, also on Floor 2, stored 12 years of patient files including sensitive diagnoses, billing records, and legal correspondence. It was secured by a standard key lock. Patient confidentiality concerns, and the forthcoming Personal Data Protection Ordinance (PDPO) 2025, made unsecured access to medical records a compliance risk. The hospital's legal counsel had advised that uncontrolled access to patient records could create liability exposure in the event of a data privacy complaint under the new ordinance.

SSAL designed a 32-door access control system covering the pharmacy, ICU, medical records department, and additional sensitive areas including the blood bank and medical store.

ICU Access — ZKTeco SpeedFace V5L Touchless Facial Recognition: The ICU entry was fitted with a ZKTeco SpeedFace V5L terminal mounted at the double-door entrance. The SpeedFace V5L uses infrared 3D facial recognition that works reliably with surgical masks — an important clinical requirement confirmed during product testing. Staff recognition range is up to 2 metres, with recognition speed under 0.5 seconds. The terminal is positioned to allow staff to walk through without breaking stride once recognition is confirmed, maintaining workflow efficiency that ICU staff demanded as a non-negotiable requirement.

The ICU access list was defined by the ICU Medical Director and Head Nurse: clinical staff (ICU doctors, ICU nurses, critical care technicians) have 24-hour access; all other hospital staff (ward nurses, administrative staff, cleaning staff) have access only between 07:00 and 20:00 and only with prior schedule entry by the ICU Head Nurse. No patient family members are in the access database — the only exception mode for family visits is a scheduled visitor slot, where a nurse accompanies the visitor into the unit and returns them to the waiting area.

The ICU doors are electric-strike controlled with the fail-safe mode configured so that all doors unlock automatically in a fire alarm event (integrated with the hospital's fire alarm panel relay output). A door position sensor triggers an alert to the security monitoring station if the ICU door is held open for more than 60 seconds.

Pharmacy Access — Card + PIN Dual-Factor Authentication: The pharmacy was fitted with Hikvision DS-K1T320MFWX card and PIN readers at the main dispensing area door and a separate reader at the controlled drug storage room door. Dual-factor authentication (card presentation followed by PIN entry) was specified for pharmacy access, requiring that even if a card is lost or stolen, access cannot be granted without the PIN. The controlled drug storage requires a second authentication: after the dispensing area card+PIN, the inner controlled drug room requires the card+PIN again on a separate reader — effectively providing a two-stage access control for the highest-risk area.

Pharmacy access permissions are limited to 14 authorized pharmacy staff members. All access events — entry time, individual identity, exit time — are logged in real time. An automated daily access report is emailed to the pharmacy manager and hospital medical director each morning, covering all controlled drug room access events from the previous 24 hours. Any access event between 22:00 and 06:00 triggers an immediate SMS alert to the pharmacy manager and security supervisor.

Medical Records — Hikvision Card Reader with Time-Schedule: The medical records room received a Hikvision DS-K1T320MFW card reader, with access limited to authorized medical records staff (8 persons) during business hours (08:00-20:00). After-hours access requires the security supervisor to grant temporary access via the management software — a deliberate friction point that creates an audit trail for any after-hours access.

Central Access Management — Bosch Access Professional Edition (APE): All 32 controlled doors across the hospital — pharmacy, ICU, medical records, blood bank, medical store, server room, and administrative restricted areas — are managed through the Bosch Access Professional Edition software platform. APE provides a real-time map view showing all door states, generates automated reports, manages time schedules, and maintains a searchable audit log retained for 24 months. The hospital's Head of Security and the Medical Director have web-based access to the platform for report generation and investigation without requiring the facilities team to be physically present.

When a staff member terminates employment, their access card is immediately deactivated in the APE system — an enrollment/deactivation procedure that SSAL embedded in the hospital's HR departure checklist to prevent recurrence of the key-holder inventory problem.