Hotel & Hospitality Security: Lobby, Corridor, Parking & Back-of-House Coverage

A hotel is one of the most security-complex environments in commercial real estate. It must simultaneously serve as a welcoming, open-access public destination for guests and visitors, while maintaining the physical security of hundreds of private guest rooms, high-value food and beverage operations, executive areas, financial operations, and sensitive back-of-house services. The security team must be visible enough to provide reassurance without being intrusive enough to make guests feel they are under surveillance.

Bangladesh's premium hotel sector — anchored by five-star and five-star-deluxe properties in Dhaka, Chittagong, and Cox's Bazar — operates to international brand standards that include specific security requirements. This guide covers the complete hotel security technology stack, from lobby CCTV and keycard access through corridor surveillance, parking management, pool and spa security, and back-of-house access control.

Hotel Security Layers: A Perimeter-to-Room Architecture

Hotel security is best understood as a series of concentric layers, each providing progressively more restricted access as one moves from the public exterior to private guest accommodation.

Layer 1 — External perimeter: Car park, driveway, main entrance canopy, and external grounds. Public access but under CCTV monitoring.

Layer 2 — Lobby and public areas: Main lobby, restaurant, bar, fitness centre, pool, and meeting facilities. Public access with passive CCTV monitoring and trained security staff observation.

Layer 3 — Guest room floors: Lift access to guest floors requires a valid room keycard. Non-guests cannot reach guest room corridors.

Layer 4 — Individual guest rooms: Each room is accessible only to the guest with the valid room keycard, the floor housekeeping supervisor's master card, and the hotel's grand master card (retained by hotel security for emergency use).

Layer 5 — Restricted back-of-house areas: Staff areas, kitchen, laundry, storage, financial office, security room, and IT room require specific staff credentials. Guests and visitors do not have access.

Each layer has specific technology requirements. The security design must address all five layers coherently.

Lobby CCTV: Comprehensive Coverage Without Oppressive Atmosphere

The main lobby is the hotel's first impression for every guest. Camera design in the lobby must achieve comprehensive security coverage while contributing to, rather than detracting from, the hotel's aesthetic.

Practical recommendations:

Dome cameras with smoked covers are less visually intrusive than bullet cameras in lobby environments. Positioning cameras in ceiling coffers or integrated into light fittings reduces their visual impact while maintaining field of view.

Camera placement should cover: the main entrance (facial capture of all persons entering), the reception desk (full view of reception counter area and interactions), all seating areas in the lobby, the concierge desk, the lift lobby (capturing who boards each lift bank), and the entrance to restaurant, bar, and meeting facilities from the lobby.

Video resolution of 4 MP or higher in the main lobby enables facial image quality adequate for identification in incident investigation. WDR (Wide Dynamic Range) processing is essential at the main entrance, where the camera must handle the contrast between bright exterior daylight and the lobby interior.

Pan-Tilt-Zoom (PTZ) cameras: One or two PTZ cameras in the lobby, positioned to cover the full space, allow security operators to actively monitor and track persons of interest. The PTZ complement to fixed cameras enables responsive monitoring without requiring a dense fixed camera array.

Hotel Keycard Access Control: Magnetic Stripe vs. RFID vs. Mobile Key

Guest room access control is a foundational element of hotel security. The technology choice affects not only security level but operational efficiency, guest experience, and long-term system economics.

Magnetic Stripe Keycards

Magnetic stripe hotel keycards are the legacy technology still in use at many Bangladesh hotels. They are low cost to produce, compatible with widely available lock hardware, and familiar to guests. However, they have significant limitations: the magnetic stripe degrades with exposure to mobile phones, magnets, and physical wear; the card must be physically inserted into the lock (contact required); and the card provides no audit log at the lock itself (only at programming stations).

For new hotel installations in Bangladesh, magnetic stripe locks should not be specified. Their limitations in security audit trail and operational reliability make them inferior to RFID alternatives at what is now a comparable cost.

RFID (Contactless) Keycards

RFID hotel keycards (operating typically on MIFARE Classic or MIFARE DESFire platforms) communicate with the door lock through radio frequency — no physical contact required. The card is presented to the reader and the lock opens if the card is valid.

RFID locks provide online audit trail capability (when connected to the hotel management system over Wi-Fi or Bluetooth), allowing the front desk to see when a room was last accessed and by which card. This is operationally valuable for security investigations and for housekeeping management.

Most RFID hotel lock systems also support a wristband or key fob format — popular for spa, pool, and fitness centre access, where guests prefer not to carry a wallet card.

For Bangladesh 5-star hotels and higher-end 4-star properties, RFID keycard locks from Dormakaba, ASSA ABLOY (Vingcard system), or SALTO are the leading brands deployed in new installations. Each provides online lock management capability, flexible card programming, and the reliability expected in premium hospitality environments.

Mobile Key

Mobile key technology allows guests to use their smartphone as a digital room key — opening the door by holding the phone near the lock's Bluetooth reader. The room key is delivered to the guest's mobile phone via the hotel's app, usually upon check-in confirmation.

Mobile key improves the guest experience by eliminating keycard distribution and retrieval (particularly valuable for direct-booked guests who complete mobile check-in before arriving at the hotel). It also eliminates lost card re-issue — the digital key is simply re-issued via the app.

The leading hotel RFID lock brands (Dormakaba, ASSA ABLOY Vingcard) support mobile key as an upgrade to their RFID lock infrastructure. Mobile key deployment requires the hotel to have the brand's property management system integration and the mobile key module from the lock brand.

Corridor CCTV on Guest Room Floors

Corridor cameras on guest room floors serve multiple purposes: deterring theft from rooms (a corridor camera discourages anyone from loitering at room doors), monitoring for suspicious behaviour (a person trying multiple room doors is visually detectable), and providing evidence for incident investigations.

Camera design for guest floor corridors must respect the privacy expectation of guests. Cameras are positioned to cover the corridor from end to end — capturing all persons walking through — but must not have sight lines that look into open room doorways or capture room interiors when doors are opened. The camera angle must be carefully verified on-site during installation.

For long corridors (typical in large hotel room floors, which may extend 50–80 metres), a combination of wide-angle dome cameras at corridor mid-points and fisheye cameras at corridor ends provides complete coverage with minimal camera count.

Corridor cameras connect to the hotel's CCTV NVR system. Footage is typically retained for 30 days — sufficient for most investigation timelines and consistent with reasonable guest privacy expectations.

Pool, Spa, and Fitness Area Security

Hotel recreational facilities present specific security considerations.

Pool area: Cameras at pool deck access points record who enters the pool area. No cameras inside the pool facility itself — guests expect complete privacy in swimwear areas. Camera positioning at the pool entrance is sufficient for security purposes.

Spa: The spa environment is among the most privacy-sensitive areas of a hotel. No cameras inside treatment rooms. Camera coverage of the spa reception area, corridor access, and locker room entrance (exterior only) provides necessary security coverage without intruding on the therapeutic environment.

Fitness centre: Camera coverage of the fitness centre entrance. Inside the fitness centre, cameras are more acceptable than in spa or pool settings — guests understand that a shared gym is a semi-public space. Cameras should be positioned to cover the equipment area as a whole, not focusing on individual users. Signage informing guests of CCTV in the fitness centre is required.

Wristband access management: RFID wristbands assigned to guests at check-in, programmed for pool, spa, and gym access during their stay, enable controlled access without requiring guests to carry keycards to recreational areas. When a guest checks out, their wristband credentials are automatically deactivated.

Back-of-House Access Control: Kitchen, Laundry, Storage

Back-of-house areas are where operational security vulnerabilities are highest. Kitchens contain high-value food and beverage stock. Laundry areas have access to guest property left in rooms. Storage areas contain hotel assets, cleaning materials, and sometimes alcohol and tobacco stock.

Staff access control: RFID cards or biometric access for all back-of-house areas. Staff credentials are programmed for their specific work area — a kitchen porter has kitchen access, not laundry or storage access. A housekeeper has housekeeping storage access and the floors they are assigned to, not financial office or security room access.

Kitchen CCTV: Kitchen CCTV coverage focuses on the receiving dock (where deliveries are received and verified) and the main kitchen exit to the dining area (monitoring what leaves the kitchen). Inner kitchen coverage may be appropriate for food safety monitoring (temperature compliance, hygiene procedures) as well as security, subject to appropriate staff notice.

Loading dock and goods receiving: The hotel's goods receiving dock is a significant security point — all deliveries enter through this point, creating opportunities for unauthorised persons or goods to enter the hotel. CCTV at the loading dock, combined with a signed delivery log managed by the receiving department, provides the audit trail for goods receipt. Access control ensures that only authorised staff can open the dock entry from inside.

Financial office: The hotel's financial office (accounts payable, revenue, payroll) and the front desk cash handling area require access control restricting access to finance and management staff only.

Guest Privacy vs. Security Balance

The fundamental tension in hotel security design is between adequate security coverage and respect for guest privacy. The approach that balances these considerations:

Covered areas (CCTV appropriate): All common areas accessible to multiple guests or the public — lobby, corridors, restaurants, bars, pool entrance, gym entrance, car park, lift cars, lift lobbies, and all back-of-house operational areas.

Not covered by CCTV: Individual guest rooms, pool and spa changing rooms, toilets, bathroom areas, and inside spa treatment rooms.

Transparent to guests: Hotels should include clear notification of CCTV coverage in their privacy policy, accessible at check-in and on the hotel website. This transparency is required under Bangladesh's PDPO 2025 and is consistent with international hotel brand standards.

The threshold for reviewing footage should be defined in policy — footage is reviewed only in response to a reported incident, not as routine monitoring of guest behaviour. This policy limits privacy impact while maintaining the security value of the recorded footage.

Bangladesh 5-Star Hotel Security Standards

Bangladesh's five-star hotels — the InterContinental Dhaka, Pan Pacific Sonargaon, Radisson Blu Dhaka Water Garden, Westin Dhaka, and Sheraton Dhaka (the Grand Sylhet) — operate under international brand standards that include specific physical security requirements. Brand security audits assess:

• CCTV coverage of all required areas
• Electronic keycard lock system capability (online locks preferred, offline acceptable for lower-risk areas)
• Staff background check processes
• Security staff training standards
• Emergency procedures (fire evacuation, lockdown, medical emergency)
• CCTV footage retention (brand standards typically require 30 days minimum)

SSAL designs and installs security systems for Bangladesh's hospitality sector, including CCTV, access control, and IP PA for hotels, resorts, and serviced residences. Our hospitality security designs meet international brand standards while respecting the aesthetic and guest experience requirements of premium properties.

Get Free Consultation — Contact SSAL's hospitality security team to discuss your hotel's security requirements. We will design a security system that protects your guests, staff, and assets while enhancing — not compromising — the guest experience that defines your property's brand.