What is the correct procedure if a key or badge is lost?

• A. Notify supervisor only.
• B. Notify supervisor, log the loss, and follow key-control replacement procedures.
• C. Continue using the badge until someone notices.
• D. Immediately issue a new badge without logging.

Answer: (B)

When a key or badge is lost, the immediate priority is to maintain security and accountability. Notifying your supervisor right away allows a security check to be started, the credential to be deactivated if possible, and any necessary investigations to begin. Logging the loss creates an official record that tracks who had the item, when it disappeared, and where it was last seen, which is essential for preventing misuse and for future audits. Following the established key-control replacement procedures ensures that the lost credential is properly revoked and a new, validated credential is issued with the correct access permissions updated. This combination maintains continuous control over access and prevents security gaps.

Choosing only to notify without logging or following the replacement process leaves no formal record and no guarantee the badge is revoked in time. Continuing to use the badge after loss is a serious risk because it could be used by someone else. Issuing a new badge without logging bypasses accountability and makes it harder to track access history.