# What does a modern access control stack look like?

> Credentials on the phone, edge readers with strong cryptography, a cloud-managed policy plane, and visitor flows built into the same model. The badge is no longer the centre of gravity.

**Author:** Arif Khan — Security Infrastructure & Building Technology Strategist  
**Published:** 2025-11-28  
**Reading time:** 7 min  
**Category:** [Security Infrastructure](https://arifkhanglobal.com/ask-arif/category/security-infrastructure)  
**Tags:** Access Control, Security, Stack  
**Canonical:** https://arifkhanglobal.com/ask-arif/access-control-modern-stack

## Short answer

Credentials on the phone, edge readers with strong cryptography, a cloud-managed policy plane, and visitor flows built into the same model. The badge is no longer the centre of gravity.

## Visual explanation

Stack: Phone credential → Reader → Controller → Policy plane → Audit.

## Real-world example

A corporate HQ moved 4,200 employees from cards to phone credentials in six weeks. Lost-credential tickets dropped 92%.

## Lessons

- Phone is the new badge.
- Visitor flows belong in the same model.
- Audit is a feature, not an afterthought.

## Related projects

- Corporate HQ, NCR

## FAQ

### Are cards dead?

Not yet — they remain a fallback.

### Biometric?

Use for high-trust zones, not the front door of every room.

---

Source: https://arifkhanglobal.com/ask-arif/access-control-modern-stack
Site: https://arifkhanglobal.com · Altima Global