Who should not change a combination?

• A. Never allow a commercial locksmith to change your combination
• B. Only an authorized person may change
• C. The FSO
• D. The CSA

Answer: (A)

Changing a security combination is a controlled action that must be performed by someone who is officially authorized, verified, and accountable for access control. When the person handling the change is authorized, there’s a documented process: identity is confirmed, the change is recorded, the new combination is communicated only to those who need it, and the system is tested to ensure proper operation. A commercial locksmith, while skilled, is not part of the approved security chain and may not be vetted, monitored, or bound by the same safeguards. This creates potential risks: the combination could be recorded, disclosed, or misused, or a backdoor could be introduced. By ensuring that only authorized personnel manage changes, you maintain accountability and reduce the chance of unauthorized access. In practice, trusted roles like the Facility Security Officer or other designated authorities handle or oversee such changes according to policy.