How to use this scorecard
Print this page or save it as a PDF. Define thresholds before the pilot begins, record both successful and failed journeys, and segment results by user group, location, reader and platform. Do not replace measured results with a vendor demonstration.
1. Scope and baseline
Record the business problem, current authentication method, target users, exact card model and firmware, credential technologies, readers, controllers, operating systems, identity provider, applications and expected volume. Capture the current failure, support and recovery baseline.
2. Enrollment
Measure invitation completion, successful first enrollment, time to enroll, failed fingerprint capture, accessibility exceptions and administrator effort. Record where the biometric template is created and stored and who can initiate reset or re-enrollment.
3. Authentication and access
Measure first-attempt success, retries and time for every door, workstation, browser and application path. Include wet, dry or worn fingerprints, protective equipment, different card orientations, older readers and peak-use conditions.
4. Loss, recovery and offboarding
Run timed exercises for loss reporting, credential revocation, temporary access, identity proofing, replacement, re-enrollment and employee departure. Confirm old credentials cannot be used and that recovery does not fall back to a weaker phishable method.
5. Operations and total cost
Track help-desk contacts, inventory accuracy, failed cards, replacements, reader changes, training, management tooling and integration work. Compare total pilot and forecast operating cost with the current method and with at least one alternative.
Decision record
End with one of three outcomes: proceed to a bounded expansion, remediate and repeat defined tests, or stop. Document exceptions, evidence, owner, date and the exact product configuration approved. A successful pilot is not permission to substitute a different card or firmware.