How to use this scorecard

Print this page or save it as a PDF. Define thresholds before the pilot begins, record both successful and failed journeys, and segment results by user group, location, reader and platform. Do not replace measured results with a vendor demonstration.

1. Scope and baseline

Record the business problem, current authentication method, target users, exact card model and firmware, credential technologies, readers, controllers, operating systems, identity provider, applications and expected volume. Capture the current failure, support and recovery baseline.

2. Enrollment

Measure invitation completion, successful first enrollment, time to enroll, failed fingerprint capture, accessibility exceptions and administrator effort. Record where the biometric template is created and stored and who can initiate reset or re-enrollment.

3. Authentication and access

Measure first-attempt success, retries and time for every door, workstation, browser and application path. Include wet, dry or worn fingerprints, protective equipment, different card orientations, older readers and peak-use conditions.

4. Loss, recovery and offboarding

Run timed exercises for loss reporting, credential revocation, temporary access, identity proofing, replacement, re-enrollment and employee departure. Confirm old credentials cannot be used and that recovery does not fall back to a weaker phishable method.

5. Operations and total cost

Track help-desk contacts, inventory accuracy, failed cards, replacements, reader changes, training, management tooling and integration work. Compare total pilot and forecast operating cost with the current method and with at least one alternative.

Decision record

End with one of three outcomes: proceed to a bounded expansion, remediate and repeat defined tests, or stop. Document exceptions, evidence, owner, date and the exact product configuration approved. A successful pilot is not permission to substitute a different card or firmware.