A fingerprint lock does not replace revocation
A lost card may resist use by another person, but its door, FIDO, PIV or payment credentials still require lifecycle controls. Report the loss promptly and revoke every relevant credential through the authoritative systems.
Inventory all functions on the card
Converged cards can represent several identities at once. Maintain a record of physical-access technologies, digital accounts, certificates and visual-ID functions so incident response does not revoke only one layer.
Recovery must preserve assurance
Avoid restoring access through a weaker channel without limits. Require appropriate identity proofing, time-bound fallback access, audit logging and a clear owner for approving replacement.
Damaged-card handling
Treat a broken card as sensitive hardware. Define secure return, disposal, replacement and evidence handling. Do not assume that a damaged sensor means protected keys or templates are erased.
Test the procedure before rollout
Run lost-card, offboarding and suspected-compromise drills in the pilot. Measure time to revoke, time to restore productive access and the number of teams or systems involved.
