What is the preferred way to safeguard keys in a key management program?

The preferred way to safeguard keys in a key management program is to keep them in a locked cabinet. This approach ensures a secure and controlled environment for the storage of keys, minimizing the risk of unauthorized access. A locked cabinet is a physical security measure that restricts access to only those individuals who are authorized to retrieve the keys, thus protecting sensitive areas and information.

Using a locked cabinet also facilitates better management and tracking of keys, as access can be limited to certain times or to specific individuals. This method aligns well with best practices in physical security, which prioritize the safeguarding of critical resources and ensuring that access to those resources is carefully controlled and monitored.

In contrast, the other options pose significant risks. Storing keys in plain sight could lead to unauthorized access, while allowing employees to keep keys at home may result in loss or theft. Making duplicates for all staff can lead to an increased number of people having access to the keys, increasing the possibility of misuse or loss.