Physical access control systems (PACS) have been used for many decades, but a lack of common standards has brought widely divergent access methods dominated by proprietary systems that don’t interact with other systems. Many of these systems do not support the level of integration that industries or new technology demand, nor can they withstand hacking attempts.

This is why Open Supervised Device Protocol (OSDP)  is becoming even more important to enabling the level of security and efficiency that is now required as Australian organisations explore new or upgraded physical access control.

Increased risks of outmoded technologies to Australian organisations

The global access control market is expected to rise to USD 17.37 billion by 2033, a compound annual growth rate of 7.2%. This reflects the increased focus of organisations on securing convergent digital and physical workplaces and the rapid evolution of physical access control systems in recent years.

However, more than 90% of PACS installed today still rely on the Wiegand protocol, making it the most common communication method used by access control devices. The Wiegand standard was developed in the 1980s, so was not designed to keep pace with the security demands of today’s organisations and the increasingly complex threats that are emerging.

In a recent survey of IT professionals, facility managers and physical security leaders conducted by HID, respondents said they were aware (39%) or somewhat aware (36%) of the security risks associated with the Wiegand protocol, yet continue to use it, while the remaining respondents (25%) reported being completely unaware of the security risks.

Recognising the shortcomings of Wiegand and other legacy protocols, OSDP was developed by Mercury Security and HID in 2008. It was donated, free of intellectual property, to the U.S. Security Industry Association to improve interoperability among access control and security products. In 2020, OSDP became an International Electrotechnical Commission (IEC) standard.

Legacy physical access systems that continue to use the old Wiegrand protocol are often vulnerable to exploitation by simple off-the-shelf hacking devices. Organisations that rely on these outmoded technologies are now at serious risk of data breaches that can have a significant financial and reputational impact.

Why the future of PACS depends on OSDP 

Implementing OSDP standards significantly enhances security by utilising secure channel protocol with AES-128 encryption, this is especially important for Australia’s critical infrastructure and essential services that are increasingly under threat from state-based cyber-attacks.

OSDP provides predefined encryption and authentication settings and addresses the emergence of “man-in-the-middle” attacks, where an intruder intercepts and alters communication between a reader and a controller to gain unauthorised access to a company or government system.

Another advantage of OSDP is its support for bidirectional communication between devices. This allows readers and the central management system to exchange real-time information, improving system responsiveness and control.

OSDP’s open platform is also scalable because it allows organisations to seamlessly integrate devices from different manufacturers over time, ensuring flexibility as security needs evolve. As new threats emerge, OSDP empowers organisations to quickly implement advanced technologies so they can maintain the protection of incoming and outgoing data collected via their PACS.

Importantly, OSDP is key to providing unified secure digital and physical access control systems. The 2025 HID State of Security and Identity Report shows that 67% of security leaders and 73% of integrators and consultants are actively adopting software-driven solutions that unify critical functions such as video surveillance, access control, and intrusion detection into a single secure platform.

Security threats continually evolve at lightning speed, and new waves of malicious attacks occur every day, so Australian organisations are under pressure to implement solutions that offer flexibility and robust protection in real time.

OSDP’s ability to address vulnerabilities in legacy systems while enhancing operational efficiency and scaling for advancing technologies makes it a clear choice for enterprises that consider the protection of data a high priority.