Clock Methods and What Each Prevents
Six ways to record arrival, ranked by what they actually stop rather than by what they are sold to stop.
Controls · Reference
Each method addresses a specific failure and leaves the others open. Matching the method to the problem you measured is the whole decision.
A signing-in sheet
Prevents: nothing, and it is not trying to.
Useful for: fire safety, visitors, small stable teams.
Trivially completed by someone else, which matters only if you have that problem.
Cards or codes
Prevents: casual forgetting.
Does not prevent: sharing, which is the entire buddy-punching case.
A card is a token, and tokens are lendable. Any product sold on preventing buddy punching with a card is selling something it does not do.
A phone app with a location check
Prevents: clocking in from home or from the pub.
Does not prevent: a colleague already on site punching for someone.
Adds: a dependence on the worker's own device, and the failure modes that come with it.
A photograph at clock-in
Prevents: buddy punching directly, because it addresses identity.
Costs: a collection about a person's face, with its own obligations and its own decision.
Effective and proportionate where supervision is genuinely absent, which is the case worth reserving it for.
Fingerprint or face matching
Prevents: the same thing as a photograph, more reliably.
Costs: biometric data, a higher legal bar, restrictions in several jurisdictions, and a workforce reaction that is frequently out of proportion to the problem.
Regulators have repeatedly found it disproportionate for attendance where a lesser method would serve.
Last resort, with an assessment, not a default.
A supervisor marking attendance
Prevents: buddy punching, because a person is verifying a person.
Costs: a few minutes of someone's time.
Works up to a surprising size and is the control most organisations already have.
Choosing
Match the method to the measured problem, not to the product category.
If the problem is on-site covering, only the last three address it.
If the problem is clocking in from home, the location check does.
If there is no measured problem, none of them is worth the failure modes, and the sheet or the supervisor is the answer.
Match method to measured problem
The step that removes most of the shortlist.
On-site covering: only identity verification addresses it.
Clocking in from home: a location check does.
Neither measured: none of them is worth the failure modes.
A product category is not a problem statement, and matching the two is the entire procurement decision.
Connect policy and data
The choices in this note can be compared with view supported connections. Keep the written purpose in control and enable only the information needed at this boundary.