A computer implemented method of programming access controllers in an environment, the method comprising the steps of: receiving an image file representative of the environment to be controlled, said image file comprising one more indicia representative of a device controlling access for an access point in the environment, said indicia comprising data representative of the requirements of the device; for each of the one or more indicia present on the image file identifying a device and associated device configuration data for the identified device, wherein the identified device complies with the requirements indicated by the indicia; writing the identified device data and associated configuration data into a format readable by a security management system and programming said security management system with the identified device data and associated configuration data.