Any project, any implementation involves three areas:
- Infrastructure
- Processes
- People
Your list is very comprehensive in the Infrastructure. Some of the post above expanded into People (Communications, Training). You will also need to create processes and policies: how will the system operate (user enrollment, infrastructure maintenance and repairs, information backup, manual processes, disaster recovery).
One last comment - make sure that you dont mix Access Control with Time & Attendance. They are two different processes and sometimes run on two different systems. Time & Attendance readers usually have a clock (so the user knows official registration time) and buttons to indicate if you are just entering, going out for break, returning or going home. You might program this logic in the Access Control system but you will need a hell of an algorithm to make it work - and the rules/exceptions will be too difficult to be maintained by regular users.
The leaders in Time & Attendance is Kronos. In Access Control the marked is more diversified.