This control plane turns synthetic building access exports into one review surface: badge approvals, controller drift, vendor windows, revocation timing, credential ownership, and audit continuity before property teams trust the next access decision.
| Risk | Owner | Subject | Observed state |
|---|---|---|---|
| high Approval |
Property Access Operations | Tenant move-in badge packet | The current badge packet is missing the final property-manager approval and move-in effective date. |
| high Controller |
Building Systems Engineering | Lobby controller drift | One lobby controller is running a rule set that differs from the approved baseline and has no rollback note. |
| medium Vendor |
Facilities Operations | After-hours vendor access window | One vendor credential stayed active after the work order ended and needs closure evidence. |
| high Revocation |
Security Operations | Terminated contractor badge | A terminated contractor badge still appears active on one secondary controller. |
| medium Audit |
Security Operations | Badge-event audit continuity | One event export omitted a supervisor approval event and needs regeneration. |
| high Credential |
Property Access Operations | Shared credential review | A shared access credential lacks current ownership evidence and renewal approval. |