Lost credential review.
Assemble the supplied timeline while keeping security decisions with authorised staff.
The everyday problem
A lost badge report needs authorised event evidence, not speculation about who used it.
08:45 / G3Before report; user not inferred
09:00 / Loss reportLoss time unknown
Illustrative workflowHuman decision
The site supervisor reviews evidence. Equipment and access remain under authorised human control.
- 01
Input
08:45 / G3: Last supplied access event; 09:00 / Loss report: Badge reported lost; After report: No later events supplied
- 02
Give instruction
Review the events for this lost badge.
- 03
Agent works
B99 / Access-event review
- 04
Human decision
The site supervisor reviews evidence. Equipment and access remain under authorised human control.
Expected impact
Assemble the supplied timeline while keeping security decisions with authorised staff.
What to measure
Security-review preparation time; unsupported attributions avoided.
SME
The site supervisor reviews evidence. Equipment and access remain under authorised human control.
Enterprise
Confirm the relevant teams, source permissions, licensed modules and review owners during scoping.
Illustrative workflows. Tool availability, access and configuration require validation.