Define correlation rules between [VMSVendor] and access control [AccessControlVendor] to detect [BadgeEventTypes] and tailgating (per [TailgatingDefinition]). Specify linkage keys [JoinKey] and a correlation window of [CorrelationTimeWindow_Sec] seconds, respecting [PrivacyConstraints]. Produce a repeatable SOP for review, escalation, and evidence packaging.
Output format: (1) Correlation Rules table: Event Pair, Window, Confidence, Action. (2) Data Mapping schema (camera ID, door ID, cardholder) with quality checks. (3) SOP with verification steps and notification paths. (4) Exception handling for multi-person entries and piggybacking. (5) KPI set: tailgating detection rate, investigation cycle time, and false positive ratio.