How do you set up the time schedules and access levels so they do not end up being four hundred?

What happens when it is not there: you start with a dozen clear levels and three years later there are hundreds, because every exception —a supplier coming in on a Saturday, an intern who needs the laboratory for two weeks— was solved by creating a new one instead of using the ones that existed. That system can no longer be audited: nobody knows what each level opens without opening it and looking.

The time schedules, for their part, are drawn up with the people who are going to use them in the room. The list of profiles that comes out of a meeting and what happens in a factory at seven in the morning do not look alike, and a system that will not admit reality ends up with the door wedged open with a fire extinguisher. And once a year, a review where each manager signs off what their people have: it is half an hour per department and it is what keeps the system clean.