PIN se attendance, leave request aur sensitive actions (bill delete jaise) attribute hote hain — leaked PIN matlab koi aur us staff ke naam par ye sab kar sakta hai. Isliye der mat karo.
TURANT
- Setup → Settings → Action Guard → staff list → us staff par 'Re-issue' — naya PIN generate + email; purana instant dead.
- Staff khud bhi ESS me 'Get my PIN' se naya le sakta hai — dono ka result same hai.
PHIR JAANCH
- HR Masters → ⚠ Face Review kholo — leak window me koi aisi punch jahan PIN sahi tha par FACE mismatch tha? (System PIN sahi hone par bhi face mismatch flag karta hai — proxy jo PIN jaanta hai, yahi pakda jata hai.)
- Attendance register me us staff ki punches ke time/GPS dekho.
- Sensitive actions ka Audit Log check karo (kisne kya kiya).
PREVENTION
- Staff ko sikhao: PIN kabhi share nahi — na saathi ko, na reception ko. Har staff apna khud ka issue kare.
- Face enrollment sab ka complete rakho — PIN leak ho bhi jaye to face layer proxy ko flag kar degi.