A system, comprising: a transceiver; at least one memory that stores computer-executable instructions; and at least one processor operationally coupled to the transceiver and the at least one memory, wherein the at least one processor is configured to access the at least one memory and execute the computer-executable instructions to: receive a radio frequency, RF fingerprint of an RF signal detected by the transceiver within an area under surveillance, AUS, the RF fingerprint comprising at least one of: i) a hardware address of an electronic device that emitted the RF signal or ii) a radio type identifier of a radio of the electronic device, wherein the AUS is a physical area defined by one or more boundaries; determine a stored persona that includes a stored RF fingerprint that matches the received RF fingerprint; determine that the electronic device that emitted the RF signal is associated with the stored persona and identify a user associated with the stored persona; identify, from the stored persona, access credentials of the user, wherein the access credentials provide access to one or more ingress points of the AUS via one or more access control devices, wherein the one or more ingress points are points on the one or more boundaries of the AUS; characterized by the processor being configured to receive access control information indicating that the access credentials have not been received at any of the one or more access control devices, while the RF signal is being detected within the AUS; and to determine that the user is in violation of a security protocol based at least in part on receipt of the RF fingerprint and receipt of the access control information indicating that the access credentials have not been received, while the RF signal is being detected within the AUS. a transceiver; at least one memory that stores computer-executable instructions; and at least one processor operationally coupled to the transceiver and the at least one memory, wherein the at least one processor is configured to access the at least one memory and execute the computer-executable instructions to: receive a radio frequency, RF fingerprint of an RF signal detected by the transceiver within an area under surveillance, AUS, the RF fingerprint comprising at least one of: i) a hardware address of an electronic device that emitted the RF signal or ii) a radio type identifier of a radio of the electronic device, wherein the AUS is a physical area defined by one or more boundaries; determine a stored persona that includes a stored RF fingerprint that matches the received RF fingerprint; determine that the electronic device that emitted the RF signal is associated with the stored persona and identify a user associated with the stored persona; identify, from the stored persona, access credentials of the user, wherein the access credentials provide access to one or more ingress points of the AUS via one or more access control devices, wherein the one or more ingress points are points on the one or more boundaries of the AUS; characterized by the processor being configured to receive access control information indicating that the access credentials have not been received at any of the one or more access control devices, while the RF signal is being detected within the AUS; and to determine that the user is in violation of a security protocol based at least in part on receipt of the RF fingerprint and receipt of the access control information indicating that the access credentials have not been received, while the RF signal is being detected within the AUS. receive a radio frequency, RF fingerprint of an RF signal detected by the transceiver within an area under surveillance, AUS, the RF fingerprint comprising at least one of: i) a hardware address of an electronic device that emitted the RF signal or ii) a radio type identifier of a radio of the electronic device, wherein the AUS is a physical area defined by one or more boundaries; determine a stored persona that includes a stored RF fingerprint that matches the received RF fingerprint; determine that the electronic device that emitted the RF signal is associated with the stored persona and identify a user associated with the stored persona; identify, from the stored persona, access credentials of the user, wherein the access credentials provide access to one or more ingress points of the AUS via one or more access control devices, wherein the one or more ingress points are points on the one or more boundaries of the AUS; characterized by the processor being configured to receive access control information indicating that the access credentials have not been received at any of the one or more access control devices, while the RF signal is being detected within the AUS; and to determine that the user is in violation of a security protocol based at least in part on receipt of the RF fingerprint and receipt of the access control information indicating that the access credentials have not been received, while the RF signal is being detected within the AUS.