Cross-Project Spread

An actor who becomes newly active in three or more projects within a two-week window has expanded their operational footprint significantly. This may be a legitimate role change — but it may also indicate that access was granted without proper review. Sudden cross-project spread is one of the clearest early signals of access drift.

What you can conclude

• An actor newly active in many projects simultaneously warrants an access review — verify that their role change was authorised and documented.
• Gradual expansion across projects over a longer period is less concerning than sudden multi-project access in a short window.
• A clean chart with no flagged actors indicates stable, predictable access patterns across the portfolio.

How this chart works

Horizontal bar chart showing actors who became newly active in multiple projects within the selected period, with the count of new projects entered. Actors accessing 3 or more new projects are highlighted in orange. Use the date and actor filters to investigate specific individuals.