Thank you, Chair.
My general-purpose reaction is that the time frame allowing them full access was too long. I don't necessarily think that when the red flags were first raised, they should have been handcuffed and walked out of the building, but there was a range of measures that departmental security and the deputy head could have taken to restrict their access and control where they were going and whatnot.
It became increasingly clear—certainly based on the material I've read—as time went on that it was more and more serious. They also could have made the conditions to which they were subjected more serious as time went on.
My bottom line is that their general, unfettered access until almost the very end was too long. At the bare minimum, if they were to remain on the job, they should have had their physical access restricted and, perhaps, their electronic access restricted. You don't have to cut somebody off entirely in order to limit the threat they pose.