There is security, but once I caught building management employee getting into office to check aircon. It was unannounced and probably permitted under contract

There is security, but once I caught building management employee getting into office to check aircon. It was unannounced and probably permitted under contract (as an emergency access). If that person took the NAS, maybe they would get caught, but data still would be compromised.