Abstract: A credential production system includes a credential production device and a computing device in communication with the credential production device. The computing device receives a credential production event from the credential production device. The computing device applies a pre-defined set of rules to the credential production event to determine if the credential production event violates any of the pre-defined set of rules. The computing device performs an action if the credential production event violates at least one of the pre-defined set of rules.