Abstract: An asset protection system and method integrates physical asset security with information asset security in a hosted environment, or in certain circumstances in a users environment, as a security application service provider (SASP). The SASP allows customers to acquire computer-based applications for use in information security and/or asset protection, and have those applications developed, integrated, maintained and/or operated, all in a single location. The hosted environment provides security access, generates reports, triggers alerts, and performs analysis based on usage patterns. Usage patterns of repeat system users are learned, such that an anomalous usage results in corrective action, and include physical entry data, logon and logoff times for various equipment, usage periods and file access for various information technology applications, and ingress/egress operation patterns as viewed from a monitoring device.