RPi is only accessible in separate local network. Doors also has regular locks which are used after working hours.

In case of sytem failure almost all parts has alternative working conditions: lights can be controlled with wall switches, rfid lock can be programmed separatly, etc.