Aggregating data to identify diversion events

One or more non-transitory computer-readable storage devices comprising computer-executable instructions that, when executed by one or more computer systems, cause the one or more computer systems to perform operations comprising:

• accessing, from a first data source, first data comprising a plurality of first data attributes corresponding to inventory of an automated dispensing cabinet, the automated dispensing cabinet comprising a lockable cabinet in which is stored monitored dispensable units, the plurality of first data attributes representative of:
• first properties of a monitored dispensable unit of the monitored dispensable units stored in the lockable cabinet, and
• removal of the monitored dispensable unit from the automated dispensing cabinet;
• accessing, from a second data source, second data comprising a plurality of second data attributes corresponding to at least one order for the monitored dispensable unit of the monitored dispensable units stored in the automated dispensing cabinet, the at least one order associated with an electronic record of a dependent user, the plurality of second data attributes representative of second properties of the at least one order including one or more administration properties associated with administering the monitored dispensable unit to the dependent user;
• receiving, from a third data source, third data comprising a plurality of third data attributes corresponding to a first authorized user who was located at a facility including the automated dispensing cabinet at a first time when the monitored dispensable unit was removed from the automated dispensing cabinet, and wherein the third data source is at least one of a scheduling application, a timekeeping application, or a geolocation system;
• determining whether a diversion event has taken place based on comparing the third data with the first data and the second data, the diversion event comprising use of the monitored dispensable unit in contravention of at least one administration property of the one or more administration properties;
• and
• generating information indicating whether the diversion event has taken place.

A system, comprising:

• a memory configured to store computer-executable instructions;
• and
• a processor configured to access the memory and execute the computer-executable instructions to at least:
• access first data comprising a plurality of first data attributes corresponding to inventory of an automated dispensing cabinet, the automated dispensing cabinet comprising a lockable cabinet in which is stored monitored dispensable units, the plurality of first data attributes representative of:
• first properties of a monitored dispensable unit of the monitored dispensable units stored in the lockable cabinet, and
• removal of the monitored dispensable unit from the automated dispensing cabinet;
• access second data comprising a plurality of second data attributes corresponding to at least one order for the monitored dispensable unit of the monitored dispensable units stored in the automated dispensing cabinet, the at least one order associated with an electronic record of a dependent user, the plurality of second data attributes representative of second properties of the at least one order including one or more administration properties associated with administering the monitored dispensable unit to the dependent user;
• receive, from a third data source, third data comprising a plurality of third data attributes corresponding to a first authorized user who was located at a facility including the automated dispensing cabinet at a first time when the monitored dispensable unit was removed from the automated dispensing cabinet, and wherein the third data source is at least one of a scheduling application, a timekeeping application, or a geolocation system;
• determine whether a diversion event has taken place based on comparing the third data with the first data and the second data, the diversion event comprising use of the monitored dispensable unit in contravention of at least one administration property of the one or more administration properties;
• and
• generate information indicating whether the diversion event has taken place.