I would venture that actually camera - computer security is very prevalent. Even nowadays, a casino can happily run anyone in the casino against facial recognition. and its usually pre-linked to a black-book of personas non grata. Its just a matter of processing power not being there to run every face that comes down the chute, forcing the security staff to decide "hemm, he looks like a card counter". By 2072, processing power is pretty cheap. Definitely cheap enough that entry or exit to a restricted area, which maybe sees a few hundred go by in a day, could run it on everyone. Don't show up on the approved list? Security officer bob gets a little alert that says "Should this person be here?" And this is cheap. Cameras, a few processing cycles, and bingo bango.
I envision more of a "mobile defense" strategy from corps when the costs go up. Unless its a hard site or VIP protection, I would imagine that most of the systems are really just tripwires and delays. Rather than keeping HTR teams on every building, and rigging it with poison vents, minefields, machinegun nests and spirits, set it with sensors, locks, the occasional drone, and minimal metahuman presence. T
The whole point is to:
A) Let the appropriate element know something is wrong, and see what they want to commit to the problem. This is where the cameras, sensors, ID cards, and minimal human/drone presence come in.
and B) Allow a response to reach there in time. Mostly locks, doors, vault timers on the macguffin (ten minute non-ovverrideable delay like a modern bank vault for example) and things of that nature. God forbid the spider freezes the elevators and the runners have to actually run up 12 tall stories.
Especially when you consider say, MCT Seattle is unlikely to have multiple major crises a night. If you can just hold up a team for a 2-3 minutes after there's a known issue, you can get active surveillance via wage-mage and drone on the exits to allow a counterattack, plus you can start live feeding info to the guys who are going to make the big decisions.
Somewhere in the sprawl is a small ready center, operating the lethal stuff. The on-call HTR team, the machinegun drones, the electronic warfare guru, the on call hack team, that sort of thing. They simply exist, to be employed when the decision makers say yes/no/maybe. Now MCT Seattle can send a wide array of appropriate responses based on the situation, and for much, much cheaper than fortifying every warehouse.
95% of the time they probably just tag the runners, maintain surveillance, and guide the KE on to the criminals. Then a corporate rep bullies/bribes/lawyerizes to get the stuff back, and a at a fraction of the cost of sending a T-Bird thundering down the street, autocannoning the office, and then having a squad of wired to to the gills commandos duke it out with a runner team inside corporate property. the other 5% of the time - man, hope your johnson told you that this was a big one, yeah?