Rooftops and risers share a fate: both hold infrastructure that outside parties pay to occupy, both accumulate equipment faster than documentation, and both are usually governed by habit rather than program. Owners who formalize them typically discover revenue they were not collecting and risk they were not seeing.
Stage 0: Ad hoc (where most buildings are)
Access granted by whoever answers the phone. Agreements scattered, some expired. Rooftop occupancy that has drifted from any document. Riser capacity unknown. Every project rediscovers the building from scratch.
Stage 1: Inventory
You cannot govern what you have not counted. Field-audit both domains: every rooftop occupant and antenna, every riser cable and its owner, every agreement and its terms. Reconcile physical reality against paper. Expect surprises, carriers with no agreement, equipment from companies that no longer exist, lapsed insurance certificates.
Stage 2: Control
Institute the access request standard (tenant, purpose, scope, responsible party), verify technicians at arrival, and route all rooftop and riser work through one coordination point. Protect life safety components, donor antennas and ERRCS pathways live in exactly these spaces.
Stage 3: Standards
Publish installation standards: labeling, routing, penetrations, waterproofing, structural attachment, firestopping. Make agreement compliance (insurance, licensing) a scheduling gate. Require documentation as a condition of work acceptance.
Stage 4: Program
Scheduled audits reconciled against change logs. Agreement renewals tracked ahead of expiration. Capacity managed as an asset, riser space and rooftop real estate priced and licensed deliberately. Reporting that lets ownership answer, at any time: who occupies our building, under what terms, and what changed this quarter?
Most buildings can move from Stage 0 to Stage 2 in a quarter with a structured assessment and a governance partner. The gap between those stages is where most of the liability lives.