CCTV, access control and visitor management systems are important parts of a security setup, but they do not replace clear procedures. A system can record, restrict or alert, but people still need to know what happens next.
If a camera identifies suspicious activity, who reviews it? If access control shows repeated failed attempts, who investigates? If a visitor refuses to sign in, what should staff do?
These questions should be answered through practical SOPs. The Business Security SOP Generator can help draft procedures for CCTV monitoring, access control and visitor management.
Systems are not the same as procedures
A CCTV camera is a tool. Access control is a tool. A visitor management platform is a tool. A procedure explains how those tools are used, who is responsible and what happens when something goes wrong. Without procedures, systems can become passive.
What a CCTV procedure should include
- what areas are covered
- whether cameras are monitored live or reviewed later
- who is authorised to view footage
- what activity triggers escalation
- how incidents are recorded
- how faults are reported
- how privacy and signage are managed
For sites needing live escalation, Control Room support can help connect CCTV activity to a response process.
What an access control procedure should include
- who can approve access
- how access levels are assigned
- how lost cards or fobs are handled
- what happens when staff leave
- how contractor access is managed
- how failed access attempts are reviewed
- what to do if doors fail secure or fail open
What a visitor management procedure should include
- how visitors are welcomed
- whether appointments are checked
- whether ID is required
- how visitor badges are issued
- whether visitors are escorted
- what happens if a visitor refuses the process
Where public access is common, this should link to wider public-facing premises procedures.
Common gaps with security systems
The most common gaps are not always technical — they are operational:
- CCTV exists but no one reviews alerts
- door access permissions are out of date
- visitor sign-in is inconsistent
- system faults are not escalated
- no one owns regular review
CCTV and rapid response
Temporary or high-risk sites may benefit from Rapid Deployment CCTV, especially where the risk is time-limited or a permanent system is not yet in place.
Access control and out-of-hours risk
If staff are attending alone after hours, Keyholding and Alarm Response may also need to be reviewed.
Records and reporting
SPS supports clients with Client Reporting and Visibility, helping connect operational activity with useful management information.
How SPS can help
SPS Security and SPS Technical support clients with CCTV, access control, monitoring, guarding, patrols, keyholding and reporting. Use the Security Review or explore Rapid Deployment CCTV, Control Room support, Security Guarding and Mobile Patrols.
Does CCTV need a written procedure?
Yes. A CCTV procedure should explain monitoring, review, escalation, fault reporting, evidence handling and privacy considerations.
Is access control enough to secure a site?
Access control is useful, but it needs clear ownership, permission review, fault escalation and incident response.
Should visitor management be part of a security SOP?
Yes. Visitor and contractor access should be included where people attend site and there are controlled or restricted areas.