Physical security for businesses
One plan for the doors, the cameras and the network behind them
Offices, retail locations and clinics keep valuable things behind a door: people, cash, stock, records and servers. SMC reviews the physical side next to the cyber side, so one plan covers both.
What SMC does, and who does the rest
SMC assesses, designs, writes the specification and acts as owner's representative. SMC does not sell or install equipment and does not program panels. A licensed installer contracts directly with the client, and the client owns the equipment, the accounts and the footage. SMC takes no commissions from any vendor. How SMC works with installers.
What a business gets
Site assessment
A walk through entries, parking, server and records rooms, and after-hours exposure, with findings in priority order. Often done together with the cyber assessment.
Current-state review of existing equipment
Every camera, recorder, panel, lock and reader: what it is, how old it is, who holds the admin accounts, and what the monitoring contract covers.
Design with options
A design pattern for the site and two or three vendor options at different cost levels, with the licensing shape of each (one-time purchase or subscription) stated plainly.
Installer quotes compared
A written specification so licensed installers quote the same thing, and SMC helps compare the quotes.
Evidence for insurers and auditors
Policies, access reviews and test records that show the system is run, not just installed.
Ongoing check
Quarterly reviews of access, system health, firmware and policies, joined to the business’s digital security program.
Where most small businesses start
Five pieces of scope that fix the most for the least, each written as a specification and checked on completion.
1. Evidence-grade video on a segmented network
A camera schedule with a target image quality at each door, till and lot, stated retention, no open ports, and a check that no restricted-make equipment is used.
2. Back-of-house forced-entry delay
Rear, loading and staff doors are where break-ins happen. SMC surveys them, specifies the door, frame and hardware, and checks the egress is still safe.
3. Access governance audit
Who holds keys, codes and cards, who has left, which codes are shared. Needs no hardware, and produces a roadmap.
4. Alarm detection, verification and response review
Review of the existing alarm against verification and response standards, with directions to the dealer, who makes every change. Aims at fewer false alarms and a clear response plan.
5. Corner and blind-spot lighting
Lighting targets and a safe closing route for staff, so existing cameras work at night. Easy to show before and after.
New York retailers also have workplace-violence policy and training duties; SMC includes these where they apply.
The ongoing retainer: SMC reviews, partners operate and fix
SMC reads the reports and checks the evidence. The business's licensed partners run every test that touches the system and make every fix.
Monthly
Alarm user codes checked against the staff list, leaver removals timed, vendor security advisories checked against the device list, health and false-alarm reports read.
Quarterly
Access review with evidence, footage-access log review, a night check of camera views and lighting, firmware and end-of-support status, and a report to the owner.
Annually
Review of the design against current threats, an evidence pack for the insurer or auditor, and a roadmap to the next level.
After an incident or change
Post-incident review and redesign, and a new-rule check when the law or the staff changes.
Privacy and control defaults on every design
- Audio recording is off by default. Recording conversations without consent is unlawful in New York, and a sign does not fix it.
- Face recognition is off by default, and never used in New York schools.
- Notices and signs are included where the law requires them, such as employee monitoring notices.
- SMC never holds the system passwords, codes or admin logins, and never services the equipment. The owner holds them.
Rules a business has to design around
- Camera audio is off by default, because recording conversations without consent is unlawful in New York.
- No cameras in restrooms, locker rooms or changing rooms. Retail designs cover fitting-room entrances only.
- Employee notice and signage are written into the design where electronic monitoring applies.
- Face recognition is off by default. Any feature that identifies people needs a written purpose and a privacy review first, and some places, including New York City retail, have additional signage rules.
- Regulated data, such as health or payment card data, sets requirements for who can reach recorders, readers and records rooms.
How it works
1. Free 30-minute call
The site, the concern, what the insurer or auditor has asked, and the physical side: doors, cameras, alarms and accounts.
2. Free assessment, gap report and free results review
The free security assessment online, a written gap report and a free review of the results. Physical questions are covered there and in the call.
3. Assessment, then design
Paid site assessment and design, scoped to the business before work starts.
4. Installation and acceptance
The business hires a licensed installer directly. SMC checks the work against the design and runs acceptance tests with the installer operating the system.
5. Retainer
Monthly, quarterly and annual reviews, as above.
Project management included on request. SMC can run the project as the owner's representative: schedule, partner coordination, bids, change control, progress reporting, acceptance and handover.
Built to New York State and local rules
Every design and project follows New York State law and the rules of the city, town or village: building and fire codes and exit (egress) requirements, local alarm permit and false-alarm ordinances, licensing of the installers SMC works with (NY General Business Law Article 6-D), and recording and notice laws.
SMC designs to these requirements and checks the work against them. Licensed partners pull permits where required. This is design practice, not legal advice, and SMC cannot guarantee that an authority will approve a permit or inspection.
Start with the free call
Describe the site and what keeps coming up. The call is free and takes 30 minutes.
Book a free 30-minute callOr write to support@securitymedic.com