A physical security project starts with the risks at a particular site. An office entrance, a warehouse loading bay and a retail checkout need different coverage. Buying the same camera for every position can leave a system difficult to use even when every device works.
For a new fit-out or replacement, agree what the system must help staff detect, investigate and respond to before choosing equipment. Include the people who will operate it and those responsible for the premises.
The three layers of a physical security system
Video surveillance records activity in selected areas. Choose cameras by lighting, viewing distance, field of view and the detail needed in a recording. Check a sample image at the intended mounting position: a wide overview is not necessarily a usable identification image.
Access control manages entry through selected doors using credentials such as cards, PINs or supported mobile credentials. Plan who can enter, at what times, how access is revoked and how emergency egress works. Event records help investigations only if identities, permissions and device clocks are maintained.
Intrusion detection uses sensors and alarm rules to identify events needing a response. Assign an alarm recipient, an escalation path and a way to test that notifications reach them.
Integration is possible with compatible equipment and software. For example, Hikvision documents configurable access-event actions including recording and alarm outputs. Confirm each required action against the actual devices, licenses and configuration; do not assume that products sharing a brand support every integration.
Confirm the applicable Saudi requirements
Article 4 of the Security Surveillance Cameras Law requires covered entities to install, maintain and operate their systems and retain recordings according to the applicable requirements document. Incident recordings have additional preservation obligations.
Establish which provisions and implementation requirements apply to your premises before finalizing coverage and storage. Record the basis of the design with the responsible compliance or facilities owner. A neighbouring business's installation is not a substitute for checking your own obligations.
Local recording, remote viewing and storage
Separate recording from remote access. A site can record locally while allowing controlled remote viewing. Assess camera traffic, internet upload capacity, access permissions and the consequences of losing the internet connection.
Calculate storage using the selected recording settings, camera count and required retention. Test the estimate with representative footage because scene activity and encoding settings affect consumption. Include a process for exporting and protecting incident clips.
Remote viewing should use supported, maintained access methods with named accounts. Document who can view, export and delete footage and how those permissions are reviewed.
What to ask for at handover
- A camera and door schedule showing the purpose of each position.
- Day and night image checks for the conditions that matter.
- Tested alarm delivery and an agreed response procedure.
- Demonstrated access revocation and emergency arrangements.
- Recording, retention and export checks.
- Configuration records, operator training and a maintenance plan.
If the project also includes cybersecurity governance, use the NCA baseline scope and preparation guide to assess which requirements apply to the organization.
BustanTech provides physical security design and installation, including CCTV and access control. Contact us to discuss a site assessment and a quotation for your requirements.