Commercial Security Self-Audit Checklist

Site / Building Name

Conducted By

Date

How to use this checklist: Walk each area of your building and check the boxes as you go. Use the Notes field in each section to record specific locations, camera IDs or issues found. When you're done, complete the Overall Assessment at the bottom. If you find significant gaps, talk to us — we'll do a full professional survey for free.

01 Entry & Exit Coverage

Every main entry and exit has a working camera with clear, unobstructed view Include main doors, fire exits, roller doors and any staffed reception entrances

Each camera captures faces clearly — not just the tops of heads or body from behind Camera should be mounted at or slightly above eye level, angled to cover the entry zone

Loading docks and service entrances are covered Often overlooked — these are frequently used access points for unauthorised entry

Stairwells and fire escapes have coverage at ground level Internal stairwells used as shortcuts or for loitering should also be checked

Car park entries and exits are covered with plate-readable or overview cameras

Section Notes

02 Camera Placement & Angles

All cameras are physically secured and have not shifted or been bumped from original position Check that pan/tilt cameras are locked in position if they should be fixed

No camera is pointing primarily at sky, ceiling, walls or other non-useful areas

Camera lenses are clean and free from dirt, condensation or damage

No camera view is partially or fully blocked by signage, shelving, vegetation or new construction

High-value areas (server rooms, safes, cash registers, reception desks) have dedicated coverage

Coverage map exists and is up to date — each camera position is documented If no map exists, this is a gap in itself — you need to know what each camera covers

Section Notes

03 Lighting & Night Vision

Cameras have been tested in low-light or after-hours conditions Pull up overnight footage and check — a grey blur means the camera isn't working in the dark

Outdoor cameras are rated for outdoor use (IP66 or better) and are not indoor-grade units

Infrared (IR) range matches the distance being monitored IR effective range is usually printed on the spec sheet — compare to actual camera-to-subject distance

Strong backlit areas (windows, skylights, bright outdoor light) aren't washing out key camera views during the day

Required security lighting is functioning in all covered outdoor and entry areas

Section Notes

04 Footage Storage & Retention

Retention period is known — check your NVR/DVR settings or ask your supplier Most systems are set to 7–14 days by default. Recommended minimum: 30 days

Retention period meets your business requirements and any relevant compliance obligations

Storage drives have been health-checked in the last 12 months Hard drives fail silently — a camera can appear active while recording nothing

You have confirmed recently that footage from 14+ days ago can actually be retrieved and played back

You know who has access to footage and how to export or share a clip if needed

Section Notes

05 System Health & Network

All cameras show as online on the NVR/VMS dashboard — no offline devices Log in and do a camera count now. If you've never done this, do it today.

System firmware is up to date (NVR, cameras, access control controllers)

Security systems are on a dedicated VLAN, separate from general office / guest Wi-Fi networks

System has UPS (uninterruptible power supply) backup so cameras stay on during a power outage

Someone has tested remote monitoring access within the last 6 months Many remote apps stop working after software or network changes and nobody notices

You have an alert or notification set up if a camera goes offline Without an alert, you won't know about a failed camera until an incident happens

Section Notes

06 Access Control

User list has been reviewed in the last 6 months — former employees are removed Check every access level including contractors, cleaners and after-hours staff

Access levels are set correctly — staff only have access to the areas they need Over-permissioned access is one of the most common issues found in audits

Access events can be cross-referenced with CCTV footage using timestamps If your CCTV and access control are completely separate systems, this is a gap

Tailgating at controlled doors is addressed by camera placement or physical design An access event log means nothing if two people walked through on one swipe

All access reader hardware is physically secure and free from tampering signs

Section Notes

07 Signage & Compliance

CCTV in operation signage is displayed at all monitored entry points Required under NZ Privacy Act 2020 and Australian privacy legislation — signs must be visible before entering a monitored area

Your Privacy Policy covers the collection, use and storage of surveillance footage

You have a process for responding to access requests for footage from individuals captured on camera

Footage is stored and secured in a way that meets your industry or sector requirements Finance, healthcare, government and education sectors may have specific requirements

Section Notes

Overall Assessment

Number of gaps identified

Most urgent action required

Overall site security confidence (circle one)

1 — Major concerns 2 — Several gaps 3 — Some issues 4 — Minor gaps only 5 — Well covered

Recommended next steps / comments

Found gaps?

We'll do a full professional site survey for free. No obligation — just a straight assessment of what you've got and what needs sorting.

Talk to Josh →

Commercial SecuritySelf-Audit Checklist

Commercial Security
Self-Audit Checklist