How to Choose a Security Integrator: A Checklist for South African Businesses

Choose a security integrator that can design, install, monitor and maintain every part of your security system itself, under one contract that makes it responsible for the whole. Before you appoint one, check its PSIRA registration and SAIDSA accreditation, what it subcontracts, whether it runs its own control room, which platform it uses, and whether it can show real multi-system projects like yours.

Most South African businesses did not plan their security as one system. It grew one contract at a time, with a different supplier for the cameras, the doors, the fence and the armed response, until no single company could answer for how the pieces work together. A security integrator fixes that by taking responsibility for the whole system. This guide is for operations, risk and facilities heads who are about to appoint one. If you are still deciding what the system itself should include, start with our integrated security solutions page.

What does a security integrator do in an integrated security system?

A security integrator designs, connects and takes responsibility for security systems that work together rather than side by side. The cameras, door controllers, gate readers, intrusion sensors and fence energisers all report into one management platform, and the integrator decides how the events from one system trigger actions in another.

A simple example shows the difference. In a stand-alone setup, a forced door at 02:00 sounds an alarm panel, and someone later searches hours of video to see what happened. In a well-integrated setup, the forced-door event calls up the nearest camera, records a tagged clip, and sends the alarm with live video to a control room operator, who can verify it and dispatch a response within minutes.

A good integrator works on three layers, not just the first:

1. Devices: CCTV, access control readers and locks, electric fencing and beams, intercoms, sensors and alarm panels.
2. Platform: the software that receives events from every device and links them to video, usually a video management system (VMS) or an alarm management platform.
3. People and process: the control room, the response procedures, maintenance and reporting that turn events into action.

Most problems with "integrated" systems come from the third layer being left out. A platform that links everything but that nobody watches is still a recording system.

One security integrator or several providers: what changes?

The difference is who sees an incident, how quickly, and who is responsible when something fails. Separate providers each hold part of the story; one integrator puts the whole story in front of one person while it is still happening.

There is a cost to fragmentation that rarely shows on a quote: the time managers spend coordinating providers, the faults that fall between contracts, and the incidents that nobody sees until the next morning. Multi-site businesses feel it most. Head office wants the same standard, reports and escalation rules at every branch, depot or store, and that is far easier when one integrator runs all of them on one platform.

What should you check before appointing a security integrator?

Check that the provider can design, install, monitor and maintain every part of the system, and that one contract makes them responsible for all of it. Use this checklist when comparing electronic security companies:

• Registration: a current PSIRA number you can verify, and SAIDSA accreditation.
• Scope: do they install and support CCTV, access control, perimeter, intercom and monitoring themselves, or subcontract parts?
• Control room: do they run their own 24/7 control room, and can you visit it?
• Platform: which management software do they use, and does it support open standards so you are not locked in?
• Integration track record: can they show real multi-system projects similar to your site, with what was connected?
• Service agreement: one response time for the whole system, preventive maintenance, and who tests the links after changes.
• POPIA: how they set up retention, user access and audit trails, and how they secure the network.
• Power: how cameras, recorders and access control stay up through load-shedding.
• Local support: a branch close enough to get a technician to site quickly.

Our article on due diligence when choosing an electronic security partner goes into each of these in more depth. The sections below explain what a good answer to each looks like.

Which registrations and rules should a security integrator meet?

A security integrator handles video, access logs and often biometric or number-plate data, so it must meet South African law as well as technical standards.

• PSIRA: companies that install security systems and provide monitoring must be registered with the Private Security Industry Regulatory Authority. Check the number on psira.co.za. CCTV Security Surveillance is registered under PSIRA 4412150.
• SAIDSA: the South African Intruder Detection Services Association accredits installers; insurers often ask for it. CCTV Security Surveillance is a SAIDSA Grade A installer (ASP-1571).
• POPIA: footage, access records, plates linked to people and biometric templates are personal information. The integrator should set up a defined purpose, retention period and limits on who may view or search the data, plus CCTV signage and a secured system. See the Information Regulator.
• Cybersecurity is part of compliance. In July 2023 the Information Regulator issued its first POPIA administrative fine, R5 million, after finding that security safeguards had lapsed (SAnews (2023)). Ask how the integrator patches devices, changes default passwords and segments the security network. See why network security matters in electronic surveillance.

Which platform should your security integrator use: VMS, access control software or PSIM?

The platform is the software every device reports into, and it is the most lasting decision your integrator will make. Cameras and readers are replaced every few years; the platform, its rules and its history usually stay much longer.

There are three common approaches:

• Video management system (VMS) at the centre. The VMS records and displays video and receives events from access control, alarm panels, fence energisers and video analytics, linking each to a camera. Platforms such as Milestone XProtect work this way and suit most commercial and industrial sites, because video is what operators need to verify an alarm.
• Access control software at the centre. The access platform manages doors, credentials and visitors and calls up cameras on events. This suits sites where controlling people is the main risk, such as offices, labs and multi-tenant buildings, as long as the video side is strong enough for investigations.
• PSIM (physical security information management). A layer above several systems that gathers every alarm into one operator screen with step-by-step procedures. It suits large, multi-site or high-risk operations with a busy control room, but adds cost and complexity a single site rarely needs.

Ask every integrator three questions. Does the platform support the devices you have and the ones you will add, ideally through open standards such as ONVIF for cameras? Can operators see the alarm, the video and the access record on one screen? And who supports the software locally when it needs an update or a fault is found?

Why does it matter whether the integrator runs its own control room?

Monitoring is what turns a connected system into a response. Without someone watching, linked alarms and video still only help after the fact, and an integrator that hands monitoring to a third party brings back the split responsibility you were trying to remove.

In a monitored system, every alarm from a door, gate, beam, fence or analytics rule reaches a control room operator with live and recorded video. The operator verifies the event, follows the site's escalation procedure (warn through a speaker, call the site contact, dispatch armed response, call the police) and logs the outcome. Because the alarm arrives with video, the operator can tell a wind-blown branch from an intruder in seconds.

People are not built to watch screens for long. A US National Institute of Justice guide found that attention drops well below acceptable levels after about 20 minutes of watching monitors, so ask how the integrator's control room sends alerts to operators rather than expecting them to spot incidents on a video wall. CCTV Security Surveillance runs its own in-house 24/7 control room; see offsite monitoring and how we monitor operator alertness.

How should a security integrator design for your type of site?

A good integrator designs from the risks at your site, not from a standard package. Ask each one how they would approach a site like yours; these examples show what a sound answer looks like.

Warehouses and distribution centres

Warehouses lose most through the gate, the dock and the perimeter. Expect a design that links LPR at the gates, cameras over receiving and dispatch, scale and weighbridge data overlaid on the video, thermal or AI perimeter detection, and offsite monitoring after hours. See our logistics and warehousing page and CCTV for logistics and warehousing.

Office parks and multi-tenant buildings

Offices need to know who is in the building and to give each tenant controlled access. Expect tenant access cards and intercoms linked to the cameras at each entrance, on one platform that the managing agent and the control room can both use. See commercial offices.

Estates and secure complexes

Estates combine perimeter, gate and common-area security. Expect the electric fence and perimeter analytics, LPR and access control at the gates, common-area cameras and a monitored response on one platform. See CCTV for estates and our estates page.

Retail chains

Retailers lose stock at the till, the stockroom and the shop floor. Expect POS transactions tied to the camera over each till, stockroom doors on access control, and analytics such as AI shoplift detection. See retail.

Factories, mines and plants

Industrial sites add safety to security. Expect access control linked to induction records, cameras linked to PPE detection and safety zones, and perimeter detection linked to a monitored response. See why integrated CCTV matters for South African manufacturing, manufacturing and mining.

How do you compare quotes from security integrators?

Compare the same scope from every integrator: the same devices, links, monitoring and service levels. Every site is different, so a reliable figure only comes from a site survey; be wary of a price given without one. For camera-only budgets, see our CCTV for business pricing guide.

The main cost drivers to line up across quotes are:

• The number and type of devices: cameras, doors, gates, perimeter zones and intercom points, and whether special types are needed (thermal, LPR, explosion-proof, cold-rated).
• What can be reused: existing IP cameras, cabling and controllers that support the chosen platform cut the cost; closed or analogue systems may need replacing.
• Cabling and networking: distances, trenching between buildings, fibre links and a secure network for the security system.
• Software and licences: the platform, per-camera or per-door licences and analytics modules.
• Power backup: inverters and batteries sized to keep the system running through outages.
• Monitoring and maintenance: a monthly fee for 24/7 monitoring and a service agreement, which are ongoing rather than once-off.

A cheaper quote that leaves out integration testing, monitoring or maintenance often costs more over the life of the system. Some businesses prefer to spread the cost through a rental or maintenance agreement.

Will the integrator keep the whole system running through load-shedding?

A connected system is only as good as its weakest power supply. If the cameras stay on but the access controllers, network switches or fence energiser go down, the links between systems break exactly when criminals expect them to.

Ask the integrator to plan backup power for the whole chain: recorders and servers, network switches, cameras (often powered over the network from those switches), access controllers and locks, the fence energiser and the connection to the control room. Lock behaviour matters too: agree which doors must stay locked and which must release for safe evacuation when power fails. Our inverters and solar solutions page and the article on solar-powered CCTV systems cover how to size backup for security loads.

How should a security integrator run your project?

A good integrator plans from the risks, not from the equipment list. Expect roughly these steps, and be cautious of anyone who skips the first two.

1. Security risk assessment. Walk the site, list what can go wrong (theft, intrusion, fraud, safety incidents), where and when, and what each costs the business.
2. Audit what you have. Many existing cameras, access controllers and fences can be connected rather than replaced, if they support open standards and current firmware.
3. Design the links. Decide which events trigger which cameras, recordings and alerts, and who must respond to each.
4. Choose the platform. Pick a management platform that supports the devices you need now and open standards (such as ONVIF for cameras) so you are not locked in later.
5. Install and commission. Test every link: force each door, cross each beam and trip each analytics rule, and confirm the right video and alert arrive.
6. Monitor and maintain. Agree the monitoring procedures, the service level, preventive maintenance and how changes are tested. See maintenance and rental agreements.

Phasing is normal. Many businesses start by linking cameras to monitoring, then add access control and perimeter integration as budgets allow, as long as the first phase is designed with the later ones in mind.

What are the warning signs of a poor integration?

The most common warning sign is a provider that treats integration as a software feature rather than a way of running security. These problems come up again and again in systems that were connected without a plan:

• Linking everything, watching nothing. Systems are connected, but alarms go to a phone nobody checks at night. Integration only pays off when someone is responsible for responding.
• Too many alarms. Every door held open and every animal on the fence creates an alert, so operators start ignoring them. A good integrator tunes rules, zones and schedules so that alerts mean something.
• No testing after changes. A new camera, a firmware update or a moved door controller quietly breaks a link, and nobody notices until an incident. Links should be tested during every maintenance visit.
• Locked into one brand. A closed platform makes every future device expensive. Ask for open standards and a platform that supports several manufacturers.
• Forgetting the network. Security devices on the same network as office computers, with default passwords, are a cyber risk and a POPIA risk.
• Power for half the system. Cameras on backup but access controllers or switches not, so the links fail during load-shedding.
• No owner on the client side. Someone in the business must own the security system: approve user access, review reports and agree changes with the integrator.

Each of these is cheaper to avoid at design stage than to fix after an incident.

What does the research say?

A 40-year meta-analysis of 76 CCTV evaluations found about 14% lower odds of crime in areas with CCTV than in comparable areas without it. (Piza et al. (2019), 40-year CCTV meta-analysis, via CrimeSolutions)

CCTV combined with other measures such as access control, lighting or guarding produced larger effects than cameras alone, and the researchers advise against using CCTV as a stand-alone measure. (Piza et al. (2019), Criminology & Public Policy)

Actively monitored CCTV, where operators alert security or police while an incident unfolds, was associated with significant crime reductions; systems that only record showed no significant effect. (Piza et al. (2019), 40-year CCTV meta-analysis, via CrimeSolutions)

A US National Institute of Justice guide found that after only 20 minutes of watching and evaluating monitor screens, the attention of most people falls well below acceptable levels, which is why alert-driven monitoring and operator supervision matter. (Green (1999), National Institute of Justice)

Other multi-system projects include a cold storage facility in Durban with CCTV linked to temperature sensors, access control at eight cold rooms and 24/7 monitoring; a three-building office park in Umhlanga on one CCTV and access control platform for 24 tenants; and a gated estate in Johannesburg North with perimeter AI, LPR at the gates and monitored armed response.

The Bottom Line

The right security integrator designs, installs, monitors and maintains your whole system under one contract, so every alarm comes with video and a response and there is one number to call when something fails. Check registration, scope, control room, platform and track record before price, and start with a risk assessment, not an equipment list. For what the system itself should cover, see our integrated security solutions page.

CCTV Security Surveillance has designed, installed and monitored security systems for South African businesses since 1967, with more than 7,000 clients, over 50,000 cameras deployed and an in-house 24/7 control room. Book a security risk assessment or call 0861 002 288, or talk to your nearest branch in Gauteng, KwaZulu-Natal, the Western Cape or the Eastern Cape. Each branch can survey your site in and around Johannesburg, Durban, Cape Town or Gqeberha.