Use this security system AMC checklist before you sign: a good contract should cover scheduled preventive maintenance, defined response and resolution times, a clear spares policy, firmware and security updates, documented testing of fire alarm and life-safety devices, regular reports, and a written list of exclusions. If any of these are missing or vague, the contract will be hard to enforce when something fails.
An annual maintenance contract, or AMC, is what keeps CCTV, access control, fire alarm, turnstiles and time attendance systems working years after installation. Yet many security system AMC documents are one page long and say little more than "quarterly visits". This checklist sets out what to look for, whether you are renewing an existing contract or comparing new proposals.
Why the AMC scope matters
Security and life-safety systems usually fail quietly. A camera loses focus, a hard disk in the recorder stops recording, a smoke detector becomes contaminated with dust, or a turnstile drifts out of adjustment. None of these is obvious until the day the system is needed. A well-scoped AMC finds these faults before an incident does, and it gives you a documented record that the systems were maintained, which insurers, auditors and fire authorities may ask to see.
The security system AMC checklist
1. Assets covered
The contract should include an asset register listing every device covered: cameras, recorders, access controllers, readers, locks, fire alarm panels, detectors, sounders, turnstiles, attendance terminals and software. Anything not on the list is, in practice, not covered. Ask for the register to be updated whenever devices are added or replaced.
2. Preventive maintenance frequency and tasks
"Quarterly visits" is not a scope. Each visit should have a task list per system type. Typical items include:
- CCTV: clean lenses and housings, check focus and fields of view, verify recording on every channel, check retention days against policy, check disk health and time synchronisation.
- Access control and time attendance: test readers, locks, door contacts and exit buttons; check controller communication, event logs and battery backup; clean biometric sensors.
- Turnstiles and speed gates: check alignment, arms or wings, sensors, drive mechanisms and emergency free-swing or fail-safe behaviour.
- Fire alarm: inspect the panel, test a sample of detectors and manual call points, check sounders, standby batteries and fault or disablement status.
Busier or harsher sites, such as dusty factories or high-traffic lobbies, may need more frequent visits than an office.
3. Response and resolution times
Response time is how quickly the contractor acknowledges and attends a fault; resolution time is how quickly the system is working again. Both should be written down, ideally in tiers:
| Priority | Example fault | What to define |
|---|---|---|
| Critical | Fire alarm panel fault, recorder not recording, main entrance access down | Fastest on-site attendance, including out of hours |
| High | Several cameras offline, a turnstile lane out of service | Attendance within the working day or next day |
| Normal | Single camera fault, minor software issue | Scheduled fix or next preventive visit |
Check whether times apply around the clock or only during business hours, and how they differ between cities or remote sites.
4. Spares policy
This is where contracts most often disappoint. Clarify whether the AMC is comprehensive (parts included) or non-comprehensive (labour only, parts charged separately). Ask which critical spares the contractor keeps in stock, what happens when a product is discontinued, and whether a temporary replacement is provided while a part is repaired or imported.
5. Firmware, software and security patching
Networked security devices are computers, and they need updates. The AMC should state who reviews manufacturer firmware releases, how updates are tested and scheduled, and who is responsible for password management and user access reviews. It should also cover software licences and database backups for video management, access control and attendance software.
6. Fire alarm testing and logbooks
Fire alarm maintenance needs particular care because it is a life-safety system. International standards such as NFPA 72 set out inspection and testing frequencies, including periodic functional testing of detectors and sensitivity checks, and require records to be kept. In Pakistan, the Building Code of Pakistan (Fire Safety Provisions) and local authority requirements also apply. Whatever standard your building follows, the AMC should state which devices are tested at each visit, how testing rotates so every device is covered over the cycle, and that results are entered in a logbook you keep.
7. Reporting
After each visit you should receive a service report listing what was checked, what was found, what was fixed and what is recommended. A periodic summary should show open faults, recurring problems and devices approaching end of life. Good reporting turns the AMC from a cost into a planning tool for your capital budget.
8. Escalation and contacts
The contract should name how faults are logged, whether by phone, email or an online service request, and give an escalation path if response times are missed. A single ticket reference for every fault makes it easier to track performance over the year.
9. Training and handover
Many call-outs are operator issues, not equipment faults. Refresher training for security staff and administrators, such as exporting footage, enrolling users or acknowledging fire alarm events, reduces downtime. Some contracts include this; others offer it separately through training and operations support.
Exclusions to watch for
Every AMC has exclusions. The problem is exclusions you only discover when you raise a claim. Read carefully for:
- Damage from power surges, water ingress, vandalism or misuse.
- Consumables such as batteries, hard disks and lamps.
- Cabling faults outside the equipment itself.
- Work at height needing scaffolding or lifts.
- Devices added after the contract started but not added to the register.
- Repairs caused by third-party changes to the system or network.
- Out-of-hours attendance charged at extra rates.
Exclusions are not necessarily unreasonable, but they should be clear so you can budget for them or negotiate them in.
Questions to ask before you sign
- Is there a full asset register attached to the contract?
- What exactly is done on each preventive visit, for each system?
- What are the response and resolution times, and are they measured?
- Are parts included, and which spares are held locally?
- Who handles firmware updates and cyber security settings?
- How are fire alarm tests recorded, and who keeps the logbook?
- What reports will we receive, and how often?
- What is excluded, in writing?
AMC for existing systems
If your systems were installed by another contractor, a new AMC usually starts with a site survey to record the condition of each device and highlight anything that needs repair first. This is also the right time to spot unsupported software, recorders nearing the end of their disk life and devices that no longer receive firmware updates.
Resco has designed, installed and maintained building systems in Pakistan since 1990, for banks, hospitals, universities, manufacturers and government institutions. Our maintenance and support services cover security, fire and life safety, access control and attendance systems, and existing clients can log faults through our service request page.
Frequently asked questions
What does a security system AMC include?
A good AMC includes an asset register, scheduled preventive maintenance with defined tasks, response and resolution times, a spares policy, firmware and security updates, fire alarm testing records, service reports and a written list of exclusions.
What is the difference between a comprehensive and non-comprehensive AMC?
A comprehensive AMC includes the cost of replacement parts as well as labour. A non-comprehensive AMC covers labour and visits only, with parts charged separately. Comprehensive contracts cost more but make budgeting more predictable.
How often should a fire alarm system be maintained?
It depends on the standard and the site, but visual inspections and functional tests are carried out at set intervals, with every detector tested over a defined cycle. Standards such as NFPA 72 set out frequencies, and local fire authority requirements also apply.
Can an AMC cover systems installed by another company?
Usually, yes. The new contractor will normally survey the site first, record the condition of each device and identify anything that needs repair or replacement before the AMC begins.
Want your AMC reviewed or a maintenance proposal for your site? Request a proposal, or contact Resco on +92 21 36378960-2 or at info@resco.com.pk.