What to take into your next decision
- Keep the incoming signal, reviewed event, incident and response request distinct.
- Missing video or unresolved authorization needs an explicit exception path.
- Record observations, contact attempts and confirmed outcomes separately.
- Compare review measures only with consistent definitions, scope and data completeness.
Define the units before counting false alarms
A signal is an incoming alert. A reviewed event is a unit of operator assessment under your agreed grouping rules. An incident may contain several related signals or reviews. A response request is a communication asking another party to act. Counting these as though they were interchangeable can produce a misleading result.
Decide how repeated alerts from the same activity are grouped and how tests, maintenance and duplicate records are marked. Keep the original references so a grouped incident can still be traced back to its inputs. Define the period and the sites included before comparing results.
A lower signal count can come from a changed rule, a disconnected camera or shorter coverage. It is not sufficient evidence that verification improved. Review workload and outcomes against the service that was actually operating.
Use labels that preserve what remains unknown
The Monitoring Association’s AVS-01 material distinguishes human presence with unknown intent from confirmed threats to property or life. That is a useful reminder to preserve the evidence level in a response communication. Use the standard’s published procedures if applying AVS-01; the table below is a separate partner planning worksheet.
| Label | Basis to record | A conclusion to avoid |
|---|---|---|
| Confirmed routine activity | Visible action plus a current instruction or authorized confirmation | Every familiar-looking person is authorized |
| Escalation condition observed | Specific visible activity matching the accepted response plan | An unsupported claim about motive or identity |
| Unresolved authorization or context | Activity is visible but relevant permission or context remains unknown | An unanswered call means authorization was denied |
| Technical or visibility exception | The required view, footage or event information is missing or unusable | No usable image means nothing happened |
Reference: The Monitoring Association: ANSI/TMA-AVS-01 2024 overview and alarm levels

Keep the observation separate from the later explanation
Consider an illustrative review: a person enters a service area, the available view does not show the adjoining corridor and the site contact does not answer. A useful record states those observations and limitations, the instruction followed and the next action. It does not convert the unanswered call into proof of unauthorized entry.
If an authorized manager later confirms a maintenance visit, add the confirmation with its source and time. Preserve the earlier uncertainty instead of rewriting the record as though that information was available to the operator from the start.
Agree how corrections are recorded. An account team reviewing a complaint needs to reconstruct what was known at each decision point, including which instruction version was active.
Make the incident record support the next action
Use the blank incident-report template to agree fields with your provider. Identify the site, camera or zone, event reference and relevant time zone. Distinguish event time from receipt, review and contact times where the systems supply them. If clocks differ or a timestamp is unavailable, record that limitation before calculating elapsed intervals.
Capture observable actions, view limitations, supporting context, the instruction followed and each response step. Separate an attempted call, a received acknowledgment and a later confirmed outcome. Include the next owner when work remains open.
The receiving party needs a usable location: entrance, level, row or direction where known. If activity moves outside the available view, report the last observation and its time. An operator should not imply continuous tracking across an unseen area.
Measure the review process with explicit denominators
These are suggested account-review measures, not performance benchmarks. Use them only when your records support the numerator, denominator and exclusions. Report incomplete outcomes separately.
| Measure | Definition to agree | Interpretation limit |
|---|---|---|
| Unclear-event share | Unclear reviewed events divided by all reviewed events in the same scope and period | Depends on classification and grouping consistency |
| Technical-exception share | Reviews missing required information divided by all reviews in that scope | Does not count every incident that failed to generate a review |
| Handoff acknowledgment | Acknowledged response requests divided by requests requiring acknowledgment | Acknowledgment does not establish attendance or resolution |
| Outcome completeness | Incidents with a documented final disposition divided by incidents due for follow-up | An unconfirmed outcome must remain unconfirmed |
| Repeat exception causes | Recurring view, instruction or contact issues grouped by account and cause | Requires an owner and follow-up, not just a descending count |
Review what the operating records cannot see
Include incidents reported later by clients or field teams. Where evidence exists, check whether a signal was generated, delivered and reviewed, and what happened afterward. This can identify a gap in the workflow; it cannot measure every event that went unobserved.
When a detection rule, camera view or schedule changes, keep the change date and purpose with the review. Compare the active cameras, hours and delivery conditions alongside the outcome measures. A reduction caused by lost coverage should not be presented as better filtering.
For US and Canadian client accounts, confirm the permitted response communication and local receiving route. Additional visual information can support a request; the external agency or field provider makes its own response decisions.
Test an uncertain event before scaling the service
Use agreed practice scenarios covering routine activity, an observable escalation condition, unavailable video and an unanswered contact. Inspect the classification, record and handoff for each. A pilot should show that uncertainty survives the process without becoming an invented conclusion.
Bring representative records and your current instructions to a 1Degree verification discussion. The partner-evaluation and incident-report resources help your team identify what can be demonstrated, which evidence is missing and who must resolve it before more client accounts are added.
Questions partners ask
Does verification remove false alarm signals?
Verification assesses available information after an event reaches the workflow. Reducing recurring signal causes may require separate technical or account changes. Specify whether you are measuring incoming signals, reviewed events or response requests.
Should an unanswered contact call count as an unauthorized event?
No. It establishes that confirmation was not obtained through that attempt. Preserve the uncertainty and follow the accepted response plan, including the fallback and next owner.
Can fewer escalations prove the service improved?
Only with enough supporting context to interpret the change. Check coverage, active cameras, event delivery, classification and outcome completeness. A lower count alone can conceal missing information or lost coverage.




