What to take into your next decision

  • Keep the incoming signal, reviewed event, incident and response request distinct.
  • Missing video or unresolved authorization needs an explicit exception path.
  • Record observations, contact attempts and confirmed outcomes separately.
  • Compare review measures only with consistent definitions, scope and data completeness.

Define the units before counting false alarms

A signal is an incoming alert. A reviewed event is a unit of operator assessment under your agreed grouping rules. An incident may contain several related signals or reviews. A response request is a communication asking another party to act. Counting these as though they were interchangeable can produce a misleading result.

Decide how repeated alerts from the same activity are grouped and how tests, maintenance and duplicate records are marked. Keep the original references so a grouped incident can still be traced back to its inputs. Define the period and the sites included before comparing results.

A lower signal count can come from a changed rule, a disconnected camera or shorter coverage. It is not sufficient evidence that verification improved. Review workload and outcomes against the service that was actually operating.

Use labels that preserve what remains unknown

The Monitoring Association’s AVS-01 material distinguishes human presence with unknown intent from confirmed threats to property or life. That is a useful reminder to preserve the evidence level in a response communication. Use the standard’s published procedures if applying AVS-01; the table below is a separate partner planning worksheet.

Working labels for a partner’s event-review plan
LabelBasis to recordA conclusion to avoid
Confirmed routine activityVisible action plus a current instruction or authorized confirmationEvery familiar-looking person is authorized
Escalation condition observedSpecific visible activity matching the accepted response planAn unsupported claim about motive or identity
Unresolved authorization or contextActivity is visible but relevant permission or context remains unknownAn unanswered call means authorization was denied
Technical or visibility exceptionThe required view, footage or event information is missing or unusableNo usable image means nothing happened

Reference: The Monitoring Association: ANSI/TMA-AVS-01 2024 overview and alarm levels

Illustration of an operator reviewing detections against visible camera activity

Keep the observation separate from the later explanation

Consider an illustrative review: a person enters a service area, the available view does not show the adjoining corridor and the site contact does not answer. A useful record states those observations and limitations, the instruction followed and the next action. It does not convert the unanswered call into proof of unauthorized entry.

If an authorized manager later confirms a maintenance visit, add the confirmation with its source and time. Preserve the earlier uncertainty instead of rewriting the record as though that information was available to the operator from the start.

Agree how corrections are recorded. An account team reviewing a complaint needs to reconstruct what was known at each decision point, including which instruction version was active.

Make the incident record support the next action

Use the blank incident-report template to agree fields with your provider. Identify the site, camera or zone, event reference and relevant time zone. Distinguish event time from receipt, review and contact times where the systems supply them. If clocks differ or a timestamp is unavailable, record that limitation before calculating elapsed intervals.

Capture observable actions, view limitations, supporting context, the instruction followed and each response step. Separate an attempted call, a received acknowledgment and a later confirmed outcome. Include the next owner when work remains open.

The receiving party needs a usable location: entrance, level, row or direction where known. If activity moves outside the available view, report the last observation and its time. An operator should not imply continuous tracking across an unseen area.

Measure the review process with explicit denominators

These are suggested account-review measures, not performance benchmarks. Use them only when your records support the numerator, denominator and exclusions. Report incomplete outcomes separately.

Measures for reviewing a verification workflow
MeasureDefinition to agreeInterpretation limit
Unclear-event shareUnclear reviewed events divided by all reviewed events in the same scope and periodDepends on classification and grouping consistency
Technical-exception shareReviews missing required information divided by all reviews in that scopeDoes not count every incident that failed to generate a review
Handoff acknowledgmentAcknowledged response requests divided by requests requiring acknowledgmentAcknowledgment does not establish attendance or resolution
Outcome completenessIncidents with a documented final disposition divided by incidents due for follow-upAn unconfirmed outcome must remain unconfirmed
Repeat exception causesRecurring view, instruction or contact issues grouped by account and causeRequires an owner and follow-up, not just a descending count

Review what the operating records cannot see

Include incidents reported later by clients or field teams. Where evidence exists, check whether a signal was generated, delivered and reviewed, and what happened afterward. This can identify a gap in the workflow; it cannot measure every event that went unobserved.

When a detection rule, camera view or schedule changes, keep the change date and purpose with the review. Compare the active cameras, hours and delivery conditions alongside the outcome measures. A reduction caused by lost coverage should not be presented as better filtering.

For US and Canadian client accounts, confirm the permitted response communication and local receiving route. Additional visual information can support a request; the external agency or field provider makes its own response decisions.

Test an uncertain event before scaling the service

Use agreed practice scenarios covering routine activity, an observable escalation condition, unavailable video and an unanswered contact. Inspect the classification, record and handoff for each. A pilot should show that uncertainty survives the process without becoming an invented conclusion.

Bring representative records and your current instructions to a 1Degree verification discussion. The partner-evaluation and incident-report resources help your team identify what can be demonstrated, which evidence is missing and who must resolve it before more client accounts are added.

Questions partners ask

Does verification remove false alarm signals?

Verification assesses available information after an event reaches the workflow. Reducing recurring signal causes may require separate technical or account changes. Specify whether you are measuring incoming signals, reviewed events or response requests.

Should an unanswered contact call count as an unauthorized event?

No. It establishes that confirmation was not obtained through that attempt. Preserve the uncertainty and follow the accepted response plan, including the fallback and next owner.

Can fewer escalations prove the service improved?

Only with enough supporting context to interpret the change. Check coverage, active cameras, event delivery, classification and outcome completeness. A lower count alone can conceal missing information or lost coverage.

Sources and further reading

Back to all guides