Office Security Systems: The Complete UK Installer's Guide 2026
An office looks like the easiest building on an installer's list — no stock on shelves, no pupils, no plant yard — until you count what is actually in it: laptops and screens on every desk, a comms cabinet holding the business's data, a reception that strangers walk into all day, and staff who badge in at 7am and leave at 9pm. This guide sets out a complete UK office security systems specification for installers and facilities managers: video door entry at reception, access control on staff and comms-room doors, Hikvision CCTV inside and out, Ajax intruder and EN 54 fire detection, Reyee networking that keeps cameras off the office LAN, and the ICO rules that decide where a camera can point when the people in shot are your client's own employees.
At a glance
- Office risk is mostly out-of-hours entry, IT theft and tailgating — the Home Office's own survey puts IT and electrical kit among the most-stolen items from business premises
- Reception: a Hikvision video door station with card, PIN and face options replaces the buzzer and the paper visitor book
- Staff doors and the comms room: Hikvision access terminals, Mifare readers and Pro Series door controllers, fail-safe locks tied to the fire alarm
- CCTV: a 180° ColorVu turret for the entrance and car park, AcuSense domes inside, a 12MP fisheye over open-plan floors
- Ajax Hub 2 Plus for intruder, the dedicated Ajax EN 54 Fire Hub for fire, LeaksProtect for the server room and kitchenette
- Reyee gateway, PoE switch and Wi-Fi 6/7 APs with CCTV and access control on their own VLAN
- ICO rules on monitoring workers, three reference builds, a credential comparison and a handover checklist
Why an office needs its own security specification
An office is a high-value, low-footfall building that is busiest at the front door and emptiest at night, so the specification has to control who walks in during the day and detect who breaks in after hours. Unlike a shop, there is little reason for a stranger to go past reception; unlike a warehouse, almost everything worth stealing is small, portable and sitting on a desk. That shifts the budget away from long-range perimeter cameras and towards three things: entry control at reception, door-by-door access control for staff areas, and a monitored intruder alarm that covers the hours nobody is in.
The second difference is people. Every camera in an office will record the client's own employees for eight or more hours a day, which brings UK GDPR and the ICO's guidance on monitoring workers into the design from day one rather than as paperwork at handover — covered in its own section below.
What the crime figures say about business premises
Around one in four business premises in England and Wales is a victim of crime in a given year, and burglary is the second most common offence after theft. The Home Office's 2023 Commercial Victimisation Survey estimates that 26% (409,000) of business premises experienced a crime in the previous 12 months, with theft at 14%, burglary including attempts at 8%, vandalism at 8% and assaults or threats against staff at 7%. IT or electrical equipment made up 9% of items stolen in thefts, burglaries and robberies — the fourth most common category. Only 55% of victimised premises reported a crime to the police, and just 35% of those that did were satisfied with the response.
The same survey found that the most commonly used crime prevention measures were the ones that monitor and prevent entry to premises when they are closed. For an office installer that is a useful line to put in a quote: the evidence points at door control and out-of-hours detection first, cameras second.
The office threat is also digital. The government's Cyber Security Breaches Survey 2025 found 43% of UK businesses reported a cyber security breach or attack in the previous 12 months, rising to 65% of medium and 69% of large businesses. Every IP camera, door station and access terminal you fit is another network device, which is why the networking section of this guide matters as much as the camera choice.
Reception and visitor entry
The front door of an office should identify a visitor before it opens, let staff walk straight in, and log both — which is exactly what a modern IP video door station does. The Hikvision DS-KV6124-WBE1 door station is the workhorse for a single-tenant office: according to the DS-KV6124-WBE1 datasheet it has a 4MP camera with a 150° horizontal field of view, 120 dB WDR, a built-in PIN keypad and Mifare card reader, Bluetooth and Hik-Connect unlocking, two independent lock relays, Wi-Fi 6 or 802.3af PoE, and an IP65/IK08 housing. That second relay is useful in an office — one for the street door, one for the internal lobby door.
For a head office or a reception that wants hands-free entry for staff, the Hikvision DS-KV9503-WBE1 face recognition door station adds a 4.3" screen and face authentication in a metal housing, so regular staff are recognised at the door while visitors still get a video call through to reception. Pair either with a visitor log and you have replaced the buzzer, the paper book and the “who is that?” problem in one device. Our Hikvision access control installer guide covers wiring the door station into a wider access system.
Access control for staff doors, stairwells and the comms room
Inside the building, access control decides which badge opens which door at which time — and the comms room, HR and finance offices, and the stairwell to any shared floor are the doors that need it most. For a door where staff should use a fingerprint or card, the Hikvision DS-K1T805MBFWX access control terminal stores 3,000 fingerprints, 10,000 cards and 100,000 events, supports card, fingerprint, PIN and Bluetooth, and is rated IP65/IK08 according to Hikvision's DS-K1T805MBFWX product page. The Hikvision DS-K1T804BMF fingerprint and card terminal is the lower-cost indoor option for internal doors.
Where a door only needs a card, or card-plus-PIN for the comms room, a reader and controller is the more scalable design. The Hikvision DS-K1108AMK Mifare reader with keypad sits at the door and talks back to a Hikvision DS-K2602T two-door or DS-K2604T four-door Pro Series controller in the riser, so one controller covers a corridor of offices. Finish each door with a DS-K7P03 no-touch exit button and, on glazed double doors at reception, the DS-K4H250D double-door magnetic lock.
One rule to design in from the start: any electrically locked door on an escape route must release on a fire alarm signal and on power loss. Specify fail-safe locks on escape routes, wire the release from the fire panel, and confirm the arrangement against the building's fire risk assessment before first fix.
Choosing a credential: card, PIN, fingerprint, face or phone
The right credential depends on how many people use a door and how much a lost card matters — there is no single best option across a whole office. Use this table when the client asks “should we just do face recognition everywhere?”
| Credential | Best for | Watch-outs | Netview example |
|---|---|---|---|
| Mifare card / fob | General staff doors, high throughput | Lost or shared cards — revoke promptly | DS-K1108AMK + DS-K2602T |
| Card + PIN | Comms room, HR, finance | Slower; PINs get written down | DS-K1108AMK keypad |
| Fingerprint | Small teams, no cards to manage | Biometric data — DPIA and an alternative method needed | DS-K1T805MBFWX, DS-K1T804BMF |
| Face recognition | Hands-free main entrance | Biometric data — same ICO caveats as fingerprint | DS-KV9503-WBE1 |
| Phone / Bluetooth / app | Out-of-hours and remote release | Depends on staff phones and app accounts | DS-KV6124-WBE1, Hik-Connect |
Biometrics are the one place an office access system becomes a data protection project: offer a card or PIN alternative for anyone who does not consent, and record the decision in the DPIA.
External cameras: entrance, car park and bin store
Outside an office, one wide camera on the entrance and one on the car park usually do more than six narrow ones, because the goal is a clear face at the door and a clear view of who parked where. The Hikvision DS-2CD2387G2P-LSU/SL panoramic ColorVu turret covers a 180° horizontal field of view at up to 5120 × 1440 from twin sensors, with 130 dB WDR, a red/blue strobe and a speaker for audible warnings, IP67 and IK08, according to Hikvision's DS-2CD2387G2P-LSU/SL datasheet — one camera on the corner of a building replaces two conventional turrets across a car park or forecourt.
For the main door itself, the bin store and side fire exits, the Hikvision DS-2CD2386G2H-IU 8MP AcuSense turret gives a 4K image and human/vehicle classification, so the alarm-receiving phone pings when a person walks round the back of the building at 2am and stays quiet when a fox does. See our Hikvision camera buyer's guide for the full range.
Internal cameras: reception, corridors and open-plan floors
Inside an office, cameras belong on entrances, circulation routes and high-value areas — not on individual desks. Reception and lift lobbies suit a discreet dome such as the Hikvision DS-2CD2146G2H-ISU 4MP AcuSense dome, with the DS-2CD2186G2H-ISU 8MP 4K dome where you need to identify faces across a wider lobby.
For an open-plan floor, a single ceiling-mounted fisheye usually beats four corner cameras. The Hikvision DS-2CD63C5G1-IVS 12MP DeepinView fisheye captures a 3504 × 3504 circular image through a 1.29mm lens, with 15m IR, IP67 and IK10 ratings, according to the DS-2CD63C5G1-IVS datasheet, and dewarps into panoramic or multi-view layouts in the NVR or Hik-Connect. It also has four microphones and a speaker — which brings us to the rules on recording staff.
Monitoring staff lawfully: what the ICO expects
Recording employees is lawful under UK GDPR, but only where it is necessary, proportionate, transparent and the least intrusive way to meet the purpose. The ICO's guidance on video surveillance including CCTV requires clear signage and a Data Protection Impact Assessment for new or significantly expanded systems. Its October 2023 guidance, Employment practices and data protection: monitoring workers, goes further for staff: as Lewis Silkin's summary puts it, employers must be clear about the purpose, choose the least intrusive means, document why they are monitoring, and tell workers about it except in very exceptional cases where covert monitoring is justified — and the ICO recommends a DPIA even where one is not strictly mandatory. Fingerprint and face templates used to identify people are special category biometric data under UK GDPR, which raises the bar again.
In practice that changes four things on an office job:
- Audio off by default. Many of the cameras in this guide have microphones. Recording conversations in an office is far harder to justify than video — disable audio in the NVR unless the DPIA supports it. Our Hikvision Audio 2.0 guide explains where audio is genuinely useful.
- No cameras on individual workstations, toilets, changing or prayer rooms. Point at doors and circulation routes, and use privacy masking where a field of view clips a desk or screen.
- Biometric access needs an alternative. Offer a card or PIN for anyone who does not consent to fingerprint or face.
- Written retention and access rules. Who can view footage, for how long it is kept, and how a subject access request is handled.
None of this is the installer's legal responsibility — it is the employer's — but raising it at survey stage is the difference between a smooth handover and a system the client's HR team asks you to switch off.
Intruder alarm for the out-of-hours office
An office is empty for roughly two-thirds of every week, so the intruder alarm — not the cameras — is the system that actually catches a break-in. The Ajax Hub 2 Plus is the natural panel for a multi-floor office: it supports 200 devices, 200 users, 25 security groups and 100 cameras, with Ethernet, Wi-Fi and two SIMs as four communication channels and up to 2,000m Jeweller radio range in open space, per the Hub 2 Plus specification sheet. Security groups are the feature that matters in an office: arm the comms room and finance office overnight even while the sales floor works late, or give each tenant floor its own group in a shared building.
The Ajax MotionCam U sends a photo with every alarm so a keyholder or monitoring centre can see whether the trigger was an intruder or a cleaner who forgot their code, while the Ajax DoorProtect Plus U covers fire exits and the comms room door against opening, shock and tilt. The Ajax KeyPad TouchScreen at reception lets staff arm with a tag, code or phone. Our Ajax wireless alarm systems guide covers hub sizing and detector choice in depth.
Fire detection and the Fire Safety Order
Every UK office is covered by the Regulatory Reform (Fire Safety) Order 2005, so the responsible person must hold a fire risk assessment that decides what detection the building needs. That assessment usually points to a BS 5839-1 system category: L categories protect life and P categories protect property. As the Fire Risk Assessment Network's guide to BS 5839-1:2025 categories explains, L3 (escape routes plus the rooms opening onto them) is one of the most commonly specified categories for commercial buildings, L4 (escape routes only) can suit offices with simple layouts, L2 adds high-risk areas such as kitchens and plant rooms, and L5 adds localised detection for a specific risk such as a server room. Most commercial premises also need a Grade A system with EN 54 components. A comms room or kitchenette is the typical room that takes an office beyond basic escape-route cover.
Ajax's EN 54 range runs on its own dedicated panel, the Ajax EN 54 Fire Hub Jeweller, separate from the intruder hub but managed in the same Ajax PRO app. Fit the Ajax FireProtect (Smoke) point detector on corridors and open-plan floors, the FireProtect (Heat) detector in the kitchenette where toast and kettles would false-alarm a smoke head, and the FireProtect sounder/VAD where staff wearing headsets need a visual alarm. Wireless detection is a big advantage in a fitted-out office with suspended ceilings and tenants who will not tolerate chasing. Read our Ajax Fire Hub Jeweller EN54 guide for zoning and commissioning.
Server rooms, comms cabinets and kitchenettes
The single most expensive room in many offices is the comms cabinet, and the threat to it is more often water than burglars. A leaking kitchenette pipe or air-conditioning condensate tray above a rack can take a business offline for days. The Ajax LeaksProtect flood detector sits on the floor under the rack, the sink or the AC unit and reports to the same Hub 2 Plus as the intruder detectors, so a leak alert reaches the facilities manager's phone at 3am on a Sunday. Add a DoorProtect Plus U on the comms room door and a card-plus-PIN reader outside it, and the room that holds the business's data has its own detection, its own audit trail and its own alarm group.
Networking: keep cameras and doors off the office LAN
Security devices should live on their own VLAN, separated from staff laptops and guest Wi-Fi, so a compromised camera cannot reach the finance server and a guest cannot reach the NVR. A cloud-managed Reyee gateway makes that straightforward on a small office budget: the Ruijie RG-EG210G-P-V3 has 10 gigabit ports, up to 4 WAN links with load balancing and failover, a 110W PoE budget and a recommended 200 concurrent clients, according to Ruijie's RG-EG210G-P-V3 page — enough to run a small office's cameras and door stations directly.
On a larger floor, the Ruijie RG-NBS3100-24GT4SFP-P-V2 24-port PoE+ managed switch powers cameras, access terminals and APs from one rack with VLANs configured in Reyee Cloud. For Wi-Fi, the Ruijie RG-RAP2260(E) Wi-Fi 6 ceiling AP covers standard office floors and the RG-RAP72PRO Wi-Fi 7 AP suits meeting rooms and dense hot-desk areas. Then apply the basics the NCSC's guidance on smart security cameras sets out — change default passwords, keep firmware updated, and switch off remote access features that are not needed — which apply just as much to a commercial NVR as to a home camera. Our Reyee networking for CCTV guide covers switch and AP sizing.
Recording, retention and remote management
Size the NVR for the camera count you will have after the next fit-out, not the one on today's drawing. A small office with four to six cameras is well served by the Hikvision DS-7604NXI-K1/4P(D) 4-channel PoE NVR; a multi-floor office of ten to sixteen cameras suits the DS-7616NXI-K2/16P(D) 16-channel PoE NVR; and a head office or business park that needs fast forensic search across many cameras should step up to the DS-7732NXI-K4/16P/VPRO 32-channel AcuSeek NVR, which lets an investigator search footage by natural-language description rather than scrubbing a timeline. See our K/VPro AcuSeek NVR guide and Hikvision NVR buyer's guide.
There is no fixed legal retention period for office CCTV; most businesses settle on around 30 days and keep flagged incidents longer. Size the drives with our CCTV storage guide, then hand over remote access through Hik-Connect user accounts rather than shared logins, following our Hik-Connect setup and handover guide.
Three office reference builds
These three builds cover most office enquiries — use them as a starting bill of materials and adjust after the survey.
| Build | Entry & access | CCTV & recording | Alarm, fire & network |
|---|---|---|---|
| A — Small office 1 floor, up to 20 staff | DS-KV6124-WBE1 at the street door; DS-K1108AMK on the comms cupboard | 1 × DS-2CD2387G2P-LSU/SL entrance, 2-3 × DS-2CD2146G2H-ISU inside, DS-7604NXI-K1/4P(D) | Hub 2 Plus, MotionCam U, DoorProtect Plus U, LeaksProtect; RG-EG210G-P-V3 + RG-RAP2260(E) |
| B — Multi-floor office 3-4 floors, 50-150 staff | DS-KV6124-WBE1 + DS-K4H250D at reception; DS-K1T805MBFWX on stair doors; DS-K2604T controllers | DS-2CD2387G2P-LSU/SL + DS-2CD2386G2H-IU outside, DS-2CD63C5G1-IVS per open-plan floor, DS-7616NXI-K2/16P(D) | Hub 2 Plus with groups per floor, KeyPad TouchScreen; Fire Hub + FireProtect to L2; RG-NBS3100-24GT4SFP-P-V2 |
| C — Head office / business park multi-building, 150+ staff | DS-KV9503-WBE1 face entry at the main door; fingerprint terminals on secure rooms | Mixed turrets, domes and fisheyes on DS-7732NXI-K4/16P/VPRO with AcuSeek search | Hub 2 Plus per building; Fire Hub per building; RG-RAP72PRO in meeting areas, managed in Reyee Cloud |
Product selection by zone
Match each zone of the building to the product that solves its specific risk, rather than fitting one camera or reader everywhere.
| Zone | Main risk | Recommended product |
|---|---|---|
| Street door / reception | Unidentified visitors, tailgating | DS-KV6124-WBE1 or DS-KV9503-WBE1 + DS-2CD2146G2H-ISU dome |
| Car park / forecourt | Vehicle crime, out-of-hours loitering | DS-2CD2387G2P-LSU/SL 180° ColorVu |
| Rear doors / bin store | Forced entry, fly-tipping | DS-2CD2386G2H-IU AcuSense + DoorProtect Plus U |
| Open-plan floor | After-hours theft of laptops | DS-2CD63C5G1-IVS fisheye + MotionCam U |
| Comms room | Unauthorised access, water damage | DS-K1108AMK card + PIN, LeaksProtect, FireProtect (Heat) |
| Kitchenette | Fire, leaks, false smoke alarms | FireProtect (Heat), LeaksProtect |
Commissioning and handover checklist
Before you hand an office system over, check the technical commissioning and the paperwork the client's HR and facilities teams will be asked about.
- Every escape-route door with an electric lock releases on fire alarm and on power failure
- Access levels and time schedules match the client's org chart; leavers' cards can be revoked same day
- Camera views checked against the DPIA — no desks, screens, toilets or changing areas; privacy masks applied
- Audio recording disabled unless the DPIA justifies it; CCTV signage visible at every entrance
- Default passwords changed on every NVR, camera, door station and switch; firmware current
- CCTV, access control and door stations on their own VLAN; guest Wi-Fi isolated
- Ajax security groups match the building's arming pattern; LeaksProtect tested under the rack
- Fire detection category and device locations recorded against the fire risk assessment
- Hik-Connect and Ajax app accounts issued to named users, not shared logins
FAQ: office security systems
What security systems does a UK office need?
Most offices need four systems working together: video door entry at reception, access control on staff and comms-room doors, an intruder alarm for out-of-hours, and fire detection to match the fire risk assessment — with CCTV covering entrances, circulation routes and the car park.
Can an employer put CCTV in an open-plan office?
Yes, provided it is necessary, proportionate and staff are told about it; the ICO expects a DPIA, clear signage and the least intrusive coverage that meets the purpose, so cameras should watch entrances and circulation routes rather than individual workstations.
Is it legal to record audio on office CCTV?
Audio recording is much harder to justify than video because it captures conversations, so it should be disabled by default and only enabled where a DPIA shows a specific, proportionate need.
Do magnetic locks on office doors need to release on a fire alarm?
Yes — any electrically locked door on an escape route must release on a fire alarm signal and on loss of power, which means fail-safe locks wired to the fire panel and checked against the fire risk assessment.
Is fingerprint or face recognition access control allowed for staff?
It can be used, but biometric data is high-risk under UK GDPR, so the employer needs a DPIA and should offer an alternative such as a card or PIN for staff who do not consent.
Can one Ajax hub run intruder and fire detection in an office?
Not for EN 54 fire detection: Ajax's EN 54 FireProtect range runs on the dedicated Fire Hub Jeweller, while intruder detectors run on a hub such as the Hub 2 Plus — both are managed in the same Ajax PRO app.
Should office CCTV be on a separate network?
Yes — cameras, NVRs, door stations and access terminals should sit on their own VLAN so a compromised device cannot reach business systems, with guest Wi-Fi isolated from both.
How long should an office keep CCTV footage?
There is no fixed statutory period; retention should be no longer than necessary for the stated purpose, and most offices set around 30 days, keeping footage of specific incidents for longer.
What fire alarm category does an office need?
The category comes from the fire risk assessment: L3 (escape routes and adjoining rooms) is common for commercial buildings, L4 can suit a simple single-storey office, and L2 or L5 detection is added where a comms room or kitchen creates a higher risk.
Related posts
- Ajax Keypad Comparison: KeyPad, Plus, TouchScreen & Outdoor
- Reyee Managed Switches for CCTV: RG-NBS Range Guide
- Reyee EG Series Gateways & Routers for CCTV
- Ajax MotionProtect vs Pyronix KX: Which Wireless PIR for UK Intruder Installs
- Martyn's Law Lockdown System: UK Installer Guide
Ordering
Netview CCTV stocks the Hikvision, Ruijie Reyee and Ajax products in this guide in Leicester, with same-day dispatch on stocked lines. Browse the full range at netviewcctv.co.uk/brands, or contact us through the website for trade pricing on a multi-floor or multi-site office project.
About the Author
