CCTV Audit Checklist


Model of System; Approx Age

Is the system digital or video?

Is there a named individual on site who is responsible for the operation of the system, knows how to burn images etc.

Has the system been serviced in the last 12 months?

Is there a service maintenance contract set up?

If Yes, who with?

Is the CCTV Pack complete with:

Are the Cameras working and do they produce good quality images that can be easily taken from the system when required?

How many cameras are there in total? (Mark on site plan and their coverage)

Cameras have been positioned to avoid capturing the images of persons not visiting the premises e.g. Neighbours Houses or sections have been blanked out to avoid intrusion.

Are there signs for the CCTV?

If Yes, are they visible, relevant to the site and the controllers contact details are up to date?

Are the recorded images from this CCTV system securely stored, where only a limited number of authorised persons may have access to them

How long are images at this site to be stored for (14-31 Days)

Are the viewing monitors out of the public view and in staff only area?

Are staff aware of the procedure for disclosure of the CCTV to the Police - the MG11 form must be completed by a member of staff, log sheet completed and a master copy kept

The operating equipment is regularly checked to ensure that it is working correctly with the date/time checked weekly

Are staff aware of the procedure for handling requests for access of the CCTV from staff or visitors?

What type of media is used to burn images?

Is there a supply of media to burn images?

Is the external lighting sufficient that images are of usable quality?

Are there any other CCTV systems on site controlled by other organisations?

If Yes, who?

Risk Assessment Report

Hazard Identified:

Control measures in place

Recommended action to reduce risk

Action to be taken by whom

By Date

Who might be harmed?

Risk assessment conducted by:
Date conducted
Review Date

General Audit

Intruder Alarm

Who maintains and services the alarm?

Is the alarm monitored by a company?

If Yes, what is the name of the alarm response company.

Does this company also act as a key holder?

If No, then who acts as the key holder for the site/building?

Does the building have an Intruder Alarm?

If more than one building, list buildings and answer for each

Access Control & Keys

Is there access control within the building that is operated by fobs, swipe cards or proximity cards?

If Yes, what type of system is it?

Who on site has access to the system PC?

Who maintains the system?

Is there a maintenance contract set-up?

Can all actions of fobs or cards used be monitored? i.e. a record of what doors are accessed by individuals at what time?

Can individuals be deleted off the system?

Are digital coded locks or electronic coded locks used on site?

If Yes, approximately how many are there?

Are codes changed on a regular basis?

If Yes, how often are they changed?

Where is the main key box for the site/building kept?

Is there a signing out and in book procedure?

Are there any master keys for the building?

Are master keys ever given out or taken out of the building?

Is it in a secure location with limited access?

Are visitors signed in and out?

Are there any door entry systems used, such as intercom systems?

If Yes, where are they located?

Are all windows lockable?

If No, where are these windows located?

Panic Alarms

Do any of the rooms that patients are seen in have a panic alarm system?

If No, what procedure is in place for staff to summon help in an emergency?

If no panic alarm system, has this been risk assessed?

If Yes, what areas have panic alarms?

Where do the panic alarms sound back to?

What is the response to an alarm?

Do staff enter the room or do they call the police?

Are staff who respond trained in PSTS etc?

Is the panic alarm system tested on a regular basis?

If Yes, how often is it tested and are the tests recorded?

Are all new staff trained on the panic alarm system as part of their induction to the building?

Is there a written protocol that includes all of the above?

What type of system is it? i.e. PIT alarms worn by staff, buttons or rail on the wall?

Lone Working

Are there any areas of the building or site where lone working takes place?

If Yes, where does this happen?

Does lone working happen out of hours?

Has lone working in these areas been risk assessed?

Has a lone worker protocol for that service been completed?

What control measures are in place for lone working?

Are lone worker devices used?

Known Security Issues

Criminal damage including vandalism?

Car crime - damage or theft from?

Verbal abuse to Reception or car parking staff?

Theft of staff belongings?

Theft of Trust items?


Have there been any disputes or complaints from local neighbours?

If Yes, provide details

Does the site or building suffer from anti-social behaviour?

If Yes, is this during the day or out of hours?

Does the local neighbourhood police team attend site at all?

Critical Assets

Is any cash kept on site?

Are any card payment machines used on site?

Is this more than petty cash?

If At Risk, how much is kept on site?

Where is this kept?

How often is this money banked?

What is the procedure for taking money to the bank?

Are prescription forms used on site?

Are they FP10 pads or printable forms?

Is there a central store on site or are prescribers responsible for their own?

Are there medical gases on site?

Is the medical gas store covered by CCTV?

Are they stored in a cental medical gas store on site?

If No, name the locations gases are located.

Is the medical gas store secure?

Have attempts to break in ever been made?

Are any controlled drugs kept on site?

If Yes, where are CD Cupboards located?

Is there a procedure for access to the CD Cupboard key?

Lone Worker Protocol Return

Number of staff

Type of Work:

Ward or department based

Community - health centres, schools, GP surgeries

Patient/client homes

Hours of Work:

Daytime hours - 8am - 6pm

Out of Hours

Mental Health or Community Health


If there is a concern over staff safety because of lack of content (e.g. at the end of their shift) is there an escalation process?

Following a risk assessment, if the risk to lone working staff is high, would staff benefit from lone worker devices?

If Yes, what is the rationale behind this?

How many lone worker devices are required?

As per section 9.1 of the lone worker policy, has a written risk assessment been carried out for this service covering all lone working employees?

Do staff carry out dynamic risk assessments when in a lone worker situation?

Reference section 9.3 of the lone worker policy, how does the service share information with other services/agencies related to staff safety?

What protocol does the service have in place for lone working e.g. buddying system, working in pairs, lone worker devices, staff to phone into base etc.

How often is this protocol reviewed/updated?

Managers name:
Date of completion
Please note that this checklist is a hypothetical example and provides basic information only. It is not intended to take the place of, among other things, workplace, health and safety advice; medical advice, diagnosis, or treatment; or other applicable laws. You should also seek your own professional advice to determine if the use of such checklist is permissible in your workplace or jurisdiction.