Short answer: An intruder alarm should be reset only by a person authorised for that system and trained in the agreed procedure, after immediate safety and escalation actions have been completed. Silencing a sounder, acknowledging an alert, resetting the panel and returning the system to full protection are separate steps; one does not prove that the cause has been found or the system is ready for normal use.
At a warehouse, office or construction site, the person who attends may be a client keyholder, a security officer, a commercial keyholding responder or a specialist alarm engineer. Their responsibilities should be written down before an activation. A response brief that merely says “check and reset the alarm” can create unsafe assumptions, incomplete records and an unprotected building.
This is general operational guidance for commercial premises. Follow the site’s approved procedure, the alarm company’s instructions, any Alarm Receiving Centre requirements and applicable police or insurer conditions. Do not use this article as a panel-operating manual.
Separate attendance from authority to reset
Being sent to the premises does not automatically give the attendee authority to operate every part of the alarm. Define who can enter, who can inspect the agreed areas, who can contact the monitoring provider and who may use the reset function. If different people hold those permissions, the response procedure should show the handover between them.
The government’s SIA licensing guidance explains that security work involving keeping or controlling access to a key or device for operating a lock can require a keyholding licence. Clients using a commercial security provider should check the relevant individual licence for the proposed work rather than assuming that a general company description covers every duty.
Do not share codes, passwords or reset instructions through an open shift log, public message or general group chat. Keep them in the controlled system agreed by the responsible organisation.
Make safety and escalation the first decision
The attendee’s first task is not automatically to reach the panel. The site brief should explain what to do if there are signs of entry, damage, fire, a person on site or another immediate hazard. It should also define the circumstances in which the attendee keeps a safe distance and follows the agreed emergency or police-contact route.
ProtectUK’s counter-terrorism crime-prevention toolkit recommends an agreed response process with a contactable keyholder who can attend when an alarm activates, including out-of-hours arrangements. That is a planning point, not an instruction to enter a potentially unsafe building alone.
Write the limits of the inspection. A general security responder should not improvise an electrical repair, defeat a detector or enter an area outside the risk-assessed scope. Where a technical fault is suspected, preserve the alarm state and observations needed by the competent maintainer rather than repeatedly resetting the system to see whether the fault disappears.
Record what the system and the site actually show
Before changing the system state, record the available factual information in the authorised incident record. That may include the activation time shown by the system, the relevant zone or device description, messages from the monitoring provider, visible signs observed from permitted areas and the names or roles of people contacted.
Keep facts separate from explanations. “Rear warehouse detector shown on the panel” is a fact; “probably caused by a delivery” is an assumption unless it has been established. If camera images, access-control records or staff accounts are used, record their source and limitations without copying private material into an ordinary shift note.
The NPCC police requirements for security systems describe trained keyholders, current contact records and action to reduce false calls for systems within that framework. The exact police, monitoring and attendance arrangements must be confirmed for the particular installation; do not treat one published timetable as a universal promise for every alarm or location.
Distinguish silence, reset and full reinstatement
“The alarm has stopped” can mean several different things. A local sounder may have timed out. An alert may have been acknowledged by the monitoring centre. A user may have silenced the panel. A faulted zone may still be excluded, or the whole system may remain unset. The incident record should state the actual condition rather than simply “alarm reset”.
Agree who can decide that the system is ready to be set again. If a detector, door contact, power supply, communications path or other component remains in fault, the authorised person may need advice or attendance from the alarm maintainer. A temporary workaround, if permitted at all, should have an owner, approval, compensating arrangements and a review time. Do not allow an informal bypass to become the permanent operating state.
Where the alarm supports a vacant property or out-of-hours building, define who is told if full protection cannot be restored. The response is not complete merely because the attendee has left and the external sounder is quiet.
Control the return to normal duties
Specify who closes the incident and who confirms the next operational state to the monitoring provider, client representative and guarding team. The reset operator, the person approving re-entry and the manager accepting a temporary security gap may be different people.
The handover should identify unresolved faults, areas not checked, any engineer visit required and the person responsible for follow-up. If building work, maintenance or a change in occupancy appears relevant, pass that information to the responsible manager and alarm company. Do not alter system configuration or detector coverage as part of an ordinary guarding response.
After a repeated or unexplained activation, review the event with the system maintainer and the responsible site team. Look for a confirmed cause and an agreed corrective action rather than labelling the event “false” simply because no intruder was found.
Put the reset decision into the service scope
Before appointing a responder, ask practical questions:
- Who receives the first notification, and through which authorised channel?
- Who may attend, enter, inspect, silence, reset and reinstate the system?
- What stops the attendee from entering or continuing?
- Who contacts the monitoring provider, client, alarm engineer or emergency services?
- What factual record is required, and where is it stored?
- Who owns an unresolved fault and confirms that protection has been restored?
When considering keyholding and alarm-response arrangements, distinguish custody and attendance duties from alarm engineering and monitoring responsibilities. Review the broader K9, static guarding and supporting security services, then send the site postcode, proposed cover and required duties so the scope and feasibility can be considered. Do not send access codes or private response instructions in an initial enquiry.
Service availability, attendance expectations, licensing evidence and technical responsibilities must be confirmed for the particular assignment. No reset procedure can guarantee that an incident will be prevented or that a fault can be resolved without specialist attendance.
Featured image: an illustrative image from the site’s media library showing a security officer with keys and a torch. It does not depict K9 Security Services personnel, a client site or an actual alarm response.