NSI and SSAIB Approval Guide: Gold vs Silver Grades, Audit Process and Why Approval Matters for Insurance Work

Summary

Approval from NSI or SSAIB is the security industry's equivalent of a competent person scheme. An approved installer has been assessed against BS EN 50131 (intruder alarms) or BS 8418 (registered CCTV) by an independent, UKAS-accredited body. They have demonstrated that their installations meet current standards, their engineers are trained, their paperwork (commissioning sheets, certificates) is in order, and they have a compliant monitoring arrangement.

For installers, approval status opens commercial doors. Many commercial contracts, housing associations, local authorities, and high-value residential projects specify NSI Gold or SSAIB as a minimum requirement. Insurance companies require it — a system installed by an unapproved contractor may not satisfy the insurer's policy conditions, leaving the customer uninsured or at a reduced settlement level if they make a claim.

For customers, approval is assurance. An NSI Gold or SSAIB Gold badge on a van or company website means the installer has been independently audited and found compliant. It does not guarantee a perfect installation — but it means there is a process that can be pursued if something goes wrong.

The two bodies compete for business. Technical standards are broadly equivalent — both are UKAS-accredited and accepted by insurers and the police. Choice is often driven by which body serves the installer's region better, which has lower fees, or which a particular customer or insurer requires by name.

Key Facts

• NSI — National Security Inspectorate; established 1969; covers security, fire, and monitoring; UKAS-accredited
• SSAIB — Security Systems and Alarms Inspection Board; established 1994; covers security and fire; UKAS-accredited
• UKAS accreditation — United Kingdom Accreditation Service; ISO 17021 accreditation of the certification bodies themselves; the foundation of credibility
• Gold grade — full approval; requires annual inspection by NSI/SSAIB engineer + compliance with the full BS standard; required for police-monitored systems and most insurance-specified work
• Silver grade (NSI) — a lower tier available for some application types; not accepted for police URN (unique reference number) applications
• Police URN — a unique reference number assigned to a monitored alarm by the police; required for police response to activations; only granted to systems installed by NSI Gold or SSAIB Gold approved companies to BS EN 50131 Grade 2 or higher
• ARC (Alarm Receiving Centre) — a monitoring centre that receives alarm signals and coordinates response; ARCs require installer approval documentation before taking on a new system
• Annual inspection — the primary ongoing obligation; NSI/SSAIB inspector visits, checks installation records, sampling visits sites, audits paperwork
• Commissioning certificate — the document issued to the customer after each installation; confirms the system meets the standard; must be kept by the installer for 6 years
• Insurance Association of British Insurers (ABI) — ABI guidance specifies NSI Gold or SSAIB for alarm systems on commercial and high-value domestic policies
• ACPO (now NPCC) guidelines — National Police Chiefs' Council; sets the conditions for police response to intruder alarms; requires Gold-grade approved installers
• Fees — approximate annual fees: NSI Gold £1,500–3,000 depending on company size; SSAIB broadly similar; plus inspection fees per site visit
• Application process — application, desk audit, site visit inspection, certification; typical timeline 3–6 months from application to approval

Quick Reference Table

Detailed Guidance

Gold Grade Requirements

To achieve and maintain Gold grade (whether NSI or SSAIB), a company must:

Company infrastructure:

• Have a suitable liability insurance (minimum £1 million public liability; higher for commercial contracts)
• Have a complaints procedure
• Have a contract management system (customer contracts, maintenance schedules)
• Employ engineers with appropriate qualifications (City & Guilds, BTEC, or equivalent; most bodies now require a security systems qualification)
• Have an appropriate ARC agreement if offering monitoring

Technical compliance:

• Install systems to the relevant British Standard: BS EN 50131 for intruder alarms (Grade 1–4 depending on risk); BS 8418 for CCTV; BS EN 50132 for CCTV; BS EN 60839 for access control
• Complete a risk assessment for each installation
• Issue a commissioning certificate for every system installed
• Maintain records of all installations and maintenance visits

Ongoing:

• Annual inspection by the certification body (sampling of site visit to installed systems, paperwork audit, interview of engineers)
• Notify the certification body of any significant business changes (change of ownership, change of address, significant increase or decrease in activity)
• Address non-conformances identified at inspection within specified timeframes

What triggers suspension or withdrawal:

• Failure to correct non-conformances from an inspection
• Installation of a system that does not meet the relevant standard
• Failure to issue commissioning certificates
• Customer complaints not handled within the company's procedure
• Working outside the scope of approval (e.g. fire alarms without fire approval)

The Audit Process — What to Expect

The annual inspection is the most common contact between an approved company and the certification body. Understanding what the inspector looks for reduces anxiety and helps companies prepare.

Pre-inspection:

• Certification body requests a list of recent installations (typically 10–20 randomly selected from your records)
• Request for copies of commissioning certificates, maintenance visit records, and customer contracts for selected jobs

Desk audit:

• Inspector reviews the submitted documentation
• Checks commissioning certificates are complete (all fields filled; system grade stated; customer signature)
• Checks maintenance records are current (12-monthly recommended maintenance on Gold-grade systems)
• Checks calibration records for test equipment (multimeters, signal generators)

Site visit:

• Inspector visits 1–3 of the selected sites (sometimes unannounced to the installer; always with customer permission)
• Checks the installed system matches the commissioning certificate
• Checks system grade matches the risk assessment
• Checks detector coverage, control panel programming, signalling path testing
• Checks cable identification, quality of installation
• Interviews the engineer who installed or maintains the system

Post-inspection:

• Non-conformances are issued in writing with a timescale for remediation
• Major non-conformance (system not meeting the standard; falsified documentation): potential suspension of approval
• Minor non-conformances (incomplete paperwork, missed maintenance): issued as advisory or minor; must be corrected before next inspection

Why Insurers Require Approval

Insurers require NSI Gold or SSAIB because it de-risks their exposure:

1. Verification: an approved installer has been independently verified to install to standard; the insurer doesn't need to check each individual system
2. Traceability: if a system fails and a claim is made, the insurer can identify the installer and hold them accountable
3. Monitoring quality: monitored systems with a police URN are more likely to deter burglars and result in police attendance — reducing claims
4. Recourse: if the installer was not approved and the system was inadequate, the insurer may deny the claim; if the installer was approved, the certification body can investigate

The ABI Guidance on Electronic Security Systems (currently version [verify]) specifies what alarm and CCTV installations are acceptable for different levels of insurance cover. The insurer may specify the grade of system (e.g. Grade 2 intruder alarm) and the installer grade (Gold) as a condition of policy.

Getting Approved — Step by Step

Step 1 — Choose your certification body: Contact both NSI and SSAIB for an introductory meeting. Ask about fees, the inspection process, and regional coverage. Get a quote for your company size (number of engineers, number of sites per year). Both are competent and UKAS-accredited; choose based on fee, fit, and which body your target customers or ARCs prefer.

Step 2 — Prepare your documentation: Before applying, get your systems in order:

• Standard terms and conditions for customer contracts
• Risk assessment template
• Commissioning certificate template (the certification body will have a required format)
• Service and maintenance record template
• Complaints procedure (in writing)
• Engineer qualifications and training records

Step 3 — Application: Submit the application form with supporting documents. Pay the application fee. The certification body will review your submission and may request further information.

Step 4 — Initial inspection: A more thorough first inspection before certification. Expect the inspector to review 5–10 real installations, visit at least one site, and have a detailed conversation about your processes. Non-conformances at this stage mean a return visit before certification.

Step 5 — Certification: On passing the initial inspection, the company is registered as approved. Membership certificate, use of the NSI/SSAIB logo, and ability to issue police URN applications.

Step 6 — Annual renewal: Annual inspection (as described above) plus annual fee. Approval continues as long as annual audits pass.

Frequently Asked Questions

Can I install CCTV without NSI or SSAIB approval?

Yes, for standalone domestic CCTV that is not connected to an ARC and does not require a police URN. A residential customer who just wants cameras connected to a local recorder and their phone does not need an approved installer. However, if the customer's insurer requires NSI or SSAIB-installed equipment as a policy condition, using an unapproved installer could invalidate the policy. Always ask the customer to check their insurance requirements before quoting.

Is one body better than the other — NSI or SSAIB?

Both are UKAS-accredited and accepted by the same insurers and police forces. NSI is larger and has been operating longer. SSAIB is typically considered to have a more personal and responsive customer service for smaller companies. Regional coverage varies — in some areas one body has more local inspector presence. Talk to both before deciding. Once you're approved by one, there is no practical need to switch (though you can).

Can I subcontract to an approved company to offer approved systems?

Sometimes called a "sponsored installer" arrangement: an unapproved installer fits the system but the monitoring or commissioning is arranged through an approved company. Some ARCs offer this, but it has significant implications. The system is technically "installed by" the approved company; the field installer may have no direct approval relationship. This arrangement is riskier — if the installation is not up to standard, it is the approved company's approval that is at risk. Check the specific terms of any such arrangement with the certification body.

Regulations & Standards

• BS EN 50131-1:2006+A3:2020 — intruder alarm systems; general requirements; grade definitions (Grade 1–4)

• BS 8418:2015 — installation and remote monitoring of detector-activated CCTV systems; requirements for police URN eligibility

• BS EN 50132-7:2012 — alarm systems; CCTV surveillance systems for use in security applications

• BS EN ISO/IEC 17021-1:2015 — conformity assessment; requirements for bodies providing audit and certification (UKAS accreditation standard for NSI/SSAIB)

• NPCC Guidelines on Intruder Alarms — (formerly ACPO) — police response conditions and URN requirements

• NSI — National Security Inspectorate — approval grades, application process, fee guide

• SSAIB — Security Systems and Alarms Inspection Board — approval grades, application process, membership benefits

• UKAS — accreditation of NSI and SSAIB; directory of accredited bodies

• NPCC — National Police Chiefs' Council — guidelines on alarm systems and police response

• bs 8418 registered cctv — BS 8418 requirements for CCTV to achieve police URN

• gdpr cctv ico obligations — ICO compliance for CCTV installations

• cctv camera types selection — camera selection for compliant installations

• nvr dvr storage sizing — storage planning for monitored and registered CCTV systems