A practical, prioritized security checklist for small businesses — access, alarms, monitoring, CCTV, and internal theft — plus where to start and what it costs. This guide sums up the criteria that matter, the mistakes to avoid and the concrete choices that help you decide faster.
Most small business owners I meet secured their premises the way they’d secure a home — a lock, maybe a camera — and then wondered why they still lost stock, or why the after-hours alarm never brought anyone. A business isn’t a house: it has staff, customers, cash, inventory, and data, and each of those is a different exposure. The good news is that covering them isn’t complicated once you work through it in the right order.
In fifteen years I’ve audited corner shops, offices, and small warehouses, and the pattern is always the same: the money gets spent on the flashy part (cameras nobody watches) while the cheap, high-impact basics (a monitored alarm, controlled keys, a shrinkage process) go missing. This checklist walks the whole perimeter — physical, procedural, and after-hours — so you close the gaps that actually cost you, in priority order.
The quick answer: five layers
Small business security comes down to five layers, roughly in priority order:
- Access & keys — who can get in, and how you revoke it.
- Intrusion alarm + monitoring — detection and after-hours response.
- CCTV — deterrence and evidence (with staff/privacy compliance).
- Internal loss (shrinkage) — process, not just hardware.
- Data & cyber basics — the exposure owners forget.
Cover these in order and you’ve handled the vast majority of real-world loss. Everything below is the checklist to get there.
The small business security checklist
Work top to bottom. Tick what you already have; the gaps are your to-do list.
Access & keys
- Every exterior door has a commercial-grade lock; back/side doors aren’t the weak link.
- You use access control (fobs/PIN/app) rather than metal keys you can’t track or revoke.
- Access is removed the day someone leaves — no lingering credentials.
- Deliveries and contractors have a controlled, logged entry — not a propped-open back door.
Intrusion alarm + monitoring
- A commercial intrusion alarm covers doors, windows, and interior motion.
- It’s professionally monitored so an empty premises still gets a response after hours.
- Cellular backup so cutting internet/power doesn’t kill the signal.
- Panic/hold-up button at the till for staff.
CCTV
- Cameras cover entrances, till/cash points, stockroom, and blind spots — not just the sales floor.
- Recording is retained long enough to be useful (days, not hours) and stored securely.
- Clear signage and a lawful basis for filming staff and customers (see compliance note below).
Internal loss (shrinkage)
- A documented cash-handling and closing routine (two people for cash counts where possible).
- Stock counts reconcile regularly; discrepancies are investigated.
- Refund/void overrides require a manager and leave a trail.
Data & cyber basics
- POS and Wi-Fi are on separate networks; default passwords changed.
- Customer/payment data is handled per your obligations; backups exist and are tested.
How exposed is your business? Score it
🏢 Quick business security self-audit
4 questions. An honest score shows where to spend first.
1. Can you revoke a former employee's access instantly?
2. Is your alarm professionally monitored after hours?
3. Do your cameras cover the till, stockroom, and back door (not just the floor)?
4. Do you have a documented cash-handling / closing routine?
Access control: who gets in, and how you revoke it
Metal keys are the quiet liability of small business: you can’t tell who used one, and a lost or copied key means re-keying everything. Access control (fobs, PIN codes, or app-based) fixes both — you grant access per person, see a log of entries, and revoke a leaver in seconds. For a small site, a single controlled main entrance plus good locks on the rest is usually enough to start.
Alarm + monitoring: protection when nobody’s there
An alarm without a response is just noise in an empty street after closing. For a business, professional monitoring is where the value is: a 24/7 center verifies the trigger and dispatches help even at 3 a.m. Pair it with cellular backup so an intruder can’t silence it by cutting the line. Not sure it’s worth the monthly fee? We break down the math in is professional monitoring worth it.
CCTV: deterrence, evidence — and compliance
Cameras do two jobs: deter, and provide evidence when deterrence fails. Cover the entrances, till/cash points, stockroom, and back door — the places loss actually happens — not just a wide shot of the sales floor. Keep footage long enough to be useful and store it securely.
For choosing hardware, our outdoor camera guide covers the criteria that also apply to commercial coverage.
Internal loss: the part hardware won’t fix
For many retailers, internal shrinkage and process error rival external theft. Hardware helps, but the wins are procedural: a documented cash-handling and closing routine, manager approval (with a trail) for refunds and voids, and regular stock reconciliation so discrepancies get caught early. Cameras over the till support all of this — but the routine is what actually reduces the loss.
Get free quotes within 24 hours from licensed commercial security pros near you — alarm, monitoring, access, and CCTV, scoped to your site. No obligation, zero spam.
Where to start
Match the kit to your site rather than over-buying:
- Compare purpose-built commercial systems in our best business security systems guide.
- For a cloud-managed, multi-site example, read our Verkada review — a useful benchmark for what modern commercial platforms do (and cost).
Conclusion
A small business isn’t a bigger house — it’s a different set of exposures: access, after-hours response, evidence, internal loss, and data. Work the checklist in order, spend on the response and the process before the picture, and get the compliance right on CCTV. Do that and you close the gaps that actually drain a small business, without over-paying for hardware that looks impressive and prevents nothing. Start with access and a monitored alarm this month; layer the rest as you grow.
Frequently Asked Questions
What does a small business security system cost?
It varies with size and how much is pro-installed. A small site might spend a few hundred dollars on a DIY alarm + camera kit, while a fully installed access + alarm + CCTV setup runs into the low thousands, plus a monthly monitoring fee (commonly $30–$100 for business plans). Scope it to your actual risk rather than buying the biggest package.
What's different about business security vs. home security?
A business has staff, customers, cash, inventory, and data — so it adds access control (revoke leavers), internal-loss process, and CCTV compliance obligations that a home doesn’t. After-hours monitoring also matters more because the premises sit empty and full of stock.
Is professional monitoring necessary for a business?
For most, yes — an empty premises after hours needs someone to respond, not just a siren. Monitoring with cellular backup is one of the highest-value line items for a business. See our dedicated guide on whether monitoring is worth it.
Can I film my employees on CCTV?
Generally yes for legitimate security purposes, but with obligations: clear signage, a lawful basis, informing staff, and never filming private areas (restrooms, changing rooms). Rules vary by country, so check your local requirements before recording.
How do I reduce internal theft (shrinkage)?
Mostly with process, not hardware: a documented cash-handling and closing routine, manager approval with an audit trail for refunds/voids, regular stock reconciliation, and cameras over the till to support it. Controlled access reduces after-hours internal loss too.
Do I need access control, or are keys enough?
For anything beyond a tiny team, access control pays for itself: you can see who entered and when, and revoke a former employee instantly instead of re-keying. Metal keys can’t be tracked and are easily copied — the weak point in most small-business setups.
Sources
- FBI Crime Data Explorer — U.S. crime and property-offense statistics.
- The Monitoring Association (TMA) — professional monitoring standards.
- Ready.gov — Business — official business preparedness guidance.
- Provider specifications and plan terms for commercial alarm, access-control, and CCTV pricing.
