Building and facility services

Security and alarm monitoring origination playbook

Resolve who owns the subscriber relationship, performs monitoring and carries service obligations before assessing an alarm business.

Last reviewed · report an error

A research template, not investment advice. Figures are not stated where the public record does not support them.

Sector
Security and alarm monitoring
2022 U.S. NAICS

561621 · Security Systems Services (except Locksmiths)

Classification limits
Starting points for discovery, not a complete niche definition. Classify the actual activity and verify scope against the U.S. Census NAICS reference.

Understand the operating model

Alarm businesses may sell and install systems, service equipment, monitor signals or refer subscribers to a separate monitoring provider. Access control and video systems can add further scope. Distinguish the customer-facing brand, installer, monitoring station and contract owner before treating the business as a single operating model.

Revenue may include installation charges, equipment sales, service visits and periodic monitoring fees. A recurring invoice is not enough to establish transferable subscriber economics. Dealer arrangements, financing and subcontracted monitoring can allocate control and obligations differently. Local installation relationships can support distinct operators, but those arrangements need direct confirmation.

A recurring-revenue hypothesis asks whether customers remain under enforceable, serviceable agreements with the target. Test it with subscriber records and contract review. It weakens where accounts have been sold, the brand merely refers leads, or equipment and communication upgrades create future service costs that are absent from the initial screen.

What makes a target worth investigating?

These are fit hypotheses to test against your mandate. They are not verified attributes of any company or a prediction of acquisition performance.

  • A clear account-ownership model distinguishing retained subscribers from sold or referred accounts.
  • Documented relationships with monitoring providers, equipment vendors and installation teams.
  • A service footprint and technical capability appropriate to the systems actually supported.

Screening questions for Scout

Tailor these questions before collection. Each accepted answer needs a supporting verbatim excerpt from a retained page. Options describe permitted answers, not default assumptions. When no source supports an answer, leave it unanswered; absence from a website is not a “no.” See screening criteria for defining gates and weights.

QuestionAnswer typeOptionsWhy it matters
Which operating role is described?one ofInstaller / Monitoring provider / Dealer / MixedDifferent roles have different account rights and continuity dependencies.
Does the business explicitly retain customer monitoring contracts?yes/noSource-supported entriesPrevents treating sold accounts or referral activity as an owned subscriber base.
Which systems are supported?listSource-supported entriesRecord intrusion, fire, access control and video separately; one offering does not establish another.
Is monitoring delivered through a third party?yes/noSource-supported entriesFlags counterparty dependence and the need to review assignment and service terms.
Are maintenance or equipment upgrade obligations described?yes/noSource-supported entriesIdentifies commitments that may affect subscriber contribution and future delivery costs.
Does an excerpt show this stop condition: Lead referral or account-sale activity outside a retained-subscriber mandate?yes/noSource-supported entriesTriage applies this gate before research is paid for. It needs a quoted excerpt and the written mandate; silence leaves the question open and never answers yes or no.
Does an excerpt show this stop condition: Guarding-only services when the mandate concerns electronic monitoring?yes/noSource-supported entriesA second gate checked before detailed collection. An unresolved fact stays open for review; it does not become a negative finding.
Does the record support this fit hypothesis: A clear account-ownership model distinguishing retained subscribers from sold or referred accounts?yes/noSource-supported entriesTreat it as a hypothesis to test against the mandate, not a verified attribute of the company. Unsupported answers stay unanswered.
Suggested question schema. Financial mix, retention and operating performance usually require direct records at a later stage.

Four questions apply to every playbook (ownership category, locations, sale process, exclusions) and are listed once on the playbooks overview.

What public evidence can establish

Match every source to the correct entity, location and collection date. Use the data-source directory to choose discovery paths, and evidence standards to decide what an excerpt actually supports.

SignalWhere to lookLimits
Alarm business authorization
Relevant state business and contractor licensing records.

Source guide →

Monitoring and installation may require different permissions depending on jurisdiction.
Subscriber proposition
Monitoring plan pages and published customer terms.

Source guide →

Public plans do not establish account ownership, collections or actual attrition.
Monitoring partner disclosure
Company pages describing station relationships and delivery arrangements.

Source guide →

A partner logo is not evidence of contract terms or continuing service availability.
Technical positioning
Trade directories listing alarm and integration specialties.

Source guide →

Directory listings do not establish certifications or system compatibility.
Legal identity and trading names
State entity records matched against the website's legal notices and contact details.

Source guide →

Registration establishes an entity, not its ultimate beneficial ownership, operating scale or willingness to transact.
Current operating roles
Dated vacancies describing supervisors, delivery staff and administrative responsibilities.

Source guide →

Vacancies describe hiring intentions. They do not establish filled positions, employee totals or an imminent succession event.

Ownership and succession signals

  • A principal who owns dealer relationships and technical escalations may be critical to continuity. Confirm those responsibilities without inferring intent to sell from a long operating history.
  • Compare dated leadership pages with entity records and transaction announcements. A missing management biography is an evidence gap, not proof that the owner lacks a successor.
  • These are research signals, not proof of intent to sell. Confirm control, decision rights and succession preferences directly through an approved conversation before treating them as transaction facts.

Read succession and ownership before turning a continuity question into an ownership claim.

Reasons to stop or separate the record

Apply a disqualifier only when supported by evidence and your written mandate. Unresolved facts stay open for review; they do not become negative findings.

  • Lead referral or account-sale activity outside a retained-subscriber mandate.
  • Guarding-only services when the mandate concerns electronic monitoring.
  • Unresolved account ownership or authorization that prevents a reliable operating-scope assessment.

Approach with context and approval

  • Ask about business fit without requesting subscriber identities, system vulnerabilities or sensitive access information.
  • Do not imply that contractual monitoring fees are guaranteed or that every installed account is transferable.
  • The client approves each target and the messaging before contact. Check suppression records and applicable channel requirements; coordinate email, LinkedIn and phone so the business receives one coherent approach.

Use the outreach compliance guide to define channel requirements and suppression handling before optional outreach begins.

Questions for later diligence

These require direct records, management access and appropriate specialist review. Public screening identifies the questions; it cannot settle them.

  • Review subscriber cohorts, collections, cancellations, account ownership and dealer financing arrangements.
  • Assess monitoring continuity, assignment rights, response procedures and incident liability.
  • Quantify equipment obsolescence, service commitments and the costs of communication-system changes.

Use these theses to frame confirming and disconfirming evidence, then choose a sourcing method suited to the target universe.

Adjacent playbooks

Where to check this

Recurring monitoring revenue is the asset, and it is contractual: customer contracts, dealer and central-station relationships and account transfer rights decide what an acquirer receives. Fire alarm monitoring is governed by NFPA 72, and The Monitoring Association is a public view of the central-station side of the industry.

Sources

Related articles

Send us ten targets. We research them for free.

A target list and your acquisition criteria are enough. You get back company records with scores, the evidence behind every field, and the questions the public record could not answer.