Most failed SIRA inspections in Dubai are not caused by bad cameras. They are caused by a system that was compliant on the day it was installed and quietly drifted out of compliance over the following three years.
A drive fills up and retention silently drops. Firmware goes un-patched. A shopfitter moves a partition and creates a blind spot nobody logs. The trade licence renewal comes around, the inspector arrives, and a system that has worked perfectly well for years does not pass.
This guide covers what to check before that inspection — written from the perspective of a SIRA-approved integrator that handles these audits regularly across Bur Dubai and the wider emirate.
Why SIRA compliance is a licensing issue, not just a security one
The Security Industry Regulatory Agency is the Dubai Government body that licenses and oversees security systems and personnel across the emirate. For a wide range of premises — retail, warehousing, hospitality, healthcare, education, buildings under construction, parking, and more — a compliant CCTV system and a valid SIRA NOC are tied to your ability to operate and renew your trade licence.
That is the part businesses underestimate. A non-compliant system is not a security gap you can schedule for next quarter. It is a licensing blocker, and it surfaces at exactly the moment you have the least flexibility.
It is also worth knowing that only a SIRA-licensed company can install and certify a compliant system. Work carried out by an unlicensed contractor will not pass inspection regardless of the equipment quality.
The seven things to verify before an inspection
- Camera resolution against current specification
SIRA sets minimum resolution requirements, with higher thresholds for high-detail zones — entrances, exits, cash-handling points, server rooms.
The practical implication: legacy 2MP cameras installed several years ago are the most common failure point. If any part of your estate is still running older analogue or early IP cameras, - Retention period, measured not assumed
Retention requirements vary by facility type, with high-security premises such as banks and jewellers carrying a longer minimum than general commercial sites.
The failure mode here is subtle. A system sized for 31 days at installation will not still deliver 31 days after you have added six cameras, raised resolution, or increased frame rate. Storage maths does not update itself. - Storage resilience
Compliant systems are expected to survive a disk failure without losing footage — which in practice means a RAID configuration rather than a single drive. - Coverage and blind spots
Inspectors verify that mandatory zones are covered with clear visibility, without gaps. Coverage is assessed against the premises as they exist on inspection day — not as they existed at installation. - Record security and firmware
Systems are expected to be tamper-protected, with stored footage encrypted and access restricted to authorised personnel. Firmware needs to be current for security patching. - Regulatory access connectivity
Dubai’s framework requires connection to an approved device enabling regulatory access to feeds. - Documentation
This is where otherwise-compliant sites lose time. Have ready:
– Your current SIRA NOC and its expiry
– The installing company’s SIRA licence details
– As-built camera layout drawings reflecting the current site
– Equipment list with model numbers and SIRA approval status
– Maintenance records and service history
– Records of who has access to footage and under what authorisation
If your integrator holds all of this and you hold none of it, you have a dependency worth fixing.
Multi-emirate operations
If you operate outside Dubai, each site meets its own authority’s specification. Abu Dhabi operates under its own monitoring framework, Sharjah Police set separate requirements, and other emirates have their own authorities. Requirements genuinely differ — including on matters as fundamental as whether wireless connections are permitted and how long footage must be kept
A specification that passes in Dubai does not automatically pass in Sharjah. Design each site to its local authority.
A practical pre-audit sequence
If your renewal is approaching, work in this order:
- Pull the real numbers first — actual oldest footage date, actual resolution per camera, actual RAID status. Assumptions are where audits fail
- Walk the site against your original drawings and log every physical change.
- Review the gap list and separate the quick fixes (firmware, credentials, a failed drive) from the capital items (camera replacement, storage expansion).
- Schedule the capital work with lead time. Equipment procurement and installation cannot be compressed into the week before an inspection.
- Assemble documentation in one place before the inspector arrives.
The businesses that pass smoothly are not the ones with the most expensive systems. They are the ones who checked the real numbers three months out rather than three days out.
Where an AMC changes the picture
Most of what causes an audit failure is drift — and drift is a maintenance problem, not a design problem. A structured maintenance contract that includes periodic retention verification, firmware patching, drive health monitoring, and coverage review after any site change turns an annual scramble into a non-event.
That is genuinely the difference between the sites we see pass first time and the sites we are called into with two weeks’ notice.
Need a pre-audit review?
KNH IT is a SIRA-approved provider based in Bur Dubai, delivering CCTV design, installation, certification, and maintenance across Dubai. If your renewal is approaching or you are unsure whether your current system still meets specification, we can carry out a pre-audit assessment and give you a clear gap list.
FAQ
It applies to a broad range of commercial premises including retail, warehousing, hospitality, healthcare, education,
construction sites, and parking facilities. Requirements vary by business type, size, and risk level, so the specific obligations for your premises should be confirmed against your
classification.
A failed inspection means no NOC, which can delay trade licence renewal and create operational restrictions. Remediation
then has to happen under time pressure, which is typically more expensive than addressing gaps proactively.
No. Only a SIRA-licensed company can install and certify a compliant system. Work by an unlicensed contractor will not pass
inspection regardless of equipment quality
Retention minimums vary by facility type, with high-security premises such as banks and jewellers subject to longer periods than
general commercial sites. Confirm the current requirement for your specific classification, and verify your system is actually achieving it rather than relying on its configured setting.
No. Dubai follows SIRA, while Abu Dhabi, Sharjah, and other emirates operate under their own authorities with genuinely different
specifications. Multi-emirate operators must meet each local authority’s requirements site by site.
