What a maintenance agreement must actually oblige.

What a maintenance agreement is actually buying

A committee signing a security maintenance agreement believes it is buying working cameras. The strongest evidence says it is buying attention. The forty-year systematic review by Piza, Welsh, Farrington and Thomas put the overall effect of CCTV at an odds ratio of 1.141, a crime decrease of approximately 13 per cent. Underneath that average: the 54 schemes reporting active monitoring showed a significant reduction at an odds ratio of 1.172, while passively monitored systems showed non-significant effects across all three of the review’s meta-analyses.

The scope limits matter. These are pooled evaluations of car parks, town centres, public transport and residential areas, none Malaysian and none a high-rise condominium. Across the residential evaluations the reduction was approximately 12 per cent (OR = 1.133, p = .009), and for housing schemes it was non-significant (OR = 1.028, p = .805). The review concludes that CCTV should be narrowly targeted on vehicle and property crime and not deployed as a stand-alone measure.

One more limit: the review measured monitoring style, active against passive. It did not test maintenance. That a system nobody maintains cannot be actively monitored either is this page’s own reasoning, not the review’s finding. The wider position sits in the guide to takeover and maintenance.

Why is electronic security missing from the strata literature?

Malaysian strata writing hardly treats electronic security as an asset under contract at all. A SAYS explainer of what maintenance fees pay for lists the upkeep of “the swimming pool, gym, laundry rooms, and elevators” and models security cost as guard shifts and entry points. iProperty’s guide names “the hiring of security guards” and puts security at a big portion of the cost of managing high-rise residential buildings, never separating guarding from systems.

The supply side reads the same way. Prozas Security describes itself as a guard company and lists “CCTV and intruder alarm system, etc.” at the tail of a guarding list, with no maintenance terms on the page.

The context makes the omission expensive. The Department of Statistics recorded 58,255 Crime Index cases in 2024, 11.1 per cent up on 52,444 in 2023, with property crimes surging 12.4 per cent to 47,188. House break-in and theft actually declined 1.8 per cent, and 77.6 per cent of those cases occurred at night — an argument about how a camera performs in the dark, not for buying more of them.

What must the agreement state, and what happens when it is silent?

An agreement is worth what it obliges. The preamble, the equipment list and the payment terms describe a relationship; only the obligations survive a disagreement. Six clauses carry the weight; a seventh decides what happens at the end. The grid below is a reading of that structure, not a published standard, and its right-hand column is what follows in principle rather than a survey of Malaysian agreements.

The second column is the point. A committee reading its own agreement typically finds the first row specific and the rest absent or written as intent, which is how a building holds a signed contract and a drawer of separate quotations. Price spread follows: the more difficult a specification is to comprehend, the greater the variation in tender prices. Comparing quotations covers making three prices comparable.

Scheduled attendance: what is actually done

Malaysia does publish one complete CCTV maintenance scope of works, priced line by line, and it is not a condominium’s. Majlis Bandaraya Iskandar Puteri’s CCTV maintenance tender covers council-owned buildings on a multi-year contract priced by the month. Its recurring line: service and preventive maintenance, camera cleaning, connection continuity checks, view angle adjustment, camera lens focus and response to abnormalities, to reduce down time and repair cost.

• The camera. Domes, lenses, housing windows and the interior of camera housings, cleaned — a named contractual task, not a courtesy.
• The view. View angle and lens focus checked and adjusted. A camera knocked out of alignment is not a fault anyone reports.
• The head end. Network switch, recording console, fibre receiver and transmitter and the rack verified as sound, ventilated, power supplies secured.
• The software. Management software reviewed for deficiencies, system integrity verified, updates applied where necessary.
• The evidence. A photographic record of the work before, during and after, delivered in copies as a priced item of the contract.

A committee can hold its own agreement against that list and see what is missing. The same tender advises suppliers to visit and survey the site before quoting, and treats an unpriced item as included elsewhere and still to be carried out — the defence against a bid that gets cheap by leaving scope out. The mechanisms transplant to a condominium; the council’s quantities and prices do not.

Two of those lines rarely reach a condominium’s agreement at all: firmware upkeep, and the head end. A recorder left four years behind is a maintenance failure that looks like nothing until it becomes a security one, and nobody asks about rack ventilation until the recorder overheats.

Response, or rectification?

Of the Malaysian maintenance pages found here, those that publish terms state a response and stop. CCTV Clinic’s maintenance contract terms promise “24 hours response technical Support from our customer service team and support engineers”, with quarterly and annual maintenance audits. Nothing there obliges anyone to repair anything: a fault attended inside the day and left unrepaired for six weeks satisfies it.

The Singapore Police Force’s VSS Standard for Buildings, recommendations issued for building owners, does the opposite. It recommends that all system and equipment faults be rectified within 24 hours, and that system availability be set at 95 per cent over a 12-month time frame. Rectification rather than attendance; a target rather than an intention. It is Singaporean and advisory even there, so a Malaysian building adopts it voluntarily or not at all.

No Malaysian equivalent turned up in this research: no police standard, no ministry guidance, no availability target in the council tender. The UK specification convention leaves the number blank on purpose — its model clause has the contractor attend “within xx hours/days of the fault being reported”, and the xx is printed in the source, because the buyer has to choose it. Two numbers are needed, not one: hours to attend, and hours to rectify.

Where does the money for a failed camera come from?

The council tender answers that plainly, and most agreements a committee will have signed do not. Spare parts sit in it as their own priced line: a provisional sum of RM 50,000 — money set aside inside the contract price, drawn down only against actual failures rather than paid as part of the monthly fee. A building whose agreement is silent on parts finds out the answer one camera at a time.

The mechanism is what transplants. The figure is a municipal council’s, for its own buildings, and carries nothing across to a condominium.

MCMC named the same distinction in its own costing for a public deployment, in the row labels. The early years are “Comprehensive Maintenance, includes spare parts and labour”. By “Year 10 Preventive Maintenance, excludes spare parts”, the same programme on the same system no longer carries the parts at all. Cover narrows as the installation ages — the opposite of what a committee assumes when it signs a long agreement and stops reading it.

The grey list between included and excluded

Between what is plainly inside the fee and plainly outside it sits a grey list. Each item on it is invisible on a quotation until the buyer names it.

• Consumables that look like fixtures. Seagate publishes its surveillance drives as designed for always-on workloads of 180 TB a year. The mean time between failures beside it describes a population, not the drive in the rack.
• Redundancy nobody asked for. The Singapore standard calls for the system to support minimally a RAID 5 array, so a failed disk is rebuilt while recording continues, and for at least 20 per cent reserve media.
• Weather and impact. The Singapore standard puts IP65 as the floor outdoors; Redvision’s checklist raises that to IP66 for exposed positions and IK10 where vandalism is a risk, which the Sebert Group test laboratory publishes as a 20 joule impact class. Storm damage excluded in an agreement that never specified a rating is doing two jobs.
• Parts that no longer exist. MCMC lists among the weaknesses of video surveillance that technology “can breakdown, needs repair, and runs out of older version spare parts”.
• Power at the far end of a run. On the Ethernet Alliance’s figures a switch port rated at 90 W for a Class 8 device guarantees 71.3 W at the powered device once cable loss is taken out, and TIA-568-B limits a horizontal run to 90 m. Ask what the budget is at the furthest camera.

Replacing a camera is maintenance; replacing the system is not, and which fund pays is less settled than most commentary suggests — Sinking fund or maintenance fee sets it out.

What happens when nothing is reported?

The most expensive fault in a building is the one nobody notices. A recorder that stopped writing, a camera off the network, a disk that failed months ago: none produces a complaint, because nothing visible changes until somebody asks for footage.

One clause in the Singapore standard is written as an obligation rather than a recommendation, and it is the one that matters here: an uninterruptible power supply with at least 30 minutes of backup capacity shall be provided for the video management system, the recorders and the viewing terminals. A recorder that dies with the mains was never going to capture the incident.

The same standard asks for a baseline no Malaysian maintenance agreement found in this research asks for. On commissioning, the agreed camera views and image quality for monitor view and recorded image should be properly documented and reviewed periodically by the building owner; storage duration, alarms and image quality should then be audited, with any deterioration rectified immediately.

That baseline is what makes later degradation provable. Without one, a committee that believes the pictures have got worse has an opinion and the contractor an equally good one. Note where the standard puts the auditing duty: on the building’s own security manager as much as the contractor.

Image quality, written as a number

The council’s own check on its cameras is visual: view the display screen, verify pan, tilt and zoom. That proves a picture exists, not that it is good enough for the position, and no Malaysian document found in this research sets that test.

Axis, reproducing the 2014 edition of IEC 62676-4, gives four operational levels as 25 px/m for detection, 63 px/m for observation, 125 px/m for recognition and 250 px/m for identification — equivalently 4, 10, 20 and 40 pixels across a human face, on an assumed face width of 16 cm.

That edition has been superseded. The 2025 edition replaces the four levels with seven, from Overview to Scrutinize, sorted into low and high pixel density categories — Overview, Outline and Discern sit at 20, 40 and 80 px/m. The two scales do not map onto each other, so an agreement naming the standard must name the edition, and a specification written now should use the current one.

Two caveats travel with these figures. Axis calls it a simplified model of a complex reality in which complying guarantees nothing: light direction, optics quality and compression all bear on the result. And the Singapore standard notes that the resolution being compared reflects the lowest resolution in the chain, not necessarily the display screen — so the test belongs on the recorded stream.

A volunteer cannot look at a still and know whether it is 125 px/m, so the obligation belongs on the contractor: state in writing the density the design achieves at each named position, and demonstrate it on the recorded stream at handover and each annual test.

The annual test, and who says how often

No document found in this research sets a reporting interval for a condominium. Annually is this page’s own proposal, on the reasoning that it is the least a committee can act on and lines up with the budget cycle a general meeting already runs. The parameters inside it are not ours; the right-hand column says whose each one is.

The levels in the first row are assigned by position, not by camera. The Singapore standard puts identification as the minimum for the frontal view of people entering and leaving by main entrances, observation for general coverage of common areas, and recognition at counters where a security check or registration takes place. The building decides what each position must achieve; the contractor decides how.

The twelve-month cap nobody raises

One provision of the Strata Management Act 2013 almost never enters a security maintenance discussion. Section 21(3) bars a joint management body from any contract relating to the maintenance and management of the buildings and the common property “for any period exceeding twelve months”. On the plain wording, a CCTV or access-control maintenance agreement reads as such a contract.

Section text quoted on this page is the Unannotated Statutes of Malaysia reproduction, incorporating amendments to 1 June 2015; check the gazetted text before relying on it.

Both halves have to be said. The restriction sits in Part IV and binds a joint management body; there is no equivalent cap on a management corporation in Part V. So a JMB holding a three-year agreement inherited from the developer holds a contract it could not lawfully have signed itself — and the same building, once its management corporation is formed, is under no such cap and may sign a longer term.

The consequence is not that the systems go unmaintained. It is that a JMB re-lets, or at least re-confirms, every year — an opportunity if the scope is written down. What a building inherits at handover is covered in what a JMB inherits from the developer.

What does the Act leave to the building?

More than a committee expects. A full-text search of Act 757 in this research returns no definition of “security services”. Section 23(3)(b) permits the maintenance account to be spent on “cleaning services for the common property, security services and amenities for the occupiers of the building”, and never says whether that reaches equipment or only manpower. That silence is why scope has to be written rather than assumed.

A full-text search of the Act and the 2015 Regulations for a spending threshold returns nothing either: no monetary limit, no percentage, no rule that a spend must go to a general meeting above some figure. The only control on a joint management committee is section 22(1), which makes its powers subject to “any restriction imposed or direction given by the joint management body at a general meeting”. Whatever limit a committee believes it is under, its own owners imposed it.

Procurement is a duty with no method. By-law 3(7) of the Third Schedule to the Regulations 2015 requires the management body to “set up, manage and maintain proper procurement procedures and tender process in a fair and transparent manner” for every contract touching the common property, and prescribes no number of quotations, no threshold and no method. By-law 3(1) sets the duty behind it: keep the installations, equipment and devices “in a state of good and serviceable repair”. The duty is real; the method is the building’s, which is what a scope of works for a tender is for.

Which clauses go missing?

Seven, on the evidence assembled here. None is exotic, none costs a contractor anything to accept, and each has a published precedent above — a council bill of quantities, a police standard, a UK specification convention, the ONVIF profile scheme; the note says which.

The first four need a number, and nobody supplies it for the building. The only anchors this research found are foreign or municipal, and should be adopted as choices rather than inherited as norms: rectification within 24 hours and availability at 95 per cent, both Singapore Police Force recommendations; the IEC 62676-4 image levels in the current edition; and a separately priced spare-parts sum, the mechanism from the Iskandar Puteri tender without its figure.

Drawings, credentials and the way out

Interoperability is the anti-lock-in clause. ONVIF states that conformance to a profile is the only thing that ensures compatibility between ONVIF products, so naming the required profile is what lets a different contractor work on the system later. It is a moving target: the June 2026 version of the ONVIF conformance test tools is the last permitting a Profile S claim, that profile being retired in favour of Profile T.

Documentation is the other half. The UK specification convention lists “as-fitted wiring and schematic diagrams” among handover requirements, and has the contractor submit a full schedule of maintenance for the warranty period and subsequent contracts — in the installation tender, not afterwards. A building holding none of that cannot genuinely re-tender.

Malaysian law helps only partly. Section 15(3)(f) requires a developer to hand the joint management body all warranties, manuals, schematic drawings, operating instructions, service guides and manufacturer’s documentation for any common property. But the as-built cable-route duty at section 15(3)(b) is conditional: it bites only where the developer has reason to believe the installation is not where an approved plan shows it. There is no unconditional right to as-built ELV drawings.

One more clause is worth copying. The same convention runs its twelve-month defects warranty from the date of the Certificate of Practical Completion, and defines practical completion as “fourteen consecutive days of uninterrupted, fault free operation” — an acceptance test with a number in it.

Reading the agreement already signed

The test on an agreement in force is short. Find the parts clause, the rectification deadline and the exit clause. Without the first two the building has bought attendance rather than maintenance; without the third it cannot re-tender from anything.

Occhio Tec is an ELV (extra low voltage) systems contractor in Kuala Lumpur, established 2010, working in high-end condominiums in the Mont Kiara, Bangsar and KLCC areas for service and maintenance. It takes over and maintains systems another contractor installed, and holds a Panasonic Malaysia Authorised Strategic Partner appointment for ELV works and a MicroEngine Authorised System Installer appointment. What a given agreement should say depends on what is installed and what documentation survives.

Any of this begins with someone looking at what is installed — request a site survey. Related pieces are collected in Insights, and the wider position is in the guide to takeover and maintenance.