Security System Procurement in Bangladesh: Avoiding Common Mistakes When Buying

Purchasing a security system for your organisation is a significant investment. A CCTV and access control system for a mid-sized commercial building in Dhaka — say, a 6-floor office with 150 employees and 2 basement parking levels — might cost BDT 20-50 lakh depending on specification. An enterprise system for a bank headquarters or a large factory can run into crores. Getting the procurement decision wrong is expensive: you either pay too much for what you need, or you pay too little and end up with a system that fails to protect your assets, fails regulatory compliance, or costs far more to maintain than a properly specified system would have.

Bangladesh's security market is crowded with vendors of widely varying quality. The proliferation of imported equipment — particularly from China — means that superficially similar cameras, recorders, and access control panels can differ enormously in actual performance, reliability, and software capability. This guide identifies the 7 most common procurement mistakes we see in the Bangladesh market and explains how to avoid each one.

Mistake 1: Buying on Price Alone

Price-only procurement is the most widespread mistake in Bangladesh's security market. The decision-maker selects whichever vendor quotes the lowest number, without evaluating what that number actually buys.

The trap works like this: Vendor A quotes BDT 8 lakh for a 16-camera CCTV system. Vendor B quotes BDT 12 lakh for what appears to be a similar system. The procurement officer recommends Vendor A. What the officer does not know is that Vendor A's cameras are 2-megapixel (2MP) sensors with no night vision capability beyond 10 metres, that the NVR has only 30 days of storage, and that the brand is a no-name import with no authorised service in Bangladesh. Vendor B's system uses 4MP cameras with effective 30-metre IR night vision, a 90-day NVR, and a brand with an authorised distributor in Dhaka.

Six months later, the BDT 8 lakh system cannot identify a person who stole from the loading dock at night because the cameras cannot see clearly enough in low light. The NVR footage from 40 days ago — needed for an investigation — is already overwritten. The company replaces the system at full cost, having wasted the original BDT 8 lakh.

How to avoid it: Define performance requirements before soliciting prices. Set minimum specifications (resolution, night vision distance, storage duration, brand tier) and only evaluate bids that meet the specification.

Mistake 2: No Site Survey Before Specification

Many buyers — particularly smaller organisations — ask vendors to quote from a floor plan or a brief description without a physical site survey. The result is a specification that misses the actual challenges of the site: a reflective glass facade that creates glare issues for cameras, a long car park with inadequate mounting positions for the camera quantities quoted, network conduit paths that require extensive civil work not included in the vendor quote, or power supply points insufficient for the specified camera count.

When the installation team arrives on site, they discover the gaps. The project either runs over budget (as the client absorbs additional costs) or is delivered with a compromised system design (fewer cameras than needed, cameras in sub-optimal positions).

How to avoid it: Require that every vendor you invite to tender conducts a physical site survey before submitting their proposal. Provide access to the site. Any vendor that refuses to survey the site before quoting is either cutting corners or planning to cut corners during installation.

Mistake 3: Ignoring After-Sales Support and Annual Maintenance Contract

A security system is not a one-time purchase — it is an ongoing operational commitment. Cameras get knocked out of alignment, NVR hard drives fail after 3-4 years, access card databases need administration, and software updates need to be applied. A system without an AMC (Annual Maintenance Contract) will gradually degrade until a significant failure triggers emergency remediation at high cost and urgency.

In Bangladesh, the after-sales service landscape varies enormously. Some vendors disappear after installation. Some are available for emergency calls but have no stock of spares. The best vendors provide structured preventive maintenance programmes with defined response times for corrective work.

How to avoid it: Before signing any contract, ask specifically: what after-sales support is included in the purchase price, and what does an AMC cost? Get the AMC terms in writing — what does it cover, what does it exclude, what is the response time for breakdowns, and what are the escalation procedures for items not resolved within the SLA window?

Mistake 4: Underspecifying Storage (The 90-Day Retention Problem)

Storage is the specification element most frequently underestimated in Bangladesh security procurement. Bangladesh Bank ICT Guideline v4.0 requires 90-day retention for bank CCTV footage. Many insurance policies now require minimum retention periods for CCTV to be valid as evidence. Internal security policies at large organisations increasingly specify 30-60 days of retention as standard.

Yet many systems are installed with NVRs that can only store 7-15 days of footage before overwriting begins. The buyer was told "16 channels, 4TB storage" — which sounds substantial — without being told that 16 cameras at 1080p resolution, 25 frames per second, using H.264 compression, generates approximately 6GB per camera per day, consuming the 4TB drive in less than 42 days. If H.265 compression is not used, or cameras are configured at higher quality settings, this drops further.

How to avoid it: Ask every vendor to show you the storage calculation. It should specify: number of cameras × resolution × frame rate × compression type × target retention days = storage required. Then verify the NVR specified in the proposal has at least that storage capacity, with 20% headroom for growth and redundancy. Bangladesh Bank-regulated entities must be explicit that 90-day retention is a contractual requirement of the system.

Mistake 5: No Integration Planning — Siloed Systems

Many organisations procure CCTV from one vendor, access control from another, and fire safety from a third — without considering whether these systems will ever need to work together. The result is a collection of standalone systems that management must monitor through 3 separate software interfaces, that cannot share events or triggers, and that cannot be upgraded to an integrated platform without significant retrofit cost.

Integration between security systems delivers genuine operational value. A fire alarm that triggers automatic CCTV recording of the alarm zone. An access control breach that triggers PTZ camera movement to cover the door in question. A motion detection event that triggers an audible alarm on the guard monitoring station. These integrations require that all systems are from compatible brands or support open API standards.

How to avoid it: Before procuring any individual system, define your integration architecture for the next 5 years. Identify which systems you currently have and which you plan to add. Require that all new systems support open protocols (ONVIF for cameras, OSDP for access control readers) and that your chosen VMS or security management platform supports your existing systems.

Mistake 6: Ignoring Cybersecurity for IP Cameras

IP cameras are network-connected computers. They run operating systems, have network interfaces, store data, and can be compromised by attackers in exactly the same way as any other networked device. Compromised IP cameras have been used in large-scale distributed denial-of-service (DDoS) attacks globally. In Bangladesh, insufficiently secured IP cameras have been accessed remotely, giving unauthorised parties a live view into supposedly secure facilities.

Common cybersecurity failures in Bangladesh security installations include:

• Default passwords left unchanged: Many cameras ship with default admin credentials (admin/admin, or admin/12345). Vendors sometimes install cameras without changing defaults, leaving them vulnerable to trivial attack.
• No firmware updates: Camera firmware contains security patches. Systems never updated since installation remain vulnerable to known exploits.
• Cameras on the corporate network: IP cameras placed on the same network segment as corporate computers can be used as pivot points to access internal systems.

How to avoid it: Require that all IP cameras are installed on a dedicated VLAN (Virtual Local Area Network) isolated from corporate network segments. Require that default passwords are changed to strong, unique passwords during installation. Require that firmware is updated to the current version during installation. Confirm that the AMC includes periodic firmware update as a service.

Mistake 7: No Training for Staff

A security system is only as effective as the people operating it. We have visited organisations with advanced CCTV systems whose security guards did not know how to search historical footage — they knew only how to watch the live feeds. We have visited organisations where the access control software had not been updated in years because no one on the IT team knew how to manage user enrolment.

Untrained staff cannot use the system to investigate incidents, cannot maintain access control databases accurately, and cannot identify when the system is not functioning correctly. Training is not a luxury — it is a prerequisite for system effectiveness.

How to avoid it: Require that the vendor's proposal includes specific training — who will be trained, on what topics, for how long, with what materials. Minimum training should cover: system administration (adding, removing, modifying users and cameras), daily monitoring procedures, footage review and export for incident investigation, and basic fault identification. Follow-on training after 3-6 months of operation is valuable because operators have real questions once they have used the system.

How to Evaluate a Security Integrator in Bangladesh

Beyond avoiding these 7 mistakes, the quality of the vendor you select is the most important procurement decision you make. A competent integrator with a slightly higher price will deliver better value than an incompetent integrator with a lower price. Evaluate integrators on:

Brand authorisation — Is the vendor an authorised installer or reseller for the brands they propose? Authorised integrators have trained technicians and access to genuine spare parts. Demand to see authorisation certificates.

Project references — Ask for references from 2-3 completed projects similar in scope and industry to yours. Contact those references and ask specifically about installation quality, project management, and after-sales responsiveness.

Team qualifications — Are the installation technicians trained and certified by the brands they install? Hikvision, Dahua, Bosch, and ZKTeco all offer certified installer programmes. Ask to see technician certifications.

Financial stability — Is the company likely to still be operating in 5 years? Check business registration, years in operation, and whether they have the financial capacity to honour AMC commitments.

What a Good Proposal Looks Like

A professional security system proposal from a quality integrator should include:

1. Site survey report — documenting the site conditions observed and the specific requirements they inform
2. System design document — camera layout on a floor plan, access control door schedule, network architecture diagram
3. Bill of Materials — itemised list of every product by model number, quantity, and unit price
4. Technical specifications — specifications for each key component (camera resolution, storage capacity, access control panel capacity)
5. Storage calculation — showing exactly how the specified storage achieves the required retention period
6. Installation methodology — how cables will be routed, what civil works are needed, how commissioning will proceed
7. Project timeline — realistic phased schedule from mobilisation to commissioning and training
8. Warranty terms — equipment warranty and workmanship warranty periods and coverage
9. AMC options — annual maintenance contract tiers and pricing
10. References — contact details for similar completed projects

If a proposal you receive is missing these elements, push back or move to a vendor that can provide them.

Download Now

We have prepared a Security System Procurement Checklist that you can use when evaluating proposals from any vendor — not just SSAL. This checklist covers all the specification review points, integrator evaluation criteria, and proposal assessment questions described in this article.

Download Now — or contact us for a complimentary proposal review where we critique your existing proposals and help you identify the best value option.

Get Free Consultation — if you are starting your procurement process, speak with our team before you go to market. We will help you define the right specification for your needs and budget.