Glossary of Security Systems and Physical Security Terms

The security systems sector operates across a specialized vocabulary drawn from physical security engineering, information security governance, and regulatory compliance frameworks. This reference compiles the principal terms used by security professionals, facility managers, integrators, and compliance personnel working within commercial, institutional, and critical infrastructure environments in the United States. Definitions are grounded in standards published by ASIS International, Underwriters Laboratories (UL), the National Fire Protection Association (NFPA), and federal agencies including the Cybersecurity and Infrastructure Security Agency (CISA) and NIST. The Security Systems Listings directory maps these concepts to licensed providers operating across the sector.


Definition and scope

A glossary in the security systems context serves as a controlled vocabulary — a structured reference that aligns terminology across the physical security, electronic security, and cybersecurity disciplines that converge in modern integrated systems. Without precise term definition, procurement specifications, installation standards, and regulatory compliance documents fail to interoperate.

ASIS International defines the physical security profession as spanning detection, delay, and response functions applied across personnel, property, and information assets. The vocabulary below is organized to reflect those functional layers, with entries drawn from ASIS PSP (Physical Security Professional) examination frameworks, UL listings nomenclature, NFPA 72 (National Fire Alarm and Signaling Code), and NIST Special Publication 800-82 (Guide to Industrial Control Systems Security).

Scope boundaries: This glossary covers terms applicable to physical security systems hardware, electronic access control, video surveillance, intrusion detection, alarm monitoring, and the cybersecurity controls applied to networked physical security devices. It does not extend to logical cybersecurity terms unrelated to physical system integration, nor to emergency management or public safety dispatch terminology outside the scope of private security systems.


How it works

A functional glossary in this sector is structured by domain cluster, not alphabetically, because the relationships between terms define their operational meaning. The 6 primary functional domains — access control, video surveillance, intrusion detection, alarm systems, perimeter security, and cybersecurity for connected devices — each carry distinct vocabularies that partially overlap.

Core term categories:

  1. Hardware identifiers — names for physical components (e.g., magnetic lock, passive infrared sensor, PTZ camera, dual-technology detector)
  2. System architecture terms — describe how components interconnect (e.g., networked DVR, IP-based access control, distributed panel architecture)
  3. Standards and certification designations — UL listings, NFPA codes, ASIS certification abbreviations (CPP, PSP, PCI)
  4. Regulatory and compliance vocabulary — terms used by CISA, the Physical Security Interoperability Alliance (PSIA), and IEC 62443 for industrial control environments
  5. Operational terms — refer to monitoring, response, and maintenance processes (e.g., central station monitoring, duress signal, supervised circuit)
  6. Cybersecurity-specific terms for physical systems — network segmentation, firmware integrity, credential hygiene, as defined in NIST SP 800-82 and IEC 62443

The distinction between supervised and unsupervised circuits illustrates how vocabulary carries compliance weight: a supervised circuit continuously monitors for wire fault conditions and is required under UL 2050 (National Central Station Fire Alarm Service) for listed monitoring installations. An unsupervised circuit carries no such monitoring requirement and is classified at a lower assurance level under the same standard.

Similarly, Grade designations under the European EN 50131 intrusion detection standard (Grades 1 through 4) provide a risk-tiered classification not directly mapped to U.S. UL listings — a boundary distinction relevant to integrators working across international specifications.


Common scenarios

Commercial access control deployment: A facility manager specifying an electronic access control system encounters terms including credential (the authentication token — card, PIN, biometric), reader (the capture device), controller (the decision-making panel), and request-to-exit (REX) device. ASIS International's Physical Security Principles publication defines the layered relationship among these components within a broader access control model that also encompasses policies and procedures, not only hardware.

Alarm monitoring and central station classification: When a monitored alarm system is described as UL Listed, the designation refers to UL 2050 compliance — a standard governing central station services, not only the alarm hardware itself. Central stations operating under this standard are subject to inspection and must meet defined response time parameters. A non-UL-listed monitoring center may use identical hardware but carries a different assurance classification with direct implications for insurance underwriting.

IP camera and cybersecurity intersection: As video surveillance systems migrate to IP architectures, the Security Systems Directory Purpose and Scope reflects an expanding set of cybersecurity terms applied to physical devices. Terms such as VLAN segmentation, ONVIF (Open Network Video Interface Forum) protocol compliance, and firmware CVE (Common Vulnerabilities and Exposures) exposure now appear in physical security procurement specifications alongside traditional hardware terminology.

Fire alarm and life safety terminology: NFPA 72 governs the vocabulary for fire alarm systems, defining terms including initiating device, notification appliance, fire alarm control unit (FACU), and supervising station. These terms carry legal weight in Authority Having Jurisdiction (AHJ) plan review processes, where imprecise terminology in submittal documents causes delays in permit approval.


Decision boundaries

When a term carries regulatory force versus descriptive use: Not all security terminology is normatively defined. Terms appearing in UL standards, NFPA codes, or federal agency publications carry defined technical meanings that differ from colloquial industry usage. "Monitored," for example, means different things in a UL 2050 context versus a general sales context. Procurement documents referencing this security systems resource should distinguish between normatively defined terms and descriptive marketing language.

Standards body jurisdiction determines applicable vocabulary:

Classification contrast — detection vs. verification: Intrusion detection systems (IDS in the physical security context, distinct from network intrusion detection systems) identify an event condition. Alarm verification — defined under SIA CP-01 (Control Panel Standard, False Alarm Reduction) — refers to the process of confirming the event before dispatch. These are distinct functional categories with separate equipment, procedural, and liability implications. False alarm rates in commercial intrusion systems prompted the SIA CP-01 standard specifically to reduce the estimated 94–98% false alarm dispatch rate documented in law enforcement burden analyses.

Certification abbreviations — ASIS designations: The CPP (Certified Protection Professional), PSP (Physical Security Professional), and PCI (Professional Certified Investigator) designations issued by ASIS International represent distinct competency domains. PSP specifically covers physical security assessment, application, installation, and integration of systems hardware — making it the most directly applicable credential classification for system-level terminology work.


References

📜 1 regulatory citation referenced  ·  🔍 Monitored by ANA Regulatory Watch  ·  View update log