15 Questions to Ask a Security Company Before Signing the Contract

Most procurement processes focus on price comparison and reference checks. Both matter, but neither tells you the full story about whether a security company will actually deliver once they have your signature. The questions below go deeper. They are designed to reveal operational quality, compliance status, management capability, and the contractual protections you need before you commit to any security services agreement in Saudi Arabia.

Licensing and compliance questions

1. Can you provide your current MOI license certificate?

This is non-negotiable. Every legitimate private security company in Saudi Arabia holds a Ministry of Interior license. Request the physical or digital certificate and verify the expiry date, the license number, and that the company name matches the entity you are contracting with. If there is any hesitation, stop the process.

2. What is your SCIS classification, and does it cover our sector?

The Security Companies and Investigations Authority (SCIS) classifies providers by the sectors they are authorized to operate in. If your facility is in healthcare, oil and gas, banking, or government, confirm that the provider's SCIS authorization explicitly covers your sector. A Class A license covers all sectors nationally. Class B and C have restrictions.

3. What is your current Nitaqat tier?

Nitaqat Saudization compliance affects the provider's ability to hire, their operational stability, and in extreme cases their right to continue operating. Ask for their current tier classification (Platinum, Green, Yellow, or Red) and request documentation. A company in the Yellow or Red tier is one regulatory decision away from operational disruption that directly affects your security coverage.

4. For industrial sites: are you HCIS compliant?

If your facility falls under the High Commission for Industrial Security's remit — oil, gas, petrochemicals, power generation, water, or other critical infrastructure — your security provider must meet HCIS standards. Ask specifically whether they hold HCIS authorization and for which facility classifications. Visit our HCIS Compliance Security page for details on what industrial compliance involves.

Training and quality questions

5. What training does a guard complete before their first deployment?

SCIS sets minimum training standards, but ask what the provider delivers beyond the minimum. How many hours of initial training? Is it classroom or practical? Do they test guards before certifying them for deployment? The answer reveals whether training is treated as a compliance checkbox or as genuine preparation.

6. How do you conduct site-specific briefing?

A guard arriving at your facility for the first time needs to know your specific access procedures, restricted areas, emergency contacts, alarm systems, and incident escalation chain before they start their shift, not two weeks into the deployment. Ask how the site briefing is conducted, how long it takes, and whether it is documented.

7. What is your guard-to-supervisor ratio?

Supervisory ratio is one of the most reliable indicators of service quality. A ratio of 15:1 (15 guards per supervisor) is common in the industry. Ratios above 25:1 typically mean supervisors are stretched too thin to conduct meaningful oversight. Ask how many guards each supervisor covers and how their time is divided across clients.

Operations and management questions

8. How do you handle guard absences and no-shows?

Guard absences will happen. What separates good providers from poor ones is the speed and transparency of their response. Ask for a specific, written commitment: 'If a guard does not report for their shift, what is your guaranteed response time for a replacement?' Four hours is reasonable. 'We'll sort it' is not an answer.

9. How often are sites visited by supervisors, and are visits announced?

Announced supervisory visits are almost worthless as a quality control mechanism — guards perform for visitors. Ask whether visits are unannounced, how frequently they occur across all shifts (including overnight), and what the supervisor checks and reports on. Request a sample supervision report from an existing contract.

10. What documentation will I receive, and how often?

Professional security providers generate written documentation systematically: daily activity reports, incident reports, access logs, and monthly summaries. Ask to see sample templates. If the provider cannot show you templates they currently use, they are either not producing these documents or producing them reactively rather than routinely.

11. Who is my dedicated point of contact for operational issues?

Large security companies often assign client accounts to multiple contacts, making it unclear who to call when something goes wrong at 2am. Confirm: Is there a named account manager for our contract? Is there an out-of-hours emergency number? What is the escalation process if I cannot reach my account manager?

Commercial and contract questions

12. How are Ramadan and public holidays handled in the contract?

Saudi Labour Law limits working hours to 36 per week during Ramadan. Guards working beyond this are entitled to overtime. Ask explicitly: 'How does Ramadan scheduling affect our deployment, and are any additional costs included in your quoted rate or charged separately?' Also ask about official public holidays — premium pay for holiday working is a statutory requirement and should be addressed in the contract.

13. What service level commitments are written into the contract, and what happens if you miss them?

An SLA without a penalty mechanism is a wish list. Any professional security company should be willing to commit in writing to specific service levels (guard fill rate, replacement response time, supervisory visit frequency) with defined consequences for failure. If a provider will not commit to contractual SLAs, their verbal assurances mean nothing.

14. What is the notice period to exit the contract?

Notice periods of 90 days are common but unreasonably long for a client who has legitimate concerns about service quality. Thirty to sixty days is standard for professional providers. Read this clause carefully — discovering you need 90 days' notice to exit a failing contract is a very unpleasant position to be in.

15. Can you provide references from clients in our sector?

Reference checks are standard, but make them specific. Ask for references from clients with similar facility types, not the provider's biggest or most impressive logos. A security company that performs well at a petrochemical plant may be entirely wrong for a retail mall, and vice versa. Ask the reference specifically about supervisor responsiveness, incident management, and documentation quality — not just 'were you happy with the service?'

Scoring the responses