GIS for Security Surveillance Training Course

Duration 10 days 17 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Security Operations Centre Analyst, Corporate Security Manager and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-GRS-123

Before you join: Participants should be comfortable using spreadsheets, managing files and interpreting basic maps.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Security teams increasingly receive location-bearing information from cameras, access-control systems, patrol reports, alarms, drones, incident logs and public sources. Without a structured geospatial model, these feeds remain disconnected records: operators struggle to identify repeat locations, allocate patrols, define camera coverage, assess response times or brief decision-makers with defensible evidence. GIS provides the spatial framework for turning surveillance information into operational intelligence while accounting for privacy, access control and data quality.

This course develops the methods used to design, operate and assess GIS-supported security surveillance. Participants create a security geodatabase, prepare incident and sensor data, map assets and observation areas, conduct hotspot and temporal analysis, assess camera viewsheds, plan patrol routes and build operational dashboards. The course covers raster and vector data, coordinate reference systems, geocoding, spatial queries, network analysis, remote-sensing imagery, mobile data collection and web map services. Attention is given to data governance, proportionality, retention, audit trails and role-based access for sensitive security information.

Instructor-led sessions combine short technical briefings with guided software work, realistic cases and group planning. Cases reflect corporate campuses, transport facilities, critical infrastructure sites, urban public safety operations and humanitarian field locations. Participants progressively build a surveillance intelligence project from the first week, then refine it through analysis, visualisation and operational review. They leave with a completed GIS surveillance plan, supporting map products, a risk-based sensor deployment model and a dashboard specification that can be adapted to their own security setting.

The course suits security professionals who need stronger spatial analysis capability, GIS practitioners supporting security functions, and managers responsible for surveillance investments or security operations centres. It is also relevant where remote sensing, incident mapping and field reporting must support accountable operational decisions.

What you will be able to do

  • Design a GIS data model for incidents, assets, sensors, patrols and restricted areas
  • Prepare surveillance datasets using geocoding, coordinate transformation, validation and metadata procedures
  • Analyse incident concentrations using kernel density estimation, spatial queries and temporal patterns
  • Assess camera and sensor placement using viewshed, line-of-sight and coverage analysis
  • Plan patrol routes and response areas using network analysis and service-area modelling
  • Produce operational security maps, dashboards and situation reports for defined user roles
  • Apply privacy, retention, access-control and audit requirements to surveillance geospatial data
  • Present a complete GIS surveillance intelligence plan supported by evidence-based recommendations

Benefits of attending

For you

  • Build credible surveillance coverage proposals using measurable spatial evidence
  • Produce incident hotspot maps that support patrol and camera deployment decisions
  • Add GIS analysis capability to security operations centre responsibilities
  • Explain privacy and data-governance controls for location-based surveillance records
  • Present security intelligence products clearly to operational managers and senior stakeholders

For your organisation

  • Improves allocation of cameras, patrols and response resources around priority risks
  • Links incident records, sensor data and asset locations within one operational model
  • Identifies surveillance blind spots before capital expenditure or security incidents occur
  • Strengthens auditability of surveillance decisions, data access and retention practices
  • Produces repeatable mapping and reporting methods for security operations centres

Course modules

17 modules over 10 days

Participants can define the operational questions, data needs and governance roles for a GIS surveillance programme.

  • Security surveillance missions translated into spatial intelligence requirements and decisions
  • Threat, vulnerability and consequence assessed through a risk matrix
  • Operational area boundaries, assets, routes and observation points defined
  • Intelligence requirements linked to collection plans and reporting audiences
  • Privacy, proportionality and necessity tested before sensor deployment decisions
  • Stakeholder roles mapped using RACI for surveillance programme governance

Participants can organise core GIS concepts for security operations mapping and analysis.

  • Vector, raster and tabular data distinguished within security information models
  • Coordinate reference systems selected for accurate local security mapping
  • Map scale, accuracy and positional uncertainty interpreted for operational decisions
  • Feature classes structured for incidents, assets, patrols and sensors
  • Spatial relationships identified through containment, proximity and intersection queries
  • Layer symbology designed for rapid recognition during incident briefings

Participants can create a geodatabase schema that supports surveillance records and controlled data access.

  • Entity-relationship diagrams model surveillance assets, events and observation records
  • Unique identifiers assigned to cameras, gates, zones and incident reports
  • Domains and coded value lists standardise security data entry
  • Relationship classes connect incidents, persons, assets and response actions
  • Metadata records source, accuracy, collection date and handling restrictions
  • Role-based permissions separate operational, analytical and management data access

Participants can prepare incident, asset and sensor data for reliable spatial analysis.

  • Incident addresses geocoded against approved reference street and facility data
  • Duplicate records detected using identifiers, timestamps and spatial proximity
  • Coordinate formats converted between decimal degrees, UTM and national grids
  • Attribute validation rules flag missing locations, dates and incident classifications
  • Field names and values normalised through documented data transformation steps
  • Positional accuracy recorded for GPS observations, addresses and digitised features

Participants can specify mobile collection workflows for patrol observations and security inspections.

  • Mobile forms capture patrol observations, hazards, photographs and coordinates
  • Required fields enforce minimum reporting standards for security observations
  • GPS accuracy thresholds determine acceptance of field location records
  • Offline map packages support patrol reporting in disconnected locations
  • Photo metadata managed to protect operationally sensitive location information
  • Quality assurance checks reconcile field submissions with control room records

Participants can map incident patterns and answer location-based security questions.

  • Incident categories symbolised using severity, status and response priority
  • Buffer analysis identifies events occurring near critical assets and boundaries
  • Spatial joins summarise incident counts by zone, facility or patrol sector
  • Selection queries isolate repeat events within defined dates and locations
  • Near analysis measures distances between incidents, cameras and access points
  • Time-enabled layers display incident sequences during operational review periods

Participants can identify incident concentrations and recurring time-location patterns using appropriate analytical methods.

  • Kernel density estimation reveals concentrated incident locations and intensities
  • Grid-based aggregation compares incident rates across standardised surveillance areas
  • Getis-Ord Gi* identifies statistically significant incident hot and cold spots
  • Repeat-location analysis flags addresses, facilities and routes requiring intervention
  • Temporal bins compare incidents by shift, weekday, month and season
  • Hotspot results tested against reporting bias, exposure and population patterns

Participants can assess proposed camera coverage and identify visual surveillance gaps.

  • Camera specifications translated into fields of view and range assumptions
  • Digital elevation models support terrain-based viewshed calculations
  • Building footprints and obstructions included in line-of-sight assessments
  • Overlapping camera zones measured for redundancy at critical access points
  • Blind spots prioritised using asset criticality, incident history and threat ratings
  • Coverage maps distinguish theoretical visibility from operational image quality

Participants can use remotely sensed imagery to assess site change, access routes and environmental conditions.

  • Satellite imagery selected by spatial resolution, revisit period and cloud cover
  • False-colour composites distinguish vegetation, water, bare ground and built surfaces
  • Change detection compares imagery dates for unauthorised activity indicators
  • Image classification identifies roads, structures, perimeter clear zones and vegetation
  • Orthomosaic imagery supports detailed inspection of large facilities and corridors
  • Remote-sensing limitations documented for shadows, occlusion and classification error

Participants can model patrol routes, response areas and travel times using network analysis.

  • Network datasets model roads, paths, gates, restrictions and travel speeds
  • Shortest-path analysis compares patrol routes between priority security locations
  • Service areas estimate response coverage within defined travel-time thresholds
  • Route barriers represent closures, hazards, controlled zones and temporary restrictions
  • Patrol sectors balanced using workload, risk scores and geographic accessibility
  • Response-time assumptions validated against dispatch and movement records

Participants can prioritise surveillance technology deployment using spatial risk and coverage evidence.

  • Risk layers combine threat likelihood, vulnerability and asset consequence scores
  • Weighted overlay ranks locations for cameras, alarms and access controls
  • Multi-criteria decision analysis documents weights, assumptions and sensitivity tests
  • Candidate sensor locations screened against power, communications and mounting constraints
  • Coverage priorities aligned with risk appetite and available capital budgets
  • Deployment recommendations distinguish immediate controls from phased infrastructure improvements

Participants can specify dashboard and reporting products for surveillance monitoring and command decisions.

  • Dashboard indicators track incidents, alarms, patrol activity and camera availability
  • Operational views separate live monitoring, tactical analysis and executive reporting
  • Alert thresholds set for incident clusters, response delays and sensor outages
  • Map pop-ups present essential asset, incident and contact information
  • Situation reports combine mapped events, trend indicators and recommended actions
  • Information refresh cycles match operational urgency and data verification requirements

Participants can apply governance controls to sensitive surveillance geospatial data and products.

  • Data classification labels identify public, internal, confidential and restricted records
  • Retention schedules distinguish incident evidence, operational logs and analytical outputs
  • Access logs record viewing, editing, exporting and sharing of sensitive layers
  • Chain-of-custody records preserve provenance for evidential geospatial data
  • Privacy impact assessments document purpose, necessity, risks and mitigations
  • Redaction methods remove sensitive locations, identifiers and tactical details

Participants can design controlled web map services for security teams and authorised partners.

  • Web map layers configured for role-specific access and controlled sharing
  • OGC Web Map Service publishes rendered maps for approved consumers
  • Feature services support authorised updates to incidents and field observations
  • Offline sharing procedures protect maps used in restricted connectivity environments
  • Map service performance improved through scale ranges, caching and simplified geometry
  • Sharing agreements define permitted users, purposes, controls and review periods

Participants can communicate spatial findings, uncertainty and recommendations to security decision-makers.

  • Map layouts prioritise decision questions, key findings and required actions
  • Analytical uncertainty communicated through confidence statements and source notes
  • Before-and-after maps show effects of patrol, camera or access-control changes
  • Executive briefings connect spatial evidence to risk, cost and operational priorities
  • Incident narratives corroborated using mapped events, timestamps and sensor records
  • Recommendations distinguish evidence, assumptions, constraints and residual risks

Participants can review surveillance performance and define improvements based on operational evidence.

  • Performance measures assess detection, response, coverage, reliability and false alarms
  • Coverage audits compare installed sensors against current risk and asset maps
  • Incident outcomes reviewed against camera availability and patrol response times
  • Data quality scorecards monitor completeness, timeliness, accuracy and consistency
  • Lessons learned records assign corrective actions, owners and target dates
  • Annual review cycles update risk layers, surveillance plans and governance controls

Participants can build, review and present a complete GIS surveillance intelligence plan for a defined security site or area.

  • Security problem statement defines assets, threats, decisions and operational constraints
  • Geodatabase schema integrates incidents, sensors, patrols, assets and restricted zones
  • Hotspot findings identify priority locations using incident and temporal evidence
  • Viewshed and network models test coverage, patrol routes and response areas
  • Deployment options compare risk reduction, cost, privacy and implementation feasibility
  • Dashboard specification defines indicators, users, refresh cycles and access permissions
  • Peer review tests assumptions, map clarity, governance controls and recommendations
  • Final presentation defends the surveillance plan before a security governance panel

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Security surveillance geodatabase schema
  2. Incident hotspot analysis model
  3. Camera coverage assessment checklist
  4. Risk-based sensor deployment matrix
  5. Patrol route and response-area plan
  6. GIS surveillance intelligence plan

Who should attend

  • Security Operations Centre Analyst — needs spatial evidence for incident monitoring and response coordination
  • Corporate Security Manager — needs defensible surveillance coverage and patrol allocation decisions
  • GIS Analyst — supports security teams with maps, spatial models and operational data products
  • Physical Security Specialist — plans cameras, access controls and observation coverage around assets
  • Public Safety Officer — analyses incidents, patrol areas and response patterns within jurisdictions
  • Critical Infrastructure Protection Officer — assesses threats and surveillance gaps around essential sites

Skills and tools covered

Security geodatabase designSpatial threat analysisSensor coverage modellingPatrol route planningSurveillance data governanceOperational dashboard design

Tools and standards

QGIS, ArcGIS Pro, PostGIS, OGC Web Map Service

How the course runs

Training methodology

The course uses short instructor briefings followed by guided GIS configuration, case analysis and group decision-making. Participants work with security incident records, asset layers, sensor locations, patrol routes and imagery representative of real operational settings. Simulations test how teams identify a hotspot, assess coverage gaps and prepare an incident briefing under time constraints. Trainers provide structured feedback on maps, data models, risk assumptions and recommendations. Each participant maintains an application plan that connects course outputs to a current surveillance or security operations requirement.

Requirements and prerequisites

Participants should be comfortable using spreadsheets, managing files and interpreting basic maps. Some experience with security operations, physical security, incident reporting, GIS, remote sensing or data analysis is useful, but specialist expertise in all areas is not assumed. Participants should understand their organisation's security context and be able to discuss assets, incidents, patrols or surveillance arrangements. Prior programming, database administration, advanced statistics, drone piloting and previous use of ArcGIS or QGIS are not required. The course introduces required GIS workflows before applying them to surveillance scenarios.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should be able to use a computer confidently, interpret basic maps and work with spreadsheet-style data. The course introduces required GIS workflows before moving into surveillance analysis, so advanced GIS experience is not required.

Bring a laptop if attending in person, plus any non-sensitive sample data, site maps or surveillance planning questions permitted by your organisation. Training datasets are provided, and participants should not bring restricted incident records or personally identifiable information without approval.

It is designed for security operations staff, corporate security managers, GIS analysts, physical security specialists and public safety personnel. It also suits managers responsible for surveillance investment decisions or security operations centre performance.

General GIS courses focus on broad mapping and analysis methods, while this course applies those methods to incidents, patrols, cameras, access points and security risk. Remote sensing is included where imagery supports site assessment, change detection and perimeter monitoring.

Participants can use the templates and models to assess camera gaps, map incidents, plan patrol sectors and improve security reporting. The final project is structured around a realistic security site or operational area and can inform a workplace improvement plan.

Training days run from 08:30 to 16:30 and provide about 6.5 contact hours each. The first week establishes data, mapping and analysis foundations; the second week focuses on coverage modelling, governance, reporting and the final surveillance intelligence plan.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.