Milestone XProtect for Security Control Room Operations Training Course
| Course code | SD-SM-004 |
|---|---|
| Duration | 5 days |
| Level | Intermediate |
| Category | Security Management |
| Delivery | Classroom or live online |
| Language | English |
| Certificate | Certificate of completion |
Course overview
Security control room operators must turn high volumes of camera alarms, live video, access events and operator requests into timely, defensible action. In Milestone XProtect environments, weak alarm configuration, inconsistent camera navigation, poor incident evidence handling and unclear escalation decisions can delay response and undermine investigations. This course prepares participants to operate XProtect as a control-room tool: maintaining situational awareness, verifying events quickly, coordinating response and producing evidence that can withstand management, regulatory or legal scrutiny.
Participants work through the operational features of Milestone XProtect Smart Client and Management Client, including camera navigation, views, maps, alarm management, rules, bookmarks, sequences, video search, export and user permissions. They learn to distinguish actionable alarms from nuisance events, use camera presets and adaptive playback to verify incidents, document operator decisions, preserve video evidence and hand over unresolved events between shifts. The course also addresses control-room procedures, escalation matrices, privacy-aware monitoring and resilience planning for system or communications failures.
Delivery combines instructor-led demonstrations with realistic control-room scenarios conducted in a configured XProtect training environment. Participants investigate simulated perimeter breaches, safety incidents, unauthorised access events and suspicious behaviour, then use XProtect to locate footage, create bookmarks, compile exports and record incident actions. Each participant leaves with a completed XProtect control-room operating playbook containing alarm triage steps, evidence-export checklist, escalation workflow, handover template and personal application plan for their site.
The course is designed for experienced security, safety and operations personnel who already work with CCTV or are moving into an XProtect-enabled control room. It is equally useful for supervisors who need to standardise operator practice, improve incident records and gain better assurance from their video management investment.
Course objectives
By the end of this course, participants will be able to:
- Configure Smart Client views, camera groups, maps and PTZ presets for faster operational navigation
- Triage XProtect alarms using priority, verification, acknowledgement and escalation criteria
- Investigate incidents with timelines, adaptive playback, sequences, bookmarks and video search tools
- Create defensible video exports with relevant footage, audit information and evidence-handling records
- Apply control-room escalation matrices to security, safety, access-control and welfare events
- Document operator actions and shift handovers using a structured incident-log template
- Assess user roles, permissions and privacy controls against operational monitoring requirements
- Produce an XProtect control-room operating playbook for a defined site or facility
Benefits of attending
For you
- Operate XProtect Smart Client with greater speed when verifying alarms, locating cameras and reviewing footage
- Build credible evidence-handling practice through structured bookmarking, export and incident-record methods
- Gain practical confidence to manage complex multi-camera incidents without losing auditability
- Demonstrate readiness for senior control-room, CCTV operator or security-supervisor responsibilities
- Leave with a site-adaptable operating playbook that can be used to improve daily shift practice
For your organisation
- Reduce alarm-response delays through consistent triage, verification and escalation workflows
- Improve the quality and traceability of video evidence supplied for investigations, claims and disciplinary processes
- Lower the risk of missed incidents caused by poorly organised views, maps, handovers or operator actions
- Create more consistent control-room performance across shifts, locations and contracted security teams
- Increase return on the XProtect investment by using search, alarms, bookmarks, rules and audit functions more effectively
Target competencies
Who should attend
- Security Control Room Operators — who monitor live alarms and must verify, escalate and document incidents accurately
- CCTV Operators — who need to use XProtect search, playback and export functions efficiently during investigations
- Security Supervisors — who standardise operator workflows, handovers and evidence-quality controls
- Security Managers — who oversee control-room performance and need assurance that XProtect is used consistently
- HSE Coordinators — who rely on video evidence to support safety-event verification and post-incident review
- Facilities and Site Operations Managers — who coordinate responses to access, perimeter and operational disruptions
Requirements and prerequisites
Participants should have practical experience of a security control room, CCTV monitoring desk, site security operation or incident-response process. They should understand basic concepts such as camera views, PTZ control, alarm acknowledgement, access control events, incident logging and escalation to security or emergency services. Familiarity with any video management system is helpful, but prior use of Milestone XProtect is not required. Participants should be comfortable using a Windows-based workstation, mouse and keyboard. No programming, network engineering, database administration or advanced CCTV installation experience is required; configuration exercises are taught in a controlled training environment.
Training methodology
The course uses short instructor-led sessions to explain XProtect functions and control-room decision methods, followed by guided work in a live training environment. Participants operate Smart Client views, maps, alarm lists, playback controls and export tools against realistic security and HSE scenarios. Small groups compare escalation choices, assess incident records and identify failures in handover or evidence handling. Daily exercises build toward an end-of-course control-room operating playbook, with instructor feedback on workflow design, auditability and practical fit for each participant’s site.
Course outline
Day 1: XProtect control-room foundations
- XProtect architecture: Management Client, Smart Client and recording-server roles
- Control-room operating model and operator decision responsibilities
- Smart Client workspace navigation, panes, tabs and camera views
- Camera groups, view layouts and monitor sequencing methods
- Interactive maps, hotspots and camera location awareness
- PTZ controls, presets, digital zoom and camera patrols
- Control-room procedures for live monitoring and operator logging
Workshop: Participants configure a role-based Smart Client workspace for a simulated industrial site and produce a camera-view and map-navigation plan.
Day 2: Alarm management and event verification
- XProtect alarm definitions, sources, states and alarm data
- Alarm-list filtering, sorting and acknowledgement workflows
- Priority scoring and nuisance-alarm reduction principles
- Rules-based actions, notifications and event-triggered recording
- Verification workflow using live video, adjacent cameras and PTZ presets
- Escalation matrices for intrusion, access, safety and welfare events
- Operator decisions, timestamps and audit-trail requirements
Workshop: Participants manage a timed alarm queue, verify each event in XProtect and produce a prioritised escalation log with rationale.
Day 3: Video investigation and evidence handling
- Timeline navigation and synchronized multi-camera playback
- Adaptive playback, speed control and frame-by-frame review
- Sequence Explorer and event-linked video investigation
- Bookmarks, notes and incident-reference conventions
- Video search using motion, object and event criteria where enabled
- Export formats, digital signatures and evidence-player options
- Chain-of-custody records, retention controls and evidence disclosure
Workshop: Participants investigate a simulated loading-bay incident and produce a bookmarked timeline, export package and chain-of-custody record.
Day 4: Secure, resilient and compliant operations
- Management Client navigation for operational configuration review
- User roles, device permissions and least-privilege access
- Privacy masking, restricted cameras and responsible monitoring practice
- Audit logs for operator actions, exports and configuration changes
- Recording retention, storage status and missing-video escalation
- System-health monitoring and response to camera or server failures
- Shift handover design and continuity during major incidents
Workshop: Participants review a control-room scenario for access, privacy and resilience gaps, then produce a revised handover and failure-response checklist.
Day 5: Integrated control-room operations
- Multi-stage incident command within an XProtect-enabled control room
- Coordinating CCTV, access control, site response and emergency services
- Using Smart Wall concepts and shared displays for situational awareness
- Incident reporting from XProtect bookmarks, exports and operator logs
- Post-incident review methods and operator performance measures
- Control-room standard operating procedure design
- Personal site implementation planning and management briefing
Workshop: Participants complete an end-to-end major-incident simulation and produce an XProtect control-room operating playbook for implementation at their site.
Tools & standards covered
Milestone XProtect Smart Client, Milestone XProtect Management Client, Milestone XProtect Smart Wall, ISO 27001
A typical training day
| 08:30 – 10:30 | First session |
| 10:30 – 10:45 | Refreshment break |
| 10:45 – 12:30 | Second session |
| 12:30 – 13:30 | Lunch and networking |
| 13:30 – 15:00 | Third session |
| 15:00 – 15:15 | Refreshment break |
| 15:15 – 16:30 | Workshop and daily review |
Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.
What the fee includes
- Instruction by a practitioner facilitator
- Full course workbook and materials
- Exercise files, templates and case studies
- Certificate of completion
- Refreshments and lunch (classroom deliveries)
- Post-course application plan
- Facilitator follow-up on request
- Group rates from five participants
How you can take this course
Classroom
Scheduled sessions in Nairobi, Mombasa, Kigali, Dar es Salaam, Dubai and Cape Town.
Live online
The same facilitator and materials, delivered live for distributed teams and individuals.
In-house
Delivered privately for your team, at your offices or a venue of your choice, tailored to your context. Request a proposal.
Certification
Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.
Frequently asked questions
Upcoming sessions
-
21 – 25 Sep 2026Book
Live Online · USD 1,500 -
21 – 25 Sep 2026Book
Dubai · USD 4,500 -
21 – 25 Sep 2026Book
Dar es Salaam · USD 3,500 -
21 – 25 Sep 2026Book
Mombasa · USD 3,200 -
05 – 09 Oct 2026Book
Live Online · USD 1,500 -
05 – 09 Oct 2026Book
Cape Town · USD 4,200 -
12 – 16 Oct 2026Book
Cape Town · USD 4,200 -
19 – 23 Oct 2026Book
Nairobi · USD 3,000
49 more dates — ask us.
Group of 5+?
Request in-house delivery or group rates →Related courses in Security Management
ISO 18788 Security Operations Management System Training Course
Private security operations face heightened scrutiny where services involve guarding, protective security, patrols, access control, secure t…
ASIS Physical Asset Protection Standard Implementation Training Course
Physical asset protection programmes often develop as disconnected projects: a guard contract is renewed, access control is upgraded, CCTV c…
Avigilon Control Center Video Security Management Training Course
Security teams need more than live camera views to manage incidents, protect people, and meet evidential, privacy, and operational requireme…
ISO 31000 Security Risk Assessment and Treatment Training Course
Security managers and HSE professionals are often required to justify controls for threats such as unauthorised access, theft, violence, sab…