7 Questions to Ask Before Hiring a Security Firm.

The difference between a security provider that protects you and one that becomes a liability usually comes down to a single conversation — the one before you sign. Ask the right questions and the professionals reveal themselves quickly, because they answer without hesitation and show their evidence. The weak ones deflect. Here are the seven questions that matter most, why each one matters, and what a good answer sounds like versus a warning sign.

1. Are you KDN-licensed — and can I verify it right now?

Why it matters: Every legitimate security agency in Malaysia must hold a valid private agency licence from the Ministry of Home Affairs (KDN) under the Private Agencies Act 1971 (Bestar). Hiring an unlicensed provider means any incident on your site becomes your legal exposure.

Good answer: They give you their KDN licence number immediately and invite you to check it on the Ministry’s published list (MOHA). Warning sign: Vagueness, “we’re in the process,” or reluctance to share the number.

2. Are you fully insured — and for what?

Why it matters: If a guard is injured, or an incident causes loss on your premises, the provider’s insurance should respond — not yours. Without it, liability can land on you.

Good answer: Clear evidence of cover — public liability, personal accident, professional indemnity — with documentation available. Warning sign: “We have insurance” with no detail, or no willingness to evidence it.

3. How do you pay and roster your guards — and does it comply with the overtime and hour limits?

Why it matters: This is the question almost no buyer asks, and it’s the one that exposes the cheap operators. A security shift is usually 12 hours, but the RM1,700 minimum wage only covers 8 — the other 4 hours are overtime by law. Malaysian law also caps overtime at 104 hours per month and total hours at 12 per day (TimeTec). A provider whose price only works if guards are unpaid for overtime or run beyond legal limits is a labour dispute waiting to happen.

Good answer: They can explain how basic wage and overtime are calculated, how they stay within the 104-hour cap, and how rest days are covered with relief guards. (We break the full maths down in What Drives the Cost of Security Guard Services in Malaysia.) Warning sign: A 12-hour guard quoted at bare minimum wage, or no clear answer on overtime.

4. How will I know my guards are actually doing their rounds?

Why it matters: A guard you can’t verify is a guard you’re trusting on faith. Accountability is the whole point of professional security, and the industry now expects it to be provable — real-time guard-tour verification with GPS, digital check-ins, and supervisor oversight are standard among serious providers (Belfry).

Good answer: They describe a real-time patrolling system, digital reporting you can see, and a central monitoring capability. Warning sign: Paper logs only, or “our supervisor checks sometimes.”

5. What technology do you use — and did you build it yourselves?

Why it matters: Technology is what lets a modern provider deliver accountability and do more with a lawfully-sized team rather than cutting corners. A provider that owns and builds its systems can tailor them to your site; one that rents generic software often can’t (Securitas).

Good answer: A concrete description of their systems — patrol verification, monitoring, digital reporting — and how those adapt to your operations. (This is exactly the in-house approach we describe on our Technology page.) Warning sign: Buzzwords with no demonstration, or no technology at all.

6. If my site is RBA-regulated, how do you stay compliant?

Why it matters: If you’re an electronics manufacturer or supply a multinational, your contractor’s guards count in your RBA audit. The RBA Code caps working hours at 60 per week including overtime, requires one day off in seven, and requires overtime to be voluntary (RBA Code of Conduct). Third-party security is a frequently flagged source of audit non-conformances (Prozas Security).

Good answer: They understand RBA hour limits, track working hours in real time, staff extra relief guards so no one breaches the cap, and can produce the records an auditor asks for. Warning sign: A blank look at “RBA,” or a two-guard rotation quoted for a 24/7 factory post.

7. Can I see an itemised quote and client references?

Why it matters: Transparency in pricing is a proxy for integrity everywhere else, and references from similar sites tell you whether a provider actually understands your risks.

Good answer: An itemised quote (guards per post, hours, wage vs. overtime, statutory contributions, supervision, technology) and references from comparable clients. (See how to read a quote in What Drives the Cost of Security Guard Services.) Warning sign: A single lump-sum figure with no breakdown, or no references.

Bonus question — Do you operate a quality management system?

Consistency across sites and over time is what separates a one-off good month from a dependable partner. Ask whether they run a structured quality management system and how they handle governance, reporting, and continuous improvement. (Proforall operates a QMS aligned to ISO 9001:2015 principles, with certification in progress.)

Frequently asked questions

What is the most important question to ask a security company?

Whether they’re KDN-licensed and can prove it — it’s the legal foundation. After that, ask how they pay and roster guards within the overtime and hour limits, because that reveals whether their price is lawful.

How can I tell if a security quote is realistic?

Ask for it itemised. A 12-hour guard priced at bare minimum wage ignores mandatory overtime and statutory costs — a sign the provider is cutting corners you’ll pay for later.

What should I ask a security company about technology?

Ask how they verify patrols in real time, whether you can see digital reports, and whether they built their systems in-house so they can adapt to your site.

What questions matter for a factory or electronics site?

Ask how they maintain RBA working-hour compliance (60 hours/week, one day off in seven) with relief guards, since your contractor’s guards appear in your audit.

Sources
  1. Bestar — Setting up a security company (Private Agencies Act 1971; PIKM): bestar-my.com
  2. Ministry of Home Affairs — Licensed private security companies: moha.gov.my
  3. TimeTec — The 104-hour OT cap: timeteccloud.com
  4. Belfry — Security guard technology trends 2025: belfrysoftware.com
  5. Securitas — Integrated/hybrid security trends 2025: securitasinc.com
  6. Responsible Business Alliance — Code of Conduct: responsiblebusiness.org
  7. Prozas Security — RBA compliance security in Malaysia: prozassecurity.com.my

Similar Posts