What actually happens in the ninety seconds after your alarm trips
The siren is the least useful part of an alarm system. It is a deterrent and a nuisance, and in an empty industrial building at 3am nobody hears it.
About this piece
- Article
- Security & surveillance
- Written by Redsilicon
- Updated 2026-08-24
The part that matters is invisible: a signal leaving the building, arriving somewhere staffed, and turning into a phone call. Here is that sequence, in order, and what can break at each step.
The sequence, step by step
Second zero. A contact opens, a motion sensor trips, or a water sensor gets wet. The panel sees the zone change state.
Seconds zero to thirty. If the zone has an entry delay, which is normal on the door staff use, the panel waits and beeps while somebody disarms. Perimeter and interior zones outside that path usually have no delay and go straight to alarm. Delay times are set at programming, so yours may differ from your neighbour’s.
Alarm. The panel triggers the sounder and, at the same moment, starts transmitting. Transmission is not instant. It takes a few seconds on a good path and longer on a poor one.
Received. The signal lands at the monitoring centre and pops onto an operator’s screen, tagged with your account, the zone that tripped, and the time.
Operator action. The operator follows the written action plan on your account. On most commercial accounts that means calling the premises first, then working down the call list, and dispatching police where the plan and local practice call for it. Anyone answering has to give the verbal passcode. Without it, the call is treated as unverified and the plan continues.
Escalation. If nobody answers, the operator keeps going down the list. This is where most accounts fail, and it is not the monitoring centre’s fault. It is a list with a mobile number on it that changed in 2021.
The whole path from trip to first phone call is usually inside a couple of minutes. Every part of it depends on the two things below.
The signal has to get out of the building
A monitored alarm is only monitored while it can talk.
The old path was a telephone line. It still works and it has two weaknesses: the line can be cut outside the building, and many businesses no longer have a real copper line at all, only a phone service delivered over internet equipment that stops working when the power does.
The common path now is IP, meaning the panel sends signals over your internet connection. It is fast and cheap, and it is down whenever your internet is down, which includes any power cut long enough to outlast the battery in the modem.
Cellular is the third path. A cellular communicator in the panel sends over the mobile network on its own SIM. It is independent of your internet and your phone line, and it works on the panel’s battery through a power outage.
Any panel worth monitoring should have at least two paths, normally IP with cellular backup, and both should be supervised. Supervised means the panel checks in on a schedule and the monitoring centre raises a fault when a check-in is missed. Without supervision, a dead path is silent until the night you need it. Ask what the check-in interval is and what happens when one is missed.
Rural sites deserve a specific question at the quote stage: what the cellular signal actually is at the panel location, measured rather than assumed. A communicator in a metal-clad building can be several bars worse than the same phone in the parking lot.
What a central station is
A monitoring centre is a staffed room, running every hour of every day, on backup power, with redundant communications and duplicated facilities so a failure in one location does not take the service down. Operators are trained on procedure and every action is logged, which is what makes the records usable afterwards for police or an insurer.
The service does not include anyone attending your site. Operators call and dispatch. A guard response, where a person is sent to check, is a separate arrangement with a guard company and it is priced accordingly.
The call list is the part you control
Everything above is engineering. This part is admin, and it is where most accounts quietly rot.
A working call list has a name, a mobile number and a passcode for each person, in the order you want them tried. The order should reflect who can actually attend, not seniority. Somebody who lives 40 minutes away is not the first call.
Review it when anyone leaves, and once a year regardless. Also confirm who is authorised to make changes to the account, because a monitoring centre that lets anyone change a call list is a monitoring centre with a serious problem.
Test the whole chain twice a year. Put the system in test, trip a zone, and confirm the signal arrives and the calls happen in the order you expect. The test costs nothing and is the only way to prove the path works.
False alarms cost money and credibility
Most municipalities in Ontario have a bylaw covering repeat false alarms, and charges and permit requirements differ from town to town. Check the bylaw for your own municipality rather than assuming, because the rules in one Durham town are not the rules in the next.
The causes are predictable. A door that does not latch properly in cold weather. Motion sensors pointed at a heater vent or a hanging sign that moves when the HVAC starts. Cleaners with an old code or no code. Balloons in a retail space. Rodents in a warehouse.
Two things reduce them. Fixing the physical cause, which usually means adjusting a sensor or a door closer rather than reprogramming anything. And using the abort or cancel function properly: when someone sets it off by mistake, disarming promptly and answering the verification call stops the dispatch.
Video verification changes the conversation as well, because an operator who can see the site can tell you whether there is a person there. That is a different service, covered in recorded footage against live monitoring.
What ULC listing means
ULC listing is a certification programme run by UL Solutions in Canada. A listed alarm service company can issue ULC certificates on qualified systems, which is how a business demonstrates to an insurer, an authority having jurisdiction or a government client that the equipment, installation and monitoring meet national standards.
The standards behind it are named on the UL Solutions Canada page on becoming a ULC listed alarm service company. For intrusion work the relevant ones are CAN/ULC-S301, covering signal receiving centre burglar alarm systems and operations, and CAN/ULC-S302, covering installation, inspection and testing of intrusion alarm systems. Fire monitoring sits under different standards, including CAN/ULC-S561. Listing involves an audit of installation sites against those requirements, and listed companies appear in ULC’s online directories, so a claim can be checked rather than taken on trust.
Two practical points. A ULC certificate on a system is not the same as a monitoring centre being ULC listed, and both may be relevant depending on what you are being asked to prove. And if your insurance policy or a contract specifies ULC monitoring, that is a hard requirement, so confirm it before signing a monitoring agreement rather than after.
Redsilicon does not do fire alarm work, because that is ULC-listed work and we are not a ULC-listed fire alarm contractor. Intrusion and environmental monitoring is a different scope.
What this means for your building
A warehouse on a service road in Whitby with the panel in a back office is the common case, and the failure is usually the same one: a single IP path, no cellular backup, and a call list from the install date. The building has been unmonitored for stretches nobody knew about, because nothing was supervising the path.
A rural shop outside Port Perry has the same list plus a signal strength question, and often a generator or a longer battery on the panel, because a winter outage there lasts hours rather than minutes.
What to do about it
- Find out what paths your panel uses right now. If the answer is one path, that is the first thing to change.
- Ask your monitoring provider for a printout of your current call list and action plan. Read it as if you were the operator at 3am.
- Update names, numbers and passcodes, and put the person who can actually attend the site first.
- Schedule a test twice a year and put it in the calendar rather than trusting memory.
- Look up the false alarm bylaw for your municipality and check whether a permit or registration applies to you.
- If a contract or an insurer requires ULC, get the requirement in writing and match it against what your alarm monitoring agreement actually provides.
Want this scoped for your site?
Tell us the building and what you’re trying to achieve. We’ll tell you what it takes, and whether you actually need it.
Before you call
Is cellular monitoring worth the extra monthly cost?
If the building is empty at night or holds anything worth taking, it is the difference between monitored and sometimes monitored. Internet outages and power cuts are exactly when a break-in is easiest.
Can we self-monitor with an app instead?
You can, and for a small owner-occupied site with somebody nearby that is a real option. Understand what you are taking on: you are now the operator, at 3am, and if you are asleep or out of coverage nobody else picks it up. Some insurers also will not accept self-monitoring as a monitored system.
Our alarm is ten years old. Can it be monitored?
Usually yes. Many older panels take a cellular communicator that keeps the existing sensors and wiring in place, which costs far less than replacing the alarm system outright. Whether that is worth doing depends on the condition of the sensors, not the age of the box.