Adopting a SaaS
The Regulators View
VIGILINK has asked Mark Burtonwood to author several articles over the coming weeks to highlight the current and probable future direction that the SIA may take. Mark has dedicated his career to public safety. After a successful law enforcement career, he spent over ten years at the Security Industry Authority (SIA) in various roles, ultimately becoming the Deputy Director of Operations. Since leaving the SIA, Mark has worked as an independent advisor on safety and security sector reform and governance both in the UK and overseas.
The Adoption of SaaS Solutions in the Security Industry
Although The Security Industry Authority (SIA), as the regulator of the private security industry, has not provided specific public guidance regarding the adoption of system-based solutions like Vigilink by security businesses, recent reviews and strategic plans indicate the SIA’s support for digital transformation to enhance efficiency, reduce costs and improve service delivery.
For instance, the March 2025 Public Body Review of the SIA reported it is advancing towards integrated digital solutions, exemplified by the adoption of Gov.uk OneLogin for identity verification and digital service delivery, with the goal of achieving greater efficiency and cost savings. Such initiatives imply a receptiveness to cloud-based and SaaS solutions such as Vigilink as part of modernising regulatory and business processes.
Security, Compliance, Best Practice Expectations
The SIA does not establish technical requirements for SaaS adoption. However, security businesses in the UK are required to comply with data protection standards, cyber security and regulatory compliance. The SIA’s Approved Contractor Scheme (ACS) requires approved businesses to ensure service delivery to customers and the safety of staff are improved by investment in technology.
Consultation and Future Direction The SIA is currently undertaking a review and redesign of ACS aimed at enhancing standards and public protection. Although it is too early to say to what degree SaaS will feature, the revised scheme will likely continue to mandate that businesses demonstrate strong security and compliance processes and maximise the potential of technology, which would inherently apply to any SaaS platforms they utilise.
Conclusion
Although the SIA has not provided specific guidance on SaaS adoption, its regulatory approach focuses on security, compliance and continuous improvement. Security businesses in the UK are encouraged to use modern digital solutions, such as Vigilink, if they adhere to high standards of security and regulatory compliance. The SIA’s evolving business approval scheme is expected to further support these standards in the future.
Recommendations
As a former regulator and a Chartered Security Professional, I understand that successful SaaS deployments are integral to supporting every business, by enhancing compliance methodologies, delivering employee-focused outcomes and transparent risk management for both the business and its customers.
The SaaS solution exceeds these standards by providing continuous monitoring, automated compliance and clear governance. It has a proven track record of supporting organisations like yours, ensuring data security, operational resilience and regulatory compliance. I regard VIGILINK as a dependable partner for any organisation dedicated to security, compliance and operational excellence.
