Regulatory Compliance, Ethics, and Professional Practice
What this domain covers
Regulatory Compliance, Ethics, and Professional Practice tests the legal framework around security work and the conduct expected of a technician or designer. It covers codes versus standards, the authority having jurisdiction, listings, licensing, privacy, and ethical decision-making.
Core rules
- A code is adopted into law; a standard is a consensus document that a code or contract references. The AHJ interprets and enforces the adopted code.
- Core references: NEC (NFPA 70) Articles 725, 760, 800, and 820; NFPA 72 for fire alarm; NFPA 731 for premises security; NFPA 101 for life safety; UL 681 for burglar alarm installation, UL 294 for access control, UL 864 for fire panels, UL 1076 for proprietary systems, and UL 1610 for central station units.
- Listing applies to the product as tested, not to your installation. Field wiring, mounting, and programming must still comply with the listing and the code.
- Licensing and permits are local: low-voltage contractor licenses, fire alarm permits, and electrical work reserved to licensed electricians.
- Privacy: video in changing rooms, restrooms, and similar private areas is prohibited or tightly restricted; audio recording consent is one-party in some jurisdictions and all-party in others. GDPR and CCPA impose notice, retention, and access duties.
- Ethics: disclose conflicts of interest, refuse kickbacks, protect confidential client information, work only within your competence, and report test results truthfully. The ASIS code of ethics is a common reference.
Worked example
A client asks you to disable the REX sensor on a stairwell door because wind causes nuisance releases. Refusing is the correct answer: NFPA 101 requires the egress-side sensor for access-controlled egress, and disabling it defeats the listing and creates a life-safety hazard. The professional response is to document the request, explain the code basis, and propose a compliant fix such as adjusting the sensor pattern, adding a door closer, or relocating the sensor. If the client insists, escalate to the AHJ and your supervisor.
Traps that cost marks
Treating a UL label as proof of code compliance; assuming existing installations are 'grandfathered' without checking the AHJ's rules; self-approving work that requires inspection; and recording audio without confirming consent. Also watch for answers that put client convenience above egress or privacy law.