ACS Assessment: What to Expect (2026 Guide)

Last updated: 2 October 2026

An ACS assessment is the SIA's independent audit of a private security company against the Approved Contractor Scheme standard, scored across 78 achievement indicators up to a maximum of 145 points. Expect a self-assessment workbook, document review, staff and customer interviews, site visits, and — after initial approval — an annual reassessment to keep the certification live.

Key Takeaways

• The SIA's Approved Contractor Scheme scores a business against 78 achievement indicators covering staff training, financial management and health and safety policy, according to GOV.UK guidance on choosing an SIA approved contractor (2023).
• The maximum overall ACS score is 145 points, per the same GOV.UK / Govwire guidance (2023).
• A company must meet the required level of all 78 indicators before it becomes eligible for ACS approval, according to the SIA ACS Self-Assessment Workbook Report (2022).
• Pulse Operations's guide to the ACS self-assessment sets out that the standard breaks the 78 indicators into seven criteria and 33 sub-criteria, each with its own required achievement level.
• Approved contractors are not assessed once and forgotten: reassessment happens annually, and any improvement points raised must be closed within a timeframe the assessor sets.

What is the ACS assessment?

The ACS assessment is the audit process the Security Industry Authority (SIA) — the statutory regulator for the UK private security industry, established under the Private Security Industry Act 2001 — uses to decide whether a company qualifies for its Approved Contractor Scheme. It's a business-level accreditation, distinct from an individual's SIA licence, that certifies a firm's management systems rather than any one guard's training record.

Worth flagging early: "ACS" also refers to the gas industry's Accredited Certification Scheme, which assesses individual gas engineers rather than security businesses. That's a different scheme entirely — the Domestic ACS CCN1 Core Gas Safety Element covers fifteen core competencies tested by written and practical exams, and takes 2 to 7 days with a 100% pass requirement, according to ACS Gas Exams (2026) and CTS Group (2026). This article is about the SIA's security-industry version.

The SIA appoints UKAS-accredited certification bodies — organisations such as SSAIB — to carry out assessments on its behalf, following the standard route of self-assessment plus an independent verification visit.

Who is required to undergo an ACS assessment?

ACS approval is voluntary in law, but in practice most security companies bidding for corporate, public sector or high-value private contracts need it. Pulse Operations notes that the Private Security Industry Act 2001 requires individual guards, door supervisors and CCTV operators to hold an SIA licence — that's separate from ACS, which sits at company level.

Contractors that never tender for larger contracts sometimes skip ACS entirely, since it carries an assessment fee and an ongoing evidencing burden. But procurement teams frequently list ACS approval as a tender qualifier, so for firms chasing facilities management contracts, shopping centre security or construction site work, it becomes a practical necessity rather than a legal one.

There's also a "Pacesetters" tier for companies scoring in the top band, which strengthens a bid further. Sole traders and very small operators sometimes find the assessment burden disproportionate relative to contract value, which is one reason many outsource evidence-gathering to an operations platform rather than building it from scratch each year.

What documents and evidence do I need before the assessment?

Assessors don't accept the self-assessment workbook's scores at face value — they cross-check every claimed indicator against real operational records. Expect to produce staff files and payroll records, contracts and duty rotas, written policies and procedures, and site documentation, then sit through interviews with staff and customers and site visits, per Pulse Operations's guide, The ACS self-assessment: how to evidence it.

The seven criteria assessors work through are Strategy, Service delivery, Commercial relationship management, Financial management, Resource management, People, and Leadership. The People criterion, for instance, checks how rigorously a contractor applies BS 7858 — the British Standard for security screening of personnel — and whether licences are verified against the SIA's public register.

For firms where this evidence lives across spreadsheets, filing cabinets and individual managers' inboxes, pulling together a year's worth of proof becomes a scramble every renewal cycle. Pulse Operations's compliance runway keeps SIA licence status, BS 7858 screening records, DBS checks, right-to-work documents and training expiries on a single tracked timeline, so the evidence an assessor asks for already exists rather than needing reconstruction.

What topics and criteria are covered in the assessment?

The ACS standard scores a contractor against 78 individual achievement indicators, organised into 33 sub-criteria under seven headline criteria: Strategy, Service delivery, Commercial relationship management, Financial management, Resource management, People, and Leadership, per Pulse Operations's ACS guide. Each indicator carries a required baseline achievement level scored as zero, with additional points available for evidenced good practice above that baseline.

A company must meet the required level of all 78 indicators before it becomes eligible for approval at all, according to the SIA ACS Self-Assessment Workbook Report (2022). Some certification bodies report slightly different indicator counts in their own audit summaries — one operator's audit was assessed against 89 individual indicators, per Integrity Security Group Ltd (2026), reflecting variation in how bodies structure sub-checks within the core framework.

Financial management scrutiny covers solvency, insurance and cash flow. Service delivery examines how patrols, incidents and site visits are actually recorded — this is where photo-verified patrol evidence, GPS-stamped checkpoints and a tamper-evident occurrence book carry real weight, because assessors want to see delivery proven, not asserted.

Comparing ACS scoring bands

"Promoting the Point Scoring of the ACS is important to show how serious the Security Company takes their job," according to a spokesperson at Advantage One Security (2026) — a reminder that ACS scores aren't just a pass/fail gate but a marketing asset in competitive tenders.

How long is ACS certification valid before reassessment?

ACS approval is not a one-off award — reassessment happens annually for the life of the certification, per Pulse Operations's ACS self-assessment guide. Where an annual assessor identifies improvement needs, the contractor must close them within a timeframe the assessor sets, or risk losing approved status.

That annual cycle means the evidencing workload never really stops. A company that scrambles to assemble twelve months of rotas, screening files and incident logs once a year is far more exposed to gaps and inconsistencies than one that tracks compliance continuously.

This is precisely the gap Priority First — the founding team's own London security and facilities operation, and the environment Pulse Operations was originally built inside — set out to close. Before adopting the platform, Priority First ran patrols on paper sign-in sheets, jobs passed around on WhatsApp, and licence expiries in a spreadsheet nobody fully trusted. Since going live in February 2026, Priority First has recorded more than 4,900 patrols on the platform across 24 sites, with 100% of checkpoints backed by a watermarked photo, as of Pulse Operations's July 2026 production data. That kind of continuous, checkable record is exactly what an annual ACS reassessment rewards.

What common mistakes cause candidates to fail, and how do you prepare?

The most common failure point isn't a missing policy — it's a policy that exists on paper but has no operational evidence behind it. Assessors interview staff and customers precisely to catch the gap between a written procedure and what actually happens on site.

Weak record-keeping is the second recurring issue: duty rotas that don't match payroll, incident logs with gaps, or patrol records that can't be verified against a specific time and location. "The burden of proof moved. Ten years ago 'we were there' closed the conversation; now clients have their own auditors, their own boards, their own doubts. The operators who thrive are the ones who treat every shift as something they can show, not just something they can say," says Mo Hassan, Founder of Pulse.

Financial management indicators also catch companies out where insurance renewals or cash-flow evidence aren't readily accessible. And under Resource management, gaps in BS 7858 screening or SIA licence verification are a frequent finding — checkable in real time against the SIA's public register rather than trusted to a spreadsheet.

Your ACS assessment checklist

• Confirm every officer's SIA licence status against the public register before the assessment date.
• Assemble BS 7858 screening files and DBS checks for all site-based staff.
• Cross-check duty rotas against payroll records for consistency across the assessment period.
• Pull patrol, incident and occurrence book records that prove delivery on specific sites and dates.
• Review financial management evidence: insurance certificates, solvency documentation, cash-flow statements.
• Interview-proof your team by briefing staff on what assessors typically ask.
• Set a remediation owner and deadline for any indicator likely to fall below required level.
• Track improvement points from the previous annual assessment to confirm they've been closed.

FAQ

What does ACS stand for in the security industry?

ACS stands for the Approved Contractor Scheme, the SIA's voluntary accreditation for private security businesses in the UK. It's distinct from the gas industry's Accredited Certification Scheme, which uses the same acronym but assesses individual gas engineers rather than security companies.

Who carries out an ACS assessment?

The SIA appoints UKAS-accredited certification bodies, such as SSAIB, to carry out independent verification visits on its behalf. The process combines a self-assessment workbook with document review, interviews and site visits by the appointed assessor.

How is the ACS assessment scored?

The ACS scores a contractor against 78 achievement indicators up to a maximum of 145 points, according to GOV.UK guidance (2023). A company must meet the required baseline on all 78 indicators before it's eligible for approval, per the SIA ACS Self-Assessment Workbook Report (2022).

What happens if a company fails its ACS assessment?

A company that doesn't meet the required level on all 78 indicators isn't approved until it addresses the shortfall. For an existing approved contractor, improvement needs raised at an annual reassessment must be closed within the timeframe the assessor sets, or approval can be withdrawn.

How long does an ACS assessment take?

The SIA's own guidance doesn't publish a fixed duration for the security-industry ACS assessment, since it depends on company size and number of sites. It's worth not confusing this with the gas industry's ACS assessment, which typically runs from 2 to 7 days, per CTS Group (2026).

How often is ACS certification reassessed?

ACS-approved contractors are reassessed annually, not just once at initial approval, per Pulse Operations's ACS self-assessment guide. Continuous evidence-gathering across the year makes each annual cycle considerably less disruptive than assembling twelve months of records from scratch.

Is ACS approval a legal requirement?

No — ACS approval is voluntary, unlike the individual SIA licence required under the Private Security Industry Act 2001. In practice, many public sector and corporate tenders specify ACS approval as a qualifying criterion, making it a commercial necessity for firms competing at that level.

Proving your ACS evidence with Pulse Operations

Every section above comes back to the same problem: an ACS assessor doesn't want a policy document, they want proof that the policy happened. Pulse Operations was built to generate that proof automatically — every patrol checkpoint completed by a mandatory watermarked photograph showing officer, site, GPS and time, logged into a hash-chained, tamper-evident audit log rather than a spreadsheet an assessor has to take on trust.

Across Priority First's 24 London sites, that approach has produced over 4,900 recorded patrols with 100% photo verification as of July 2026 — exactly the kind of service delivery evidence the ACS standard's Service delivery and Resource management criteria are built to check. The compliance runway tracks SIA licences, BS 7858 screening, DBS checks and training expiries on one timeline, so nothing lapses unnoticed between assessments.

If your next ACS assessment is on the calendar, read Pulse Operations's guide to evidencing the ACS self-assessment, or book a tour to see how the platform maps to all seven ACS criteria before an assessor arrives.

Related Reading

• ACS Audit Checklist 2026: SIA Assessment Guide (UK)
• SIA ACS Self-Assessment Workbook: 2026 UK Guide
• How to Get SIA Approved Contractor Status (2026 Guide)

★ Add pulse-operations.co.uk as a preferred source on Google