When power or internet service fails, a building rarely loses every security function at once. The access-control panel may keep making local decisions while mobile credentials stop. Cameras may remain powered while the recorder or network switch goes offline.
That uneven failure is the problem. Staff may assume the building is protected because one screen is still working, even though door events, recorded video or alarm notifications are missing.
Quick answer: During an outage, each security component follows its own power, communication and approved door-safety design. Facility teams should test access control, locks, cameras, recorders, intercoms, alarm communicators, network equipment and door operators as one system. The test must confirm both operation during the outage and orderly recovery afterward.
Outage Symptoms and Likely Causes
| Symptom | Likely cause | What should be checked |
| Card readers light up, but credentials do not work | Controller offline, database unavailable or reader power only | Controller, local credential storage, network and panel battery |
| Doors release unexpectedly | Approved fail-safe response, fire alarm interface or lost lock power | Door schedule, lock type, power supply and approved sequence |
| Doors remain locked and staff cannot enter | Failed communicator, dead reader, fail-secure lock or no mechanical plan | Reader, controller, lock supply, key override and staff procedure |
| Live camera view works, but nothing is recorded | Recorder, storage or network path lost power | NVR/VMS server, storage, switch, UPS and recording status |
| Cameras fail only after power returns | Cold-start limit, PoE budget, switch sequence or damaged configuration | Camera rating, switch load, heater demand and restart logs |
| Intercom calls work locally but not on mobile phones | Internet or cloud service unavailable | Router, firewall, internet, cloud status and local call path |
| Alarm sounds locally but monitoring receives nothing | Communicator, internet, cellular or account fault | Primary and backup transmission, antenna, account and event log |
| Systems show different event times after restart | Clock source or time-zone settings failed | NTP, controller clocks, recorder time and daylight-saving settings |
| UPS reports runtime but shuts down quickly | Aged battery, overload or unprotected downstream equipment | Battery test, connected load, temperature and replacement history |
1. Map the Dependencies Before Testing
An integrated system can appear simple on a workstation while depending on equipment in several rooms.
A typical entrance may rely on:
- Card reader
- Access-control panel
- Door-position contact
- Lock power supply
- Electric strike or magnetic lock
- Request-to-exit device
- Automatic door operator
- Intercom
- Camera
- Network switch
- Router or firewall
- Video recorder
- Alarm communicator
- UPS or generator-backed circuit
Draw the path from the user to the final decision. For example:
- The reader receives the credential.
- The controller decides whether it is valid.
- The relay signals the lock power supply.
- The lock releases.
- The door contact reports that the opening changed state.
- The camera records the event.
- The management system stores the transaction.
Then mark which parts need utility power, which have batteries, which need the local network and which need the internet.
ACS Systems’ integrated security service connects access control, alarms, cameras and other building systems. Dependency mapping is important because backing up the main controller does not protect an unpowered switch, lock supply or recorder.
2. Understand Local Operation Versus Server or Cloud Operation
Many access-control panels store credentials and schedules locally. If the management server or internet connection is lost, they may continue granting access to previously authorized users.
However, the building may lose:
- Remote administration
- New credential updates
- Mobile credentials that require online validation
- Live event viewing
- Email or app notifications
- Cross-site control
- Centralized occupancy information
- Cloud-hosted intercom calling
Ask the service provider to document which decisions occur at the controller and which require another system.
Test a Recently Changed Credential
Credential synchronization can create a hidden problem. A new card may appear active in the management software but may not have reached the controller. A former employee’s credential may look deleted centrally but remain in an offline panel.
Before a controlled network test:
- Add a test credential
- Remove or disable a separate test credential
- Confirm both changes at the door
- Disconnect only the approved test connection
- Test the same credentials again
- Restore service and confirm synchronization
Do not use a real former employee’s card as the test item. Use documented test credentials that can be controlled and removed.
The Commercial Access Control Audit Checklist covers credential review, schedules, door states and event history in more detail.
3. Know How Each Door Is Intended to Behave
“Fail safe” and “fail secure” describe what a lock does when its locking power is removed. They do not, on their own, determine whether the whole doorway meets egress, accessibility, fire-safety and security requirements.
- A fail-safe lock releases when lock power is removed.
- A fail-secure lock remains secure against entry when lock power is removed, while required egress must still be maintained by the approved hardware and design.
The correct response depends on the opening, occupancy, fire alarm interface, exit hardware and approved plans.
For every controlled door, document:
- Lock type and normal state
- Behaviour when utility power fails
- Behaviour when panel power fails
- Behaviour when the fire alarm interface activates
- Mechanical egress from inside
- Mechanical or supervised entry procedure from outside
- Automatic operator response
- Door-position monitoring during the event
- Method for restoring normal operation
Do Not Change Lock Behaviour as an IT Setting
A software option that appears to solve an outage complaint may conflict with the approved door design. Changes affecting egress, fire alarm release, accessibility or security should be reviewed by qualified door, access-control, electrical and fire-protection personnel.
Door Hardware, Access Control & Security Upgrades explains why the controller, lock, strike, closer, hinges and physical door must be considered together.
4. Test Cameras, Recording and Evidence Recovery Separately
A camera can remain visible in live view while recording has stopped. The opposite can also happen: edge storage may continue recording while staff lose live access.
An outage test should check:
- Camera power
- PoE switch power
- Network path
- Recorder or video-management server
- Storage array
- Time synchronization
- Event bookmarks
- Motion or object analytics
- Remote access
- Camera health alerts
- Export function
Create a known event before, during and after the test. Walk through an entrance or move a service vehicle through the scene, then confirm that staff can find and export all three periods.
If a camera restarts with default settings or loses its privacy mask, correct it before returning the system to normal use. The Office of the Privacy Commissioner of Canada advises private-sector organizations to limit camera views, restrict access and retain recordings only as long as needed. Review the federal private-sector video-surveillance guidance.
ACS Systems installs and services commercial security camera systems across Toronto and the GTA.
5. Include Intercoms, Mobile Apps and Alarm Communications
Internet-dependent functions can fail while the local entrance appears normal.
Intercoms
Check whether the system can still:
- Call a local suite station
- Reach reception or security
- Call mobile users
- Display video
- Release the intended entrance
- Record the call event
- Use a backup telephone or cellular route
Document what message a visitor receives if no remote endpoint is available. If the intercom is part of the accessible entrance, the temporary procedure must not leave a person waiting without a usable way to request entry or assistance.
Commercial intercom systems may use wired, IP, mobile or cloud connections, so outage behaviour must be confirmed for the installed model and network.
Alarm Communications
A panel battery does not guarantee that a signal reaches the monitoring station. The primary internet communicator, backup cellular module, antenna and account must all work.
Coordinate testing with the monitoring provider and confirm:
- Test mode is active only for the planned period
- The correct account and zone are received
- Primary and backup routes operate
- Loss-of-communication faults are reported
- The call list is current
- The system is returned to active monitoring
ACS Systems’ commercial alarm systems can connect intrusion, detection and notification functions through a shared control platform.
6. Check UPS Capacity Under Actual Load
A UPS runtime estimate is not the same as a measured runtime.
Battery performance is affected by:
- Battery age
- Connected load
- Repeated discharge cycles
- Room temperature
- Charging condition
- Battery chemistry
- Failed internal cells
- Added equipment that was not included in the original design
Create a load list for each UPS. Include switches, controllers, recorders, storage, routers and other devices plugged into it. Check whether someone has added non-security equipment that reduces runtime.
Generator Power Does Not Remove the Need for UPS Support
A generator normally takes time to start and transfer. A UPS can bridge that gap and reduce abrupt shutdowns. It can also support an orderly shutdown if the generator fails.
Confirm:
- Which security circuits are generator-backed
- Transfer delay
- UPS runtime to generator start
- Whether network and communication equipment share the backup circuit
- Whether the system returns automatically after a failed transfer
- Who receives a low-battery or generator-failure message
Do not conduct generator or electrical transfer tests without the building’s electrical and life-safety procedures.
7. Plan the Recovery Sequence
The return of power can create a second failure. Network switches, servers, recorders and controllers do not all start at the same speed.
Possible recovery problems include:
- Cameras requesting PoE heater power at the same time
- A switch exceeding its power budget
- Controllers starting before the network time source
- A recorder starting before storage is available
- Mobile apps retaining an offline state
- Locks or relays not returning to their normal schedule
- Alarm zones remaining bypassed
- Duplicate or delayed notifications
Use a recovery checklist:
- Confirm stable utility or generator power.
- Check UPS and power-supply faults.
- Verify core network equipment.
- Confirm controllers and communication paths.
- Review door and lock states.
- Check intercom calls and release.
- Confirm camera recording and time.
- Restore alarm zones and monitoring status.
- Review queued events and duplicate alarms.
- Document deficiencies and repairs.
Do not assume that “online” means normal. Test a credential, intercom call, alarm signal and recorded video after recovery.
The Canadian Edge: Winter Outages Create Compound Failures
Freezing Rain and Wind Affect More Than Utility Power
An ice storm may cause a power interruption while also loading exterior mounts, blocking a camera, icing a threshold and disrupting internet service. Test the building by function, not by looking only at the electrical panel.
Cold Starts Matter
Some exterior cameras and devices can continue operating at a low temperature but cannot start from a fully cold condition at that same temperature. After a long outage, the equipment may remain offline until the housing warms.
Heating Loss Changes Door and Sensor Behaviour
As the building cools:
- Door seals stiffen
- Metal contracts
- Stack-effect pressure changes
- Low-temperature alarms activate
- Pipes near exterior walls become vulnerable
- Battery capacity may fall in unconditioned rooms
A security outage plan should coordinate with the building’s heating, plumbing and emergency plans.
Salt and Moisture Affect Temporary Entry
If staff switch to mechanical keys during an outage, confirm that cylinders, gates and alternate entrances are usable. Salt, ice and snow can make the planned backup entrance inaccessible.
Accessibility, Fire-Safety and Privacy Considerations
The 2024 Ontario Building Code came into effect on January 1, 2025. Door release, egress, fire alarm interfaces, emergency power and accessible routes must be reviewed for the specific building and project. Review Ontario’s 2024 Building Code information.
CSA/ASC B651:23 addresses accessible design for the built environment, including routes, doors and controls. An outage procedure should not direct people to an entrance they cannot reach or operate.
The AODA does not prescribe one backup-power design for every security system. However, if a failure makes an accessible facility or service unavailable, Ontario organizations should follow applicable temporary-disruption procedures and identify an available alternative. Review Ontario’s accessible customer-service guidance.
The Accessible Canada Act applies to federally regulated entities and includes barriers in the built environment and information and communication technologies.
Fire alarm release and required egress functions must not be altered through an informal security-system test. Coordinate those functions with qualified personnel and the approved building and fire-safety documentation.
Power and Network Outage Test Checklist
Before the Test
Map power, network and internet dependencies
Identify every backed-up component
Record expected door and lock behaviour
Review fire alarm interfaces
Notify security, monitoring and affected staff
Prepare alternate accessible entry
Create documented test credentials and events
During the Outage
Test local credential decisions
Check every critical door state
Confirm mechanical egress
Test intercom local and remote calling
Verify alarm transmission paths
Check camera live view and recording
Record UPS load and runtime
Note every fault and notification
After Recovery
Confirm controllers and panels are online
Test a credential at a real door
Test intercom call and release
Confirm alarms are active and monitored
Review camera playback and export
Check system clocks and time zones
Confirm privacy masks and permissions
Verify no zone remains bypassed
Document repair priorities
Frequently Asked Questions
Will access control work if the internet goes down?
Many systems continue making local decisions, but cloud administration, mobile credentials and remote notifications may stop. Test the installed system rather than assuming.
Do magnetic locks release during a power outage?
Electromagnetic locks require power to remain locked, but the complete doorway response depends on its approved power, fire alarm, egress and backup design. Have qualified personnel document the actual sequence.
Will security cameras keep recording on a UPS?
Only if the cameras, network switches, recorder and storage path all have adequate backup power. A live image alone does not confirm recording.
Does a generator protect the security system immediately?
Not always. The generator needs time to start and transfer. A UPS may be needed to bridge the gap and prevent abrupt shutdowns.
Why do devices fail after power returns?
Cold-start limits, start-up order, PoE demand, lost settings or communication delays can prevent normal recovery. Test the complete system after power is stable.
How often should an outage test be completed?
Base the schedule on building risk, manufacturer instructions, battery age, previous faults and the fire-safety plan. Retest after major system, network, generator or electrical changes.
Schedule an Integrated Security Outage Test
If the building has never tested how access control, cameras, intercoms and alarms behave together during an outage, the expected response may exist only on paper.
ACS Systems installs and services integrated security systems across Toronto and the GTA. An outage review can map dependencies, test backup power, confirm door states, verify communications and document recovery steps. For active properties, review Planning Security Upgrades for an Occupied Building before scheduling disruptive work.
Contact ACS Systems to arrange a power and network outage review.
Trust Note From ACS Systems
This article provides general guidance for commercial, institutional and multi-residential properties. Security, electrical, fire alarm, egress, privacy and accessibility requirements depend on the building, approved design and installed equipment. Controlled tests and changes should be planned and completed by qualified personnel under the procedures that apply to the property.
