The seven controls that get funded

School funding agencies (FEMA NSGP, DOJ SVPP, state school-safety funds, the federal COPS office) all want the same shape of system. Hardware and vendor vary. The seven controls below are what the application reviewer scans for, what the Title IX coordinator references, and what the post-incident review holds up against. It's the order we walk for a free consultation.

1. Hardened entry vestibule with visitor management

Single point of entry during school hours. Vestibule with two-door interlock so the visitor identifies before reaching the building interior. Visitor management software (Raptor, SchoolPass, Verkada Guest, Brivo Visitor) that scans ID against the sex-offender registry and produces a tracked badge. ADA reach ranges and audible-visual notification specified per Section 504 ADA standards.

2. Role-based access control with audit logs

Brivo, Avigilon Alta, Genetec Synergis, or HID handle the credential side. The audit-defensible piece is documented role definitions (teacher, custodial, nurse, administrative, visitor, contractor) with explicit physical-access scope per role, badge events queryable by person and area for the FERPA-aligned retention window, and a written off-boarding workflow that revokes credentials on the same business day.

3. Camera coverage of every entry plus assembly and egress

1080p minimum at 15 fps; 4K at vestibules and high-traffic chokepoints where face identification matters. Coverage that captures both the approach and the entry, the cafeteria and any large-assembly area, the emergency-egress paths, the parking lots and bus loops, and any after-hours-accessible facility (gym, athletic field, auditorium).

Vendor mix usually lands at Verkada or Avigilon Alta for cloud-native simplicity in K-12; Genetec, Hanwha, or Axis for higher-ed campuses where on-prem control matters. Camera-agnostic AI analytics (Dragonfruit AI, Intenseye) layer on top of existing fleets without rip-and-replace.

4. AI-assisted weapon and intrusion detection at the edge

Edge-AI cameras run weapon-detection and after-hours intrusion classification on-device. The system distinguishes person, vehicle, and known noise; only verified events escalate to the SRO, the central station, or the operator. The point is to compress the time between threat appearance and dispatch, not to replace human review.

5. Classroom lockdown signaling tied to access

Centegix, CrisisGo, or Raptor staff badges trigger building-wide lockdown when pulled. The access system locks every interior door from a single command. Cameras flag the source of the signal so first responders know which classroom triggered. Mass-notification fires simultaneously across PA, mobile push, and SMS.

6. Multi-modal mass notification

One channel fails; you need three. PA announcement on building speakers (NFPA 72-aligned audibility), mobile push to the staff app, SMS broadcast to opted-in parent and emergency-contact lists. Higher-ed campuses add blue-light tower integration. Both K-12 and higher-ed need a written rehearsal cadence (quarterly is the defensible minimum).

7. Written incident-response plan with annual review

None of the hardware matters without the binder that says how it gets used. Annual tabletop exercise with district leadership, SRO, and local fire and police. Written policy on footage retention and release. FERPA redaction process. Quarterly drill cadence with documented after-action notes. See our NSGP grant security installs primer for the application-side detail.

Where most schools get hung up

In K-12 audits and grant rejections, the hardware is fine; the documentation isn't. Three failures dominate. The camera fleet covers the front entrance and main hallway, but the back lot at dismissal and the after-hours athletic facility are blind. The access system records every badge event but nobody can pull a clean report grouped by role inside the audit window. The lockdown signaling works in a drill, but there's no written FERPA-aligned process for releasing footage to law enforcement, so the first real event has district counsel inventing the workflow on the fly.

The fix is mundane: walk the property at dismissal and after dark, write the role list and clean the badge assignments, and put the FERPA release process on paper before you need it. That's most of what the free consultation produces.