For many years, compliance with Law 333 was viewed by many building managers as a bureaucratic obligation: a security plan, a risk analysis, and a few technical systems installed to meet legal requirements. GEO 37/2026 changes this approach.
The new regulation emphasizes real risk assessment and the implementation of security measures adapted to the specific situation of each facility. It is no longer enough to have video cameras and an alarm system — they must be appropriate to the existing risks and be part of a coherent physical security strategy.
What changes through GEO 37/2026
One of the most important changes is the introduction of a separate chapter dedicated to physical security risk assessment and establishing clearer rules on how this should be done. The risk analysis becomes the foundation for the security plan, the design of alarm systems and the establishment of the facility's protective measures.
The regulatory act also introduces the concept of a "safety data sheet" for certain categories of units and clarifies the situations in which risk analysis is required and those in which simplified measures are applicable. At the same time, certain administrative procedures are simplified and new rules are introduced for companies operating in the field of security and alarm systems.
Does the existing risk analysis still reflect reality?
In practice, many risk analyses were carried out years ago. In the meantime, buildings have changed. The following have emerged:
- new tenants;
- new flows of people;
- new commercial spaces;
- additional IT systems;
- new access areas;
- high value equipment.
Often, security systems have remained the same, even though the risk level of the target has changed significantly. An analysis conducted five or ten years ago may no longer describe the real situation on the ground.
The most common problems encountered in buildings
The following situations are frequently identified in technical assessments:
- video cameras with significant dead zones;
- insufficient images to identify people;
- incomplete or technologically outdated access control;
- lack of access logging;
- alarm systems that no longer correspond to the current configuration of the building;
- changes to compartmentalization without updating security measures;
- outdated documentation.
These problems are not always apparent until the time of an incident or inspection.
Why technical systems are becoming increasingly important
The legislative and technological trend is clear: physical security is increasingly based on integrated technical systems. Video cameras, access control, alarm systems and centralized monitoring allow for a higher level of protection and provide complete traceability of events.
For building managers, this means more control and more information available in the event of an incident. For organizations, it means reduced risk and more efficient management of security costs.
When should you request a security audit?
An audit is recommended if:
- the existing risk analysis is old;
- significant changes were made to the building;
- new activities or tenants have emerged;
- video systems are over 5–7 years old;
- access control no longer meets current needs;
- there are repeated security incidents;
- A reassessment of protective measures is being prepared.
The audit provides a clear picture of vulnerabilities and determines whether existing measures are still adequate.
How GreenSoft can help you
GreenSoft designs, implements and maintains physical security systems for commercial buildings, hotels, industrial units and public institutions. As part of a security audit we can assess:
- existing CCTV systems;
- access control;
- burglar alarm systems;
- security systems integration;
- documentation and compliance with current legal requirements.
GEO 37/2026 should not be viewed simply as a new legal obligation. For responsible administrators, it is a good time to check whether the security measures implemented years ago still meet the organization's current risks.
If you haven't reviewed your security systems and risk analysis in recent years, now is the time for a professional assessment. Contact GreenSoft for a physical security audit.
