1. Two Agencies, Two Licenses: The Rule Most Property Owners Don’t Know

Here is a fact that surprises most Virginia home and business owners: the company installing your security cameras, access control system, or burglar alarm needs two separate licenses from two different state agencies to do that work legally. Holding a contractor’s license alone is not enough. Holding a Virginia DCJS license alone is not enough either. A legitimate security installer in Virginia must hold both — and a significant number of companies performing this work hold only one, or neither.

The two credentials are:

• A contractor license from DPOR — the Virginia Department of Professional and Occupational Regulation, which regulates contracting businesses of all trades
• An Electronic Security Business license from DCJS — the Virginia Department of Criminal Justice Services, which regulates private security services

These agencies regulate different things, answer different concerns, and enforce different requirements. Neither license substitutes for the other. And critically for you as a property owner: the gap between them is exactly where unqualified installers operate. A general electrician or handyman with a DPOR license may believe — or may tell you — that their contractor license covers camera installation. It does not. A “security consultant” with DCJS credentials but no contractor license cannot legally perform the contracting work of installation.

This article explains the entire two-license framework: what each license covers, why Virginia built the system this way, what work triggers each requirement, and — most practically — how to verify both licenses in under five minutes before you let anyone touch your property’s security systems. Mercury Communications is a dual-licensed low voltage and security contractor, and the details below reflect the actual regulatory framework we operate under every day.

2. License One: The DPOR Contractor License

The first license is the one most people are familiar with — the Virginia contractor license, issued by the Department of Professional and Occupational Regulation (DPOR) through its Board for Contractors. This license governs the business of contracting: entering into contracts to perform construction, installation, or improvement work on real property.

The Three License Classes

Virginia contractor licenses come in three classes, distinguished primarily by the value of work the contractor is authorized to perform:

• Class C — the entry-level license for smaller projects, with the lowest project value limits
• Class B — the mid-tier license with higher project value authorization and stricter financial requirements
• Class A — the highest license class, with no cap on individual project value, and the most stringent net worth and experience requirements

Beyond the class, contractor licenses carry specialty designations that define what type of work the business is qualified to perform. For low voltage, communications, and security system work, the relevant specialty is Electronic/Communication Service (ESC) — covering the installation of electronic and communication systems including data cabling, telecommunications, and related low voltage systems.

Mercury Communications holds a Class A license (#2705165655) with the electronic communications specialty — the highest license class Virginia issues, with no project size restrictions.

What the DPOR License Protects You From

The contractor licensing system exists to protect consumers from a specific set of risks: incompetent workmanship, financially unstable businesses that abandon projects, and unethical contracting practices. To hold a license, a business must demonstrate trade competency (through a qualified individual who has passed examinations), meet financial requirements appropriate to the license class, and comply with Virginia’s contracting regulations. When a licensed contractor fails you, there are formal complaint and recovery mechanisms. When an unlicensed one does, your options narrow dramatically.

But here is the key point for this article: the DPOR license says nothing about whether the people installing your security system should be trusted with your security. That is a different question — and it is the question the second license exists to answer.

3. License Two: The Virginia DCJS License for Security Installers

The second license is the one most property owners have never heard of — and it is the one that specifically governs security work. The Virginia Department of Criminal Justice Services (DCJS) regulates the state’s private security services industry, and that regulation includes businesses that install electronic security equipment.

Under Virginia’s private security services framework, a business that installs, services, or maintains electronic security systems must hold an Electronic Security Business license from DCJS. This covers the categories of work most people think of as “security”:

• Burglar and intrusion alarm systems — sensors, control panels, monitoring connections
• Security cameras and video surveillance systems — CCTV and IP camera systems installed for security purposes
• Electronic access control — card readers, keypads, electronic locks, and the systems that manage them
• Related electronic security equipment — the integrated systems that combine these functions

The DCJS license is not a formality. To obtain and maintain it, a business must designate a compliance agent — an individual responsible for ensuring the business meets all DCJS regulations — who must complete mandatory training and maintain their own credential. The business itself undergoes vetting, and, as covered in Section 6, every individual employee performing electronic security work must hold their own DCJS registration backed by a fingerprint-based criminal background check.

Mercury Communications holds DCJS Electronic Security Business License #11-30083, and our field technicians hold individual DCJS registrations.

4. Why Virginia Regulates Security Work Through the Criminal Justice System

At first glance, the two-license requirement can look like bureaucratic redundancy. It isn’t — and understanding why reveals something important about what you’re actually buying when you hire a security installer.

Think about what a security installer knows and touches during a project:

• They know where every camera points — and where the blind spots are
• They know where every sensor is placed — and which doors and windows are unprotected
• They know how your access control works — and often hold administrative credentials during setup
• They know your alarm codes and procedures — at least temporarily, during installation and testing
• They have physical access to your property — often including areas visitors never see
• They know the make, model, and configuration of every protective system you rely on

A security installer is, in a very literal sense, being handed the blueprint to defeat your security. That is a fundamentally different kind of trust than the trust you place in a contractor hanging drywall or pulling data cable — and Virginia’s legislature concluded it warrants a fundamentally different kind of oversight.

That is why the second license comes from the Department of Criminal Justice Services rather than a trade board. The DCJS framework brings criminal background checks, individual registration of every technician, mandatory training standards, and ongoing regulatory accountability to an industry where the consequence of misplaced trust isn’t bad workmanship — it’s compromised security.

5. What Work Triggers the DCJS Requirement — and What Doesn’t

Not all low voltage work requires DCJS credentials. The line is drawn around security functions, and understanding where it falls helps you know exactly what to ask of any contractor you’re evaluating.

The pattern is clear: the moment the work involves systems whose purpose is to protect the property — to detect intrusion, control access, or surveil for security — the DCJS requirement attaches on top of the contractor license. Plain connectivity infrastructure does not trigger it.

This distinction matters most on mixed projects, which are increasingly the norm in commercial work — a topic important enough that we’ve given it its own section below.

6. The Second Layer: Individual Technician Registration

Here is the part of Virginia’s DCJS framework that even people who know about the business license often miss: the license operates at two levels. The business must be licensed — and separately, every individual employee performing electronic security work must hold their own personal DCJS registration.

Individual registration is not a rubber stamp. It requires:

• Fingerprint-based criminal background check — the individual’s fingerprints are checked against state and federal criminal records, and certain criminal histories are disqualifying
• Compulsory minimum training — DCJS mandates entry-level training standards for electronic security personnel before they can be registered
• Ongoing renewal requirements — registrations must be maintained and renewed, including in-service training requirements
• Individual accountability — the registration belongs to the person, meaning DCJS can take action against an individual technician’s credential independent of the business

The practical implication for you as a customer: it is entirely possible for a company to hold a valid DCJS business license while sending unregistered workers to your property. That would be a violation on the company’s part — but violations happen, particularly with businesses that treat compliance as paperwork rather than practice.

So the sophisticated question to ask isn’t just “Is your company DCJS licensed?” It’s: “Will the technicians on my project hold current individual DCJS registrations, and can you confirm that before work begins?” A compliant contractor answers that instantly and without discomfort. At Mercury, technician registration is a condition of performing security work — full stop.

7. The Real Risks of Hiring an Unlicensed Security Installer

The two-license requirement isn’t well known among consumers, and unlicensed operators take advantage of that. Handymen, general electricians, IT companies, and “camera guys” routinely install security equipment in Virginia without DCJS credentials — usually at prices that undercut licensed contractors. Here is what you actually risk by hiring them:

• Unvetted people learning your security: The single most serious risk. Without DCJS registration, the individuals installing your system have not passed fingerprint-based criminal background checks. You may be handing the complete blueprint of your property’s protection — camera angles, sensor placement, access credentials — to someone with a criminal history that would have disqualified them from registration.
• Insurance complications: If a loss occurs — a break-in, a theft, a liability event — and your security system was installed by an unlicensed contractor, your insurer may scrutinize or challenge the claim. Commercial policies in particular often assume licensed, code-compliant installation.
• No meaningful recourse: Virginia’s consumer protection mechanisms for contracting disputes are built around the licensing system. When an unlicensed installer’s work fails, damages your property, or is simply abandoned, your practical options are dramatically weaker.
• Substandard and non-compliant work: DCJS training standards and DPOR trade competency requirements exist because this work has real technical standards. Unlicensed installers, by definition, have bypassed the system that verifies they know them.
• Compliance exposure for businesses: Commercial properties in regulated industries — healthcare, financial services, government contracting — can create audit and compliance problems for themselves by using unlicensed security vendors. If your business handles protected data or operates under a security framework, your vendors’ credentials are part of your compliance posture.
• Systems that don’t do their job: The quietest risk of all. A poorly designed camera layout, a mis-programmed alarm panel, or an access control system with default credentials looks fine on day one — and fails you on the day it matters.

8. How to Verify Both Licenses in Under Five Minutes

Both of Virginia’s licensing agencies provide free, public, online license verification. Before any security contractor sets foot on your property, spend five minutes checking both credentials:

Step 1: Verify the DPOR Contractor License

• Go to the DPOR License Lookup at dpor.virginia.gov
• Search by the business name or license number
• Confirm the license is active, note the class (A, B, or C), and check that the specialty designations cover electronic/communication work

Step 2: Verify the DCJS Electronic Security Business License

• Go to the Virginia DCJS website at dcjs.virginia.gov and use the private security license lookup
• Search by business name or license number
• Confirm the Electronic Security Business license is current

Step 3: Ask About Technician Registration

• Ask the contractor directly whether the technicians assigned to your project hold current individual DCJS registrations
• A compliant contractor will confirm without hesitation

As a benchmark for what transparency should look like: Mercury Communications publishes both license numbers — VA Class A #2705165655 and DCJS #11-30083 — on our website, our proposals, and our service pages. You can verify both through the state lookups above right now, before ever contacting us. That is the standard every security contractor should meet.

9. Red Flags That Suggest a Contractor Is Cutting Corners

Beyond formal verification, certain behaviors reliably signal a contractor operating outside — or at the edges of — Virginia’s licensing framework:

• They can’t or won’t provide license numbers: A licensed contractor knows both numbers cold and provides them instantly. Hesitation, deflection, or “I’ll get back to you” is disqualifying.
• They claim their electrical or general contractor license “covers” security work: It does not. No DPOR license substitutes for DCJS credentials on security systems. A contractor who says otherwise either doesn’t know the law governing their own trade or is hoping you don’t.
• They describe DCJS as “only for alarm monitoring companies”: A common misdirection. The DCJS Electronic Security Business license covers installation and service, not just monitoring.
• Cash-only pricing or no written contract: Licensed contractors operate under Virginia’s contracting regulations, which include written contract requirements. Informality in the paperwork usually means informality in the licensing.
• The “IT guy who also does cameras”: IT service providers frequently add camera installation as a side offering without realizing (or without caring) that it triggers DCJS requirements. Their networking competence doesn’t change the legal requirement.
• Pressure to skip permits or bypass inspection: Any contractor who frames the regulatory system as an obstacle to route around is telling you exactly how they operate.

10. Mixed Projects: When Data Cabling and Security Work Overlap

Modern commercial projects rarely fit neatly into one category. A typical office buildout, warehouse fit-out, or facility upgrade might include structured data cabling, WiFi infrastructure, security cameras, and access control in a single scope of work. This is where the two-license framework has its most practical consequences.

Consider a common scenario: a Virginia business is building out a new office and wants Cat6A cabling to every workstation, WiFi access points throughout, IP security cameras at entrances and common areas, and card-reader access control on exterior doors and the server room. Legally, this single project spans both regulatory categories:

• The cabling and WiFi work requires the DPOR contractor license with the electronic/communication specialty
• The cameras and access control require both the DPOR license and the DCJS license, with DCJS-registered technicians performing that portion

A contractor holding only the DPOR license faces a choice on that project: subcontract the security portion to a DCJS-licensed firm (adding cost, coordination overhead, and a second company in your building), decline that portion of the scope — or, as too often happens, simply do it anyway and hope nobody asks.

A dual-licensed contractor performs the entire scope under one roof, one contract, one point of accountability, and one set of verified credentials. This is precisely why Mercury maintains both licenses as a foundation of our low voltage and structured cabling services — the majority of the commercial work we’re asked to do combines connectivity infrastructure with security systems, and our clients get a single licensed contractor for all of it. The same dual-licensed capability extends to our work on government and federal projects, where credential verification isn’t optional — it’s a condition of award.

11. Mercury Communications: Dual-Licensed by Design

Mercury Communications built its licensing posture around the full scope of the work our clients actually need — not the minimum required to open the doors. Here is what that means in practice:

• Virginia Class A Contractor License #2705165655: The highest contractor class Virginia issues, with no project value cap, held with the Electronic/Communication Service specialty. Verifiable at dpor.virginia.gov.
• DCJS Electronic Security Business License #11-30083: Full authorization for electronic security installation and service under Virginia’s private security services framework. Verifiable at dcjs.virginia.gov.
• Individually registered technicians: Every Mercury technician performing security work holds a current personal DCJS registration — fingerprint background check and mandatory training included. This is a condition of doing security work at Mercury, not an aspiration.
• Both numbers published, everywhere: On our website, in our proposals, on our service pages. We want you to verify us before you call — because a market where customers check credentials is a market that favors contractors who hold them.
• Full-scope capability: Structured cabling, fiber, WiFi infrastructure, security cameras, access control, and intrusion systems — one contractor, one contract, both licenses, for commercial, residential, and government clients across Virginia.

The two-license requirement exists because Virginia takes seriously what a security installer is actually entrusted with. So do we. When you hire a security contractor, you’re not just buying equipment and labor — you’re deciding who gets to know exactly how your property is protected. Make that decision with both licenses verified.