Approximately one hour. That is the time required to connect HyperQ AI Safety to an existing CCTV infrastructure — converting a passive recording system into a real-time monitoring installation that detects unsafe conditions, generates alerts before incidents occur, and produces the continuous monitoring records that Malaysia's CDM 2024 Regulations now explicitly require. For a Malaysian manufacturer subject to the Construction and Design Management Regulations 2024, the distinction between a CCTV system that records and a monitoring system that responds is no longer a technical preference. It is a compliance requirement with enforcement teeth.
Malaysia's regulatory landscape for workplace safety has shifted materially in the past 24 months. The OSHA 1994 Amendment brought tighter practicability standards for employer safety duties. Korea's Serious Accident Punishment Act, extended to businesses of 5-49 employees in January 2024, made personal criminal liability for safety failures a documented reality in APAC manufacturing. Now CDM 2024 introduces a "continuous monitoring with response capability" requirement that passive CCTV systems cannot satisfy — and that AI-enabled monitoring systems are specifically architected to meet.
This post covers what CDM 2024 requires, the compliance gap that most Malaysian manufacturers currently hold, how the regulatory wave moving across Southeast Asia is making 2024-2025 deployments a 2-3 year compliance lead rather than a late response, and the deployment pattern for converting existing CCTV to CDM 2024-compliant monitoring.
What CDM 2024 requires
Malaysia's CDM 2024 Regulations extend Construction, Design and Management principles to encompass factory and industrial facility safety planning. Originally developed for the construction sector, CDM frameworks are now applied because manufacturing facilities share the same hazard categories: multi-contractor work environments, heavy equipment, high-risk zone access, and physical hazards that require systematic risk control rather than reactive response.
The provision that creates the compliance gap for most manufacturers is the "continuous monitoring with response capability" standard under the CDM 2024 framework for Principal Designers and Principal Contractors responsible for ongoing facility operations. This standard has three components:
Continuous. Monitoring that operates across the full working period without gaps created by shift boundaries, supervisor availability, or surveillance coverage limitations. Scheduled safety rounds satisfy the duty to inspect; they do not satisfy the duty to monitor continuously. CCTV recording satisfies the duty to document; it does not satisfy the duty to detect.
Monitoring. Active detection of unsafe conditions, not passive recording of what occurred. A system that records video and alerts a supervisor when the supervisor reviews the footage has not monitored — it has documented. A system that analyses video in real time and generates an alert at the moment an unsafe condition is detected has monitored. The distinction is the latency between unsafe condition and supervisor notification.
Response capability. The monitoring system must have a defined response protocol that is activated by the monitoring output. An alert that routes to a supervisor who has no defined response procedure does not satisfy response capability. A detection event that triggers a supervisor notification with a documented response protocol satisfies response capability under CDM 2024 — the protocol requires the supervisor to acknowledge, take action, and log resolution.
This three-part standard is the specification that passive CCTV fails and that AI monitoring systems are designed to meet.
The core tension: "We have 40 CCTV cameras, isn't that monitoring?"
This is the most common question that Malaysian EHS managers and Safety and Health Officers raise when CDM 2024's continuous monitoring requirement is introduced. The facility has CCTV everywhere. The production floor is covered. The loading docks, the chemical storage area, the confined space access points — all visible. How does that not constitute monitoring?
It is a reasonable question, and the answer is structural rather than technical.
A CCTV system records what happens and stores the footage for review. The footage is available if an incident occurs, if a claim is made, or if a DOSH inspection requests evidence of conditions on a specific date. The CCTV system's value is retrospective: it provides evidence after an event.
A monitoring system detects what is happening and routes an alert before the event reaches incident status. The alert triggers an intervention — a supervisor redirects a worker out of a restricted zone, stops a piece of equipment, initiates an evacuation. The monitoring system's value is preventive: it produces interventions that prevent incidents from occurring.
The compliance question under CDM 2024 is not whether the facility has cameras. It is whether the cameras are connected to a detection and alert system that satisfies "continuous monitoring with response capability." A recording camera is not a monitoring system under this standard. An AI layer running on a recording camera that detects unsafe conditions and routes alerts in real time is.
The operational cost of the gap between CCTV and monitoring is not abstract. One EHS manager at a multi-site operation described the practical consequence: in a facility with 40 CCTV cameras and three rotating supervisors, the average time between an unsafe condition appearing on camera and a supervisor viewing and responding to that footage is measured in hours, not minutes. An incident occurring during that window is documented in retrospect. It is not prevented.
The hidden cost: penalty exposure plus the discovery gap
CDM 2024 enforcement follows the pattern established under OSHA 1994 — inspection, finding, improvement notice, prosecution for serious non-compliance or repeat findings. The penalty structure for CDM 2024 violations mirrors OSHA's framework: fines for first findings, escalating penalties for repeat violations or failures associated with serious injury, and personal liability exposure for responsible officers in cases involving fatalities or gross negligence.
Beyond the direct penalty exposure, there is a cost that appears less often in compliance discussions: the discovery gap.
In a facility where a near-miss or early-stage unsafe condition is not detected until after an incident occurs, the incident generates a retrospective review. The CCTV footage is retrieved. The timeline of events before the incident is reconstructed. In many cases, the footage shows that the unsafe condition existed for an extended period before the incident — a barrier was missing for two shifts, a worker was accessing a restricted zone repeatedly, a machine was operating with a guard displaced. The employer cannot argue that they were unaware of a condition that their own CCTV infrastructure recorded.
The discovery gap is the period between the unsafe condition and the employer's awareness of it. In a passive CCTV environment, that gap is the time between the unsafe condition first appearing on camera and a supervisor reviewing that segment of footage — which, without a monitoring alert to direct attention, may be never. A CDM 2024-compliant monitoring system closes this gap to the alert latency of the detection system: typically seconds to minutes.
For DOSH inspection purposes, a facility that can demonstrate that its monitoring system generated an alert on a specific unsafe condition, that the alert was received by a named supervisor, and that a response action was taken and logged is demonstrating CDM 2024 compliance in operational terms — not just in documentation terms.
How HyperQ AI Safety converts existing CCTV to CDM 2024-compliant monitoring
The deployment model for HyperQ AI Safety in a Malaysian manufacturing environment starts from the existing CCTV infrastructure. Most mid-size Malaysian manufacturers have CCTV coverage across production areas, warehouse zones, and access points — installed for security, retained as general facility documentation. The AI monitoring layer connects to this existing infrastructure without replacing it.
The deployment sequence follows this pattern:
Zone risk mapping. The facility's risk zones are mapped against the CDM 2024 monitoring requirement: which zones have high-consequence hazards (heavy machinery, chemical handling, confined space access, electrical equipment areas), which zones have regular contractor or visitor access, and which zones have physical barriers that require access control monitoring. This mapping determines where the monitoring layer needs to be most sensitive and where alert thresholds should be set tightly.
AI monitoring layer deployment. The HyperQ AI Safety software connects to the existing CCTV feed for each monitored zone. The AI layer analyses the video feed in real time — detecting zone access violations (personnel entering restricted areas without authorisation), PPE non-compliance (workers in mandatory-PPE zones without required protective equipment), behavioral indicators of fatigue or distress, and proximity alerts for restricted machine areas.
Deployment time for the AI configuration layer: approximately one hour per zone. Physical camera repositioning or addition for gaps identified in the risk mapping adds to this timeline; for facilities with adequate existing coverage, the software deployment is the primary time component.
Response protocol configuration. Alert routing is configured per zone and per detection type: which supervisor or safety officer receives alerts for each zone, the escalation protocol if the primary recipient does not acknowledge within a defined window, and the logging format for CDM 2024 compliance documentation. The response protocol is the element that satisfies the "response capability" component of CDM 2024's continuous monitoring standard.
Compliance documentation setup. The monitoring system generates automatic logs: every alert event, the detection type and zone, the timestamp, the supervisor notification, and the resolution status. These logs are formatted for DOSH inspection presentation and for the safety committee reporting structure required under OSHA 1994 Section 30. The compliance documentation is produced by the monitoring system as a function of its normal operation — it does not require a separate manual process.
Existing CCTV as a compliance asset: the deployment pattern
A manufacturer operating a large production facility in Korea provides the clearest operational template for what CDM 2024 compliance via existing-CCTV deployment looks like in practice. The deployment connected AI safety monitoring across an existing CCTV network with no camera replacement.
The facility had comprehensive CCTV coverage: production lines, warehouse zones, access corridors, loading docks. The CCTV was installed for security and general documentation. No active monitoring layer was connected. The decision to deploy AI monitoring was driven by the regulatory environment — Korea's Serious Accident Punishment Act, which preceded CDM 2024 and established the pattern of personal liability for safety failures that CDM 2024 follows in structure.
The deployment connected the AI monitoring layer to the existing CCTV infrastructure across the full facility footprint. The process, per zone: configure the detection parameters (zone boundaries, alert thresholds, response routing), validate the alert logic against test scenarios, and confirm the logging format. The facility's existing CCTV became a CDM-style compliant monitoring installation — not through hardware replacement but through software deployment on the existing infrastructure.
The deployment generated immediate operational evidence of the monitoring gap that had existed under passive CCTV: in the first week of operation, the AI layer detected and alerted on unsafe conditions across multiple zones that had been occurring without supervisor awareness. Barrier access violations, PPE non-compliance in a chemical handling area, proximity events at a forklift crossing — all visible on CCTV footage that was being recorded but not monitored. The detection rate change was not a function of new cameras. It was a function of the difference between recording and monitoring.
For Malaysian manufacturers, the same deployment architecture is available at the same camera pricing range: $650-$2,250 for safety-specification cameras where additional hardware is required, with existing CCTV retained and the AI layer deployed on the existing feed for zones where the current camera coverage is adequate.
The SEA regulatory wave: CDM 2024 as the second domino
CDM 2024 is not an isolated regulatory development. It is part of a regional regulatory pattern that started in Korea, is now active in Malaysia, and is moving toward Thailand and Vietnam.
Korea's Serious Accident Punishment Act (SAPA), extended to businesses of 5-49 employees in January 2024, established the baseline: criminal liability for employers whose safety failures result in serious injury or death, with a standard of continuous monitoring and documented response capability as the practical defense. Korean manufacturers who deployed AI safety monitoring ahead of SAPA's expansion have had 12-18 months of operational compliance evidence to present to inspectors. Manufacturers who responded after enforcement began did not.
Malaysia's CDM 2024 follows the same logic with a broader industrial scope. The "continuous monitoring with response capability" standard in CDM 2024 is structurally analogous to the SAPA compliance standard — both require that monitoring produce responses, not records. The enforcement timeline for CDM 2024 is consistent with DOSH's historical pattern: a 12-18 month familiarization period after regulation publication, followed by active inspection cycles that apply the new standard.
Thailand and Vietnam are tracking the same regulatory direction. Thai occupational safety legislation introduced in 2022 includes provisions for continuous monitoring in high-risk manufacturing categories; enforcement guidance published in 2023-2024 references real-time detection systems explicitly. Vietnam's revised labor safety framework, being finalized as of mid-2025, includes equivalent language. Manufacturers operating across APAC with facilities in multiple jurisdictions are deploying AI safety monitoring now, ahead of enforcement in markets where regulation is pending, to establish a consistent safety standard across their operations and avoid a compliance catch-up deployment when each jurisdiction's enforcement cycle begins.
The 2-3 year compliance lead that current CDM 2024 deployments represent is precisely this: by the time enforcement in Thailand and Vietnam reaches the inspection frequency that CDM 2024 Malaysia is approaching now, manufacturers who deployed in 2024-2025 will have two years of operational monitoring data to present, versus manufacturers deploying under enforcement pressure.
The Serious Accident Punishment Act analysis and the APAC-wide compliance context covers the Korea SAPA framework and the comparison with Malaysia's evolving standard. The APAC AI safety compliance checklist for Singapore, Malaysia, and Korea provides the jurisdiction-by-jurisdiction requirement summary for manufacturers with multi-country operations.
What a CDM 2024-compliant monitoring setup covers
A CDM 2024-compliant AI monitoring deployment for a mid-size Malaysian manufacturing facility covers the following detection categories by default, configurable by zone and risk classification:
Zone access and exclusion monitoring. Restricted zone boundary detection — personnel entering machinery operating areas, chemical storage zones, electrical equipment areas, or any zone designated as requiring access authorisation. Alert on entry, log the event, route to zone supervisor. PPE compliance monitoring in zones with mandatory PPE requirements.
Proximity and behavioral detection. Proximity alerts at high-risk equipment where personnel-equipment separation is a CDM control measure (forklifts, presses, moving machinery). Behavioral indicators of fatigue or distress in heat-exposed or physically demanding work zones, where early intervention prevents health emergencies.
Contractor and visitor tracking. CDM 2024's obligations extend to non-employees on-site during operations. Zone monitoring applies to all personnel regardless of employment status. For tracked contractor personnel, smartband deployment provides physiological monitoring at $35-250 per unit during on-site engagement periods.
Incident documentation. Every detection event is timestamped, zone-attributed, and linked to the response log: supervisor notification sent, acknowledgment received, action taken, resolution status. The documentation trail satisfies the DOSH inspection requirement for continuous monitoring evidence and the CDM 2024 requirement for response capability records.
The practical compliance test for CDM 2024
Before the next DOSH inspection, the question that determines your CDM 2024 compliance posture is this: if a worker enters a restricted zone in your facility right now, during this shift, what detects it and alerts a supervisor?
In a facility with passive CCTV and scheduled rounds, the honest answer is: nothing detects it until the next scheduled round or until a co-worker notices. The CCTV records the entry, but the recording is not a detection. CDM 2024's continuous monitoring standard requires a detection.
In a facility with HyperQ AI Safety running on existing CCTV, the answer is specific: the zone boundary detection generates an alert within seconds of the access event, routes the notification to the zone supervisor's dashboard, and logs the event with timestamp and camera reference. The supervisor receives an alert and acts. The event is documented automatically.
That answer demonstrates CDM 2024 compliance in operational terms. The monitoring is continuous (runs at camera frame rate, no shift boundaries), the monitoring detects (alert generated at the moment of the unsafe condition), and the monitoring has response capability (defined supervisor notification and documented response protocol).
If you are preparing for a CDM 2024 assessment, addressing a DOSH finding, or establishing a monitoring baseline for a new facility, we will assess your existing CCTV coverage, map it against the CDM 2024 zone monitoring requirements, and scope the AI deployment within 48 hours. Send your facility layout and CCTV coverage map and we will scope the deployment — approximately one hour per zone to go live, no additional hardware required where existing camera positions are adequate, no contract until the scope is confirmed against your compliance requirements. Start the conversation here.