A controller and method are provided. The controller includes processing circuitry configured to activate premises security monitoring of a premises if the controller is armed. The processing circuitry includes a memory and a processor. The memory contains instructions that, when executed by the processor, configure the processor to determine that data to disarm the controller has been received, disarm the controller based on the received data, and in response to disarming the controller, track timekeeping payroll records of a plurality of predefined users associated with the premises. The disarming of the controller deactivates premises security monitoring by the controller. The timekeeping payroll records includes at least one of clock-in data and clock-out data.