Commercial CCTV has evolved considerably beyond recording video that somebody may need to review after an incident. Modern systems can provide live monitoring, remote access, automated alerts, video analytics and integration with access control and other security technologies. Increasingly, they can help security teams identify potentially significant events while they are happening rather than simply provide evidence afterwards. But additional capability does not automatically create better security.
A site with dozens of high-resolution cameras can still have blind spots. A control room can receive more alerts than operators can realistically investigate. Valuable footage can be difficult to retrieve. And sophisticated analytics can create privacy, governance and cybersecurity considerations of their own.
That makes the starting question for a CCTV project surprisingly simple:
What do we need the video to help us do?
The answer should determine everything that follows, from camera placement and image quality to monitoring, storage, analytics and integration.
Start with the Security Outcome
A CCTV system can potentially perform several different jobs.
It might deter unwanted behaviour, allow operators to monitor a location, alert security teams to developing incidents, provide evidence after an event or help organisations understand activity across a site.
Those outcomes require different capabilities.
A camera positioned to provide general situational awareness across a car park, for example, may not provide the image quality required to identify somebody at a particular entrance. A system intended primarily for post-incident investigation may be configured differently from one supporting real-time intervention.
Government guidance on surveillance camera systems emphasises the importance of having a defined purpose and legitimate aim before deploying surveillance.
That is a useful procurement principle even beyond organisations specifically covered by the Surveillance Camera Code of Practice.
Don’t start by asking how many cameras the site needs.
Start by asking what security problems those cameras need to solve.
Design Coverage Around Risk
Camera quantity is a poor measure of CCTV effectiveness.
The more important question is whether the right areas can be observed at the level of detail required.
A risk assessment might identify entrances and exits, loading areas, perimeters, car parks, high-value assets, reception areas or other locations requiring particular attention.
From there, the design can consider viewing angles, lighting conditions, obstructions, camera height and the level of detail required at each location.
Different camera technologies may suit different environments. Fixed cameras can provide consistent coverage of known areas, while pan-tilt-zoom technology can allow operators to investigate activity dynamically. Thermal or specialist imaging may have a role in particular perimeter and low-light applications.
A professional site survey should translate security risks into an appropriate surveillance design rather than simply adding cameras until the site appears covered.
Match Image Quality to the Job
Higher resolution can provide more detail, but resolution should not be considered in isolation.
Security teams need to understand what operators will actually need to see.
Is the requirement to detect that somebody has entered an area? Observe what they are doing? Recognise a known individual? Obtain useful evidential detail?
Lighting, lens selection, distance, field of view, movement and camera position can all affect whether footage is genuinely useful.
The ICO also highlights the importance of being able to obtain copies of footage in a suitable format without losing image quality or important time and date information.
The practical test should therefore be whether the system can produce usable images for its intended purpose rather than whether a camera carries the highest specification on the datasheet.
Decide Who Is Watching
One of the most important CCTV decisions has nothing to do with the camera.
It is what happens to the video.
Some organisations may have a permanently staffed security control room. Others may rely primarily on recorded footage, use remote monitoring or operate a combination of approaches.
Cloud-managed systems have also made it easier for authorised users to access video remotely across multiple locations.
OpenEye, for example, combines video recording with cloud-managed video services designed to provide centralised remote access and management across sites.
Motorola Solutions’ video-security portfolio, including Avigilon technology, combines cameras, video management and analytics for organisations requiring integrated video-security capabilities.
For buyers, the operating model needs to be established before the technology is selected.
If nobody is continuously watching the cameras, for example, the ability to generate meaningful event-based alerts may be more valuable than adding more live video feeds.
Consider What Operators Can Realistically Monitor
More video creates an attention problem.
A security operator cannot continuously scrutinise dozens or hundreds of feeds with equal effectiveness.
This is where analytics can change the role of CCTV.
Rather than asking somebody to watch everything, the system can potentially identify defined events and direct human attention towards them.
Depending on the technology and application, analytics may help identify movement in restricted areas, people or vehicles crossing virtual boundaries, unusual activity or other predetermined events.
Johnson Controls provides video surveillance and analytics within its wider building-security portfolio, while Motorola Solutions offers AI-enabled video security through its Avigilon technologies.
The important distinction is that analytics should support security decision-making rather than simply generate more notifications.
An alert only creates value if somebody understands what it means and knows what to do next.
Treat False Alerts as an Operational Issue
A video analytics system that repeatedly generates irrelevant alerts can quickly lose the confidence of operators.
Wind-blown vegetation, weather, animals, changing light or normal site activity can potentially create unwanted notifications if rules and detection areas are poorly configured.
Security teams should therefore ask suppliers how analytics are configured, tested and refined for the specific environment.
Alert thresholds may need adjustment after deployment as the organisation learns what normal activity looks like.
The goal is not the maximum possible number of detections.
It is a manageable number of useful alerts.
That distinction becomes increasingly important as CCTV moves from passive recording towards proactive security monitoring.
Connect CCTV with the Wider Security Environment
Video becomes more useful when it can provide context around information from other systems.
An access-control event, for example, can potentially be linked to relevant video. A perimeter alarm might automatically direct an operator towards cameras covering that location.
Integrated systems can reduce the need for security teams to move between disconnected applications while trying to understand an incident.
Johnson Controls operates across video surveillance, access control and wider building technologies, while Grantfen Fire and Security provides CCTV alongside access control, intruder alarms and other electronic security systems.
North similarly delivers connected technology and security solutions across complex estates.
For buyers, integration should be explored at workflow level.
Don’t simply ask: Can these systems integrate?
Ask: What will the integration allow our security team to do differently?
Think About Multiple Sites
CCTV management becomes significantly more complicated when an organisation operates a distributed estate.
Retailers, logistics operators, education providers, healthcare organisations and other multi-site businesses may have different generations of cameras and recorders across dozens or hundreds of locations.
A centralised or cloud-managed approach can potentially make it easier to monitor system health, manage users and retrieve footage across those sites.
OpenEye’s cloud-managed video platform is designed around this type of centralised management, while larger integrated providers such as Johnson Controls and Motorola Solutions can support video-security deployments across complex estates.
Security teams should establish whether they need every site to use identical technology or whether the management platform needs to accommodate a more varied environment.
Standardisation can simplify support, but the operating requirement should drive the architecture.
Make Footage Easy to Retrieve
Recorded video has little evidential value if nobody can find it when it is needed.
Security teams should test how operators search for, retrieve and export footage.
A good workflow should allow authorised users to locate relevant video without spending excessive time manually reviewing recordings.
Analytics can potentially accelerate investigations by allowing users to search recorded footage according to particular events or characteristics.
The ICO specifically advises organisations to ensure footage can be retrieved efficiently when required for disclosure or further examination.
Before buying, ask somebody who will actually investigate incidents to perform a realistic search.
Technology that looks impressive in a demonstration may feel very different when an operator needs to find a 30-second event across several hours of video.
Plan Storage Around Purpose
Higher-resolution cameras and longer retention periods create greater storage requirements.
But keeping footage indefinitely “just in case” is not an appropriate storage strategy.
ICO guidance says UK GDPR and the Data Protection Act 2018 do not prescribe a universal minimum or maximum CCTV retention period. Instead, retention should be determined by the purpose for which the information is being processed.
That means organisations should establish why footage needs to be retained and for how long.
The technical design can then support that policy through appropriate storage capacity and automatic retention settings.
Buyers should also consider resilience. If video is important to security operations or investigation, what happens if a recorder, connection or storage service becomes unavailable?
Build Privacy into the Design
CCTV frequently involves processing personal data.
That makes privacy and governance part of system design rather than something to address after installation.
ICO guidance says surveillance should be lawful, necessary and proportionate and stresses transparency, accountability and the rights of individuals whose personal data is recorded.
Organisations need to consider issues such as signage, lawful basis, access to footage, retention and whether cameras capture more information than is necessary for their intended purpose.
More sophisticated technologies can raise additional questions.
Features such as facial recognition and other forms of automated analysis can involve significantly different privacy implications from conventional video recording.
The principle should remain consistent:
Use the surveillance capability necessary to achieve the defined security purpose – not every capability the technology makes possible.
Treat CCTV as a Connected IT System
Modern IP cameras, recorders and video-management platforms are connected technologies.
That creates cybersecurity considerations.
Passwords, user permissions, software updates, remote access, network architecture and product support lifecycles all matter.
Security Briefing’s previous IP Security Systems series explored this issue in detail, but the same principle applies specifically to CCTV: a device designed to improve physical security should not create an unnecessary route into the organisation’s network.
Buyers should establish how devices are authenticated, patched and managed; whether access can be restricted according to user roles; how remote connections are secured; and how long the manufacturer will provide software and security support.
Physical security and IT teams increasingly need to make those decisions together.
Plan Installation and Maintenance
CCTV performance can deteriorate after installation.
Cameras can move, lenses can become dirty, vegetation can obscure views and changes to a site can create new blind spots.
Security teams should therefore consider ongoing maintenance and system-health monitoring alongside installation.
2CL Communications provides CCTV and wider communications and security technology, while Grantfen Fire and Security and Imperium Security provide CCTV installation and associated security services.
The maintenance model should reflect the importance of the system.
For critical cameras, discovering that recording failed only after an incident is too late.
Organisations should know how faults are identified, reported and resolved and who is responsible for periodically confirming that the system still meets its original purpose.
Questions to Ask CCTV Providers
Security teams should consider asking:
- What security outcomes should each camera support?
- How will the proposed coverage be validated?
- What image quality will be available at the distances that matter?
- How does the system perform in changing or low-light conditions?
- Which video analytics are available?
- How are false or irrelevant alerts reduced?
- Can CCTV integrate with access control, alarms and other security systems?
- How will operators monitor multiple cameras effectively?
- Can multiple sites be managed centrally?
- How quickly can users search for and retrieve recorded footage?
- Where is video stored and how is retention managed?
- How are user permissions and access to footage controlled?
- How are cameras and other connected components secured and updated?
- What happens if network connectivity or recording equipment fails?
- How are system faults detected?
- What maintenance and support are provided?
- How will the system accommodate future cameras or analytics?
- What privacy and data-protection requirements need to be addressed?
Frequently Asked Questions
What should businesses consider when buying CCTV?
Start with the security purpose and risks the system needs to address. Camera coverage, image quality, monitoring, storage, analytics, integration, cybersecurity, privacy, maintenance and total lifecycle cost can then be evaluated against those requirements.
What are CCTV video analytics?
Video analytics use software to analyse video and identify defined events or patterns. They can potentially help security teams focus attention on relevant activity rather than relying solely on continuous manual monitoring.
How long should CCTV footage be retained?
There is no single UK GDPR retention period that applies to every CCTV system. ICO guidance says organisations should determine retention according to the purpose for which the footage is processed and should not retain information for longer than necessary.
Can CCTV integrate with access control?
Yes. Integrated security systems can potentially associate access-control or alarm events with relevant video, helping operators investigate activity and respond more efficiently.
Does CCTV need to comply with UK data-protection law?
Where CCTV processes information relating to identifiable individuals, relevant requirements under UK GDPR and the Data Protection Act 2018 apply. Organisations should consider lawfulness, transparency, proportionality, security, retention and access to footage.
Product Guide
2CL Communications Ltd
Technology provider delivering communications and security solutions, including CCTV and video-surveillance systems. Its capabilities support organisations requiring integrated technology across commercial and operational environments.
Website: https://www.2cl.co.uk/
Grantfen Fire and Security Ltd
Fire and security specialist providing CCTV alongside technologies including access control, intruder detection and associated electronic security systems. Its services cover the design, installation and ongoing support of security solutions.
Website: https://www.grantfen.com/
Imperium Security Ltd
Security provider offering CCTV and wider security solutions for commercial organisations, supporting the deployment and ongoing operation of video-surveillance technology.
Website: https://imperiumsecurity.co.uk/
Johnson Controls
Global building-technology company providing video surveillance, analytics, access control and wider security systems as part of its connected-building portfolio. Its capabilities can support organisations seeking to integrate video with broader building and security infrastructure.
Website: https://www.johnsoncontrols.com/
Motorola Solutions UK Ltd
Provider of video-security technology through a portfolio that includes Avigilon cameras, video-management software and AI-enabled video analytics, alongside Motorola Solutions’ wider critical communications and security technologies.
Website: https://www.motorolasolutions.com/
North
Technology and managed-services provider delivering connected solutions across complex estates, including security and network infrastructure. Its capabilities support organisations seeking to bring physical security technologies into wider connected environments.
Website: https://north.tech/
OpenEye
Cloud-managed video-security provider combining recording hardware, video-management software and cloud services. Its platform supports centralised video access, management and investigation across single and multi-site organisations.
Website: https://www.openeye.net/
From Cameras to Security Outcomes
A useful CCTV buying process can be reduced to five stages: risk → coverage → detection → response → evidence
Risk determines what the organisation needs to protect against.
Coverage determines what the system needs to see.
Detection determines how potentially significant activity is identified.
Response determines what happens while an incident is developing.
Evidence determines how effectively the organisation can understand what happened afterwards.
That is why the number or specification of cameras is not the best measure of CCTV capability.
The real measure is whether the system gives security teams the information they need, when they need it, in a form they can act upon.
The Total Security Summit brings together senior security decision-makers and relevant solution providers through pre-arranged one-to-one meetings, providing an opportunity to explore CCTV, video analytics, access control, integrated security and other technologies shaping modern physical security.
Related Reading
This is the first article in our October CCTV series.
The follow-up will move from selecting and designing the system to getting greater operational value from it: how security teams can use video analytics and AI to identify relevant events, reduce operator workload and support faster intervention without creating an unmanageable volume of alerts.
Sources
- ICO – CCTV and Video Surveillance – https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/cctv-and-video-surveillance/
- ICO – Video Surveillance Guidance – https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/cctv-and-video-surveillance/guidance-on-video-surveillance-including-cctv/
- GOV.UK – Surveillance Camera Code of Practice – https://www.gov.uk/government/publications/update-to-surveillance-camera-code
- GOV.UK – Surveillance Camera Code of Practice: Self-Assessment Tool – https://www.gov.uk/government/publications/surveillance-camera-code-of-practice-self-assessment-tool
- 2CL Communications – https://www.2cl.co.uk/
- Grantfen Fire and Security – https://www.grantfen.com/
- Imperium Security – https://imperiumsecurity.co.uk/
- Johnson Controls – https://www.johnsoncontrols.com/
- Motorola Solutions – https://www.motorolasolutions.com/
- North – https://north.tech/
- OpenEye – https://www.openeye.net/
Image credit: https://unsplash.com/photos/white-and-black-glass-walled-building-QtZDb5QJOFM
