It is easy to think of CCTV as a safety system rather than an IT one. But every IP camera is a networked computer with a processor, software and a connection, and attackers know that poorly secured cameras are often the softest target in a building.
Two risks, not one
First, the footage itself is sensitive and must be protected from theft or tampering. Second, a compromised camera can be used as a foothold to reach the rest of the network. Both risks come from the same weaknesses.
The weaknesses attackers exploit
- Default or weak passwords left unchanged
- Firmware that is never updated
- Cameras on the same flat network as business systems
- Unnecessary ports and services left open
- Footage stored or transmitted without encryption
How to lock it down
- Unique strong credentials on every device
- A firmware update schedule and end-of-life planning
- A segmented network for security systems
- Encryption of footage in transit and at rest
- Logging and monitoring of camera and recorder access
Choose equipment carefully
Buy from manufacturers with a track record of security support, source through authorised channels so firmware is genuine, and design the camera network with the same rigour as any critical IT system.
Related: Security & Surveillance
See the full scope of what we deliver.