PE-6(3)—Video Surveillance
>Control Description
a
Employ video surveillance of ⚙organization-defined operational areas;
b
Review video recordings ⚙organization-defined frequency; and
c
Retain video recordings for ⚙organization-defined time period.
>Supplemental Guidance
Video surveillance focuses on recording activity in specified areas for the purposes of subsequent review, if circumstances so warrant. Video recordings are typically reviewed to detect anomalous events or incidents. Monitoring the surveillance video is not required, although organizations may choose to do so.
There may be legal considerations when performing and retaining video surveillance, especially if such surveillance is in a public location.
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What policies and procedures govern the implementation of video surveillance for the organization's facilities?
- •Who is responsible for overseeing and maintaining video surveillance controls?
- •How frequently are video surveillance controls reviewed and updated?
- •What process exists for granting exceptions to video surveillance requirements?
- •How does the organization ensure accountability for video surveillance across all facility locations?
Technical Implementation:
- •What technologies or systems technically implement video surveillance?
- •How are these systems configured to meet the control requirements?
- •What monitoring or alerting capabilities exist for video surveillance?
- •How do video surveillance systems integrate with other physical security infrastructure?
- •What redundancy or backup mechanisms support video surveillance?
Evidence & Documentation:
- •Provide documented policies and procedures for video surveillance.
- •Provide evidence of video surveillance implementation and configuration.
- •Provide logs, records, or reports demonstrating video surveillance activities over the past 90 days.
- •Provide testing, maintenance, or inspection records for video surveillance from the past year.
- •Provide evidence of video surveillance reviews, audits, or assessments.
Ask AI
Configure your API key to use AI features.