Educause Security Discussion mailing list archives

Re: IP Security Cameras


From: Theresa M Rowe <rowe () OAKLAND EDU>
Date: Thu, 23 Mar 2006 11:27:49 -0500

A draft of our new policy is attached.  Not quite through the governance process.
Theresa

---- Original message ----
Date: Wed, 22 Mar 2006 17:50:33 -0500
From: "Gibbs, Aaron M." <AMGibbs () ST-AUG EDU>
Subject: Re: [SECURITY] IP Security Cameras
To: SECURITY () LISTSERV EDUCAUSE EDU

Steve
Thanks for the items to consider. I'm really interested in also knowing what types of policies institutions have put 
in place
regarding question #3.

Aaron M Gibbs
Executive Director
Center for Information Technology
Saint Augustine's College
919-516-4379 (Office)
919-516-4382 (Fax)
amgibbs () st-aug edu
www.st-aug.edu

"Always be a visionary!"



-----Original Message-----
From: Steve Brukbacher [mailto:sab2 () UWM EDU]
Sent: Wednesday, March 22, 2006 5:27 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] IP Security Cameras


We are running a small number of Axis cameras (mostly 213 ptz's) on the
Axis software on a dedicated server.  We are the tech support for campus
police on this. I wouldn't suggest the Axis software.  We're going to be
converting to Milestone instead. The Axis software seems to fight with
the camera, resulting in the occasional camera pointing at the ceiling
or config changes not sticking.  Milestone is supposed to be much better.

We're actually farming the conversion to Milestone out to a vendor that
is doing some other physical security work for us.

There was a lot more to think about here than we had initially thought.
From the point of deciding you want a camera, to having it functional
and everyone who should see it can is pretty complex.

Some stuff to consider:
1. Did everyone sign off on putting a camera in?  Cameras tend to freak
people out a bit.
2. Who is authorized to have access to the camera(s) images? Does the
product you are looking at allow for a reasonable way to provide
granular access controls?
3. Is there a policy about accessing stored or live images?  Can this be
used for administrative investigations or just law enforcement? What
about open record requests from the public?
4. There's a lot to picking the right cameras.  I did a lot of reading
on the Axis cameras sight, which does a pretty good job of explaining
the technology.  We chose the 213ptz as our first choice.
5. Storage. Go big on storage.  Really big.
6. We tend to shy away from any kind of hidden camera.  For most
situations, Id rather the camera be fairly obvious.

A great article on this appeared in CSO magazine:
http://www.csoonline.com/read/090105/secaucus_3828.html
It gave me a lot to think about.

--
Steve Brukbacher
University of Wisconsin Milwaukee
Information Security Coordinator
UWM Computer Security Web Site
www.security.uwm.edu
Phone: 414.229.2224



Gibbs, Aaron M. wrote:
I'm in the process of researching IP based security surveillance systems. Does anyone have any recommendations? 
Also, what has been your experience?

Aaron M Gibbs
Executive Director
Center for Information Technology
Saint Augustine's College
919-516-4379 (Office)
919-516-4382 (Fax)
amgibbs () st-aug edu
www.st-aug.edu

"Always be a visionary!"

--

This message has been scanned by the Securiant SpiderISA for spam and viruses, and is believed to be safe and clean.
Theresa Rowe
Assistant Vice President
University Technology Services
www.oakland.edu/uts - the latest news from University Technology Services

Attachment: CCTV Administrative Policy.doc
Description:


Current thread: