How To

Video Surveillance and Data Monitoring: The Basics

Page 3

A big cost consideration is frame rate, which affects our tape requirements or storage and bandwidth requirements.

How many frames per second do you need for your surveillance project? It depends. Thirty frames per second, used by televisions in the U.S., is the gold standard, but it's often unnecessary, says Aaron Chesler, NiceVision's director of sales for the Eastern region. But video quality with 15 fps is usually good enough he says. With 15 fps, you also use only half as much bandwidth and disk space.

You can use various architectural tricks for helping reduce storage and bandwidth requirements. For example, you may find that in some instances you can store digital video locally (on a DVR near each camera) rather than streaming it all back over the network to a central location.

What about using fake cameras, deactivated cameras, or hidden cameras?

All of these strategies may have a place in your overall surveillance plan. Fake or deactivated cameras are an attempt get the deterrence value of surveillance without incurring the expense of video storage and maintenance. Hidden cameras, obviously, aim not to stop illicit behavior but to catch it on tape.

However, all of these strategies create risks of different sorts. Douglas Durden, manager of safety, security and asset retention at Mallory Alexander International Logistics, thinks fake cameras can impart a false sense of security. "Let's say someone is standing in front of what appears to be a camera. If a guy pulls a gun and takes a person's wallet, you should be able to pull it up on tape [but you can't]. Then you have to tell the person it was a fake camera," he says. Lawsuit, anyone?

Walter Palmer, founder and principal of PCGsolutions, a retail loss-prevention consultancy, also advises caution. "One of the things you have to be careful of is, do you have an obligation to provide certain levels of security? If you don't have cameras and something occurs or you have dummy cameras, could you be liable for negligent security?" he asks. The short answer is yes.

All things considered, attorney Jennifer Shaw of Jackson Lewis thinks there are limited circumstances in which fake cameras are appropriate, but generally they do more harm than good.

Here's an illustration of similar risks created through covert surveillance. In November 2004, nurses at Good Samaritan Hospital in Los Angeles were in a break room when, according to accounts, they spied a thin beam of light coming from a clock. They were shocked to discover a hidden camera with a tiny lens behind the number nine. The nurses immediately spread the word to their colleagues; eventually they discovered a total of 16 hidden cameras in the clocks of break rooms, a pharmacy and a fitness center, among other locations.

In addition to the fact that the nurses hadn't been informed about the cameras, they were also upset because some of them changed their clothes in the break rooms. They felt that their right to privacy had been violated. In a press release, a California Nurses Association spokesperson said, "This is a pervasive problem throughout the hospital that is a disgraceful violation of the legal privacy rights of the RNs and reflects a deplorable attitude of the hospital administration towards its caregivers."

Hospital officials defended their actions—they claimed the cameras were installed for security reasons, that it was standard practice in hospitals, that they had planned on informing the nurses and that the cameras hadn't been turned on. They also noted (see the first tip) that the nurses' employee handbook, which all must sign, states that surveillance might be used.

Ultimately, the messy situation might have been avoided if hospital execs had informed the nurses of their plans beforehand, explained that the cameras were for their safety and made them overt instead of covert. By neglecting to inform the nurses until the cameras had been discovered, the hospital aroused suspicion and ill will. The bottom line on hidden cameras is that there may be a place for them, but CSOs need to weigh the risks and use such strategies with due caution.

How do I determine the return on investment for surveillance equipment and efforts?

It is not possible to create a generic return case for video surveillance because, while its applications overlap, they are also varied. At the Pathmark Stores grocery chain, Pedro Ramos, director of loss prevention, looks at inventory shrink and insurance fraud (customers taking pratfalls), among other issues. Sheila Bramlitt, director of corporate security at First Horizon National, must focus on cash theft and safety (armed robberies). At Genzyme, a manufacturing and R&D venture, CSO Dave Kent monitors assembly lines and corporate espionage.

Having said that, here are five ROI rules of thumb that apply to these sources and others.. Some of these rules pertain to all surveillance, while others are specifically about the differences between CCTV systems and IP-based digital ones.

*The more things a video surveillance system does, the higher the ROI. What software applications, or even business activities, exist to extend the usefulness of the surveillance infrastructure? Training? Marketing? Find those that are realistic and attach a value to them.

*Digital video surveillance scales well. The larger your planned installation, the more remote sites you plan to monitor from a central control room, the more efficiency you can create and the faster your return will come.

*Cost calculations favor digital video over closed systems. "The economics of storage favor standard IT infrastructure," over closed systems such as DVRs, says Bob Degen, senior vice president of corporate security of First Data. "The equipment functions better with less repair. It's easier to expand on. We're in the process of building a command center. We'll put all alarms, images, sound and voice over the Web to that centralized site. That will create huge advantages."

*Integration with other systems will cost more up front but will also facilitate positive ROI. Linking video surveillance to access and safety, especially, could possibly allow you to lower insurance premiums, but also to facilitate response times to crises large and small.

*Cross-threading applications and systems allows you to share the cost burden with other departments. "We partner with safety and business continuity of course, but also, say, our real estate group," says Bramlitt. "If we can partner with them when they're building a new site, we can share the costs and benefits." It makes upgrades an easier sell, she says.

Here are two examples of companies doing detailed ROI analysis regarding system upgrades.

Pathmark's Ramos hesitates to endorse the IP-based digital video hype. His system is, in fact, a hybrid (similar to those of Bramlitt and Genzyme's Kent). Pathmark combines digital and analog, and even uses some tape storage. It's on the cusp of a phase 3 system, but not quite there. Why? "The cost to convert over fully isn't quite where we need it" [as of early 2005], Ramos says. He's not just guessing either. Ramos demanded and is getting an average of about 13.5 percent ROI from his video surveillance upgrade. And, under the right conditions, some of his stores will recoup costs in less than two years, some stores in less than one. "We need a six-month time frame for video storage, and I can't cost-justify a fully digital system with that requirement yet," Ramos says. (Ramos declined to share specific surveillance investment figures.)

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WEBCAST
The Surest Path to Effective and Efficient Compliance

VeriSignIn this webcast, we explore why and how — with best practices, practical tips and solutions that work — to ease your compliance challenge.

» View the webcast

Featured Sponsors
Sponsored Links

Ponemon Study: How Much Does a Data Breach "Cost"?

Data Protection: Challenges for the Traveling User

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

Think your data is safe? Think again. It's time to Outthink the Threat. Get eBook now

Prepare for (ISC)2® Certification With Villanova - Online

Key strategies for C-level executives and security staff

Configuration Assessment: Choosing the Right Solution

ITCi White Paper: Challenges and Opportunities of PCI

Effective Security with a Continuous Approach to ISO 27001 Compliance

Rolling the dice with your security? Take the Self-Assessment Test now

Digital Identity Protection and Data Security Get Personal

Solving Online Credit Fraud Using Device Reputation

Take our CSO role survey and receive a copy of the results

IDC Defines an Identity and Access Management Submarket

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

Revolutionizing Endpoint Security with a Single Agent

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

The Case for Business Software Assurance ~ Securing Your Applications

Learn how the new Quad-Core AMD Opteron™ processor improves performance

Envision Identity-Based Access Control for the Datacenter

IT Service Management: Metrics That Matter

Configuration Audit and Control for Virtualized Environments

The PCI Data Security Standard

Configuration Audit and Control for Virtualized Environments

Envision Identity-Based Access Control for the Datacenter

Using Likewise to Comply with PCI Data Security Standard

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Diebold: Frost & Sullivan Global Physical Security Systems Integrator of the Year

Welcome to the age of Service-Oriented Security (SOS)

Enabling Compliance with Converged Mainframe Security and Storage