Surveillance Camera Commissioner
Secure by design, secure by default: self-certification scheme launched
New requirements for manufacturers of surveillance camera systems and components.
Today on the world’s first Surveillance Camera Day Tony Porter, the Surveillance Camera Commissioner, is launching another global first: secure by default/secure by design minimum requirements for manufacturers of surveillance camera systems and components.
Several high profile and well publicised compromises of systems demonstrated that they were being left live and internet-facing in an unacceptable security configuration. Some of these compromises, like Mirai botnet, that brought down social media and financial websites across the globe, also showed the root cause was down to poor design and manufacturing.
Driven by the need to ensure the UK’s resilience against this and other forms of cyber security vulnerability, as well as to provide the best possible assurance stakeholders, the new minimum requirements are an important step forward for manufacturers, installers and users alike.
The work has been led by Mike Gillespie, cyber security advisor to the Commissioner (Advent IM) and Buzz Coates (Norbain) and developed in consultation with manufacturers (Axis, Bosch, Hanwha, Hikvision and Milestone Systems). It’s been designed by manufacturers for manufacturers.
Mike Gillespie said,
If a device comes out of the box in a secure configuration, there’s a good chance it will be installed in a secure configuration. Encouraging manufacturers to ensure they ship their devices in this secure state is the key objective of these minimum requirements for manufacturers. Manufacturers benefit by being able to demonstrate they take cyber seriously and their equipment is designed and built to be resilient. Installers and integrators benefit from the introduction of the requirements by not having to know how to turn dangerous ports or protocols off during the installation. End users benefit because they know they are buying equipment that has demonstrated it has been designed to be resilient to cyber-attack and data theft.
Manufacturers can demonstrate they meet the minimum requirements by completing a self-certification form and submitting it to the Commissioner’s office for validation. If successful they will be able to list the component or system as certified by the Commissioner and will be able to display his certification mark.
Tony Porter said:
It has been an enlightening and positive experience working with manufacturers toward a common goal and it’s a genuine first and further standards will follow over the next couple of years.
Latest News from
Surveillance Camera Commissioner
Tin Lid Protection Ltd achieve third party certification24/05/2021 12:05:00
Tin Lid Protection (TLP) Ltd, drone security specialists, have achieved the Commissioner’s third party certification mark for their UAVs surveillance cameras.
Surveillance Camera Commissioner releases guidance for police on use of Live Facial Recognition03/12/2020 13:05:00
The guidance is for forces to follow when considering the deployment of Live Facial Recognition (LFR) surveillance camera technology.
Surveillance Camera Commissioner's statement: Court of Appeal judgment (R) Bridges v South Wales Police – Automated Facial Recognition12/08/2020 13:05:00
Surveillance Camera Commissioner response to court of appeal judgment on South Wales Police's use of automated facial recognition technology (11 August 2020).
Thanet District Council receive certification mark for CCTV, ANPR and body worn video17/04/2020 10:05:00
Thanet District Council are one of the first local authorities to get certification for CCTV, body worn video (BWV) and automatic number plate recognition (ANPR) surveillance cameras.
Updated data protection impact assessment template and guidance launched18/03/2020 16:48:00
The SCC and ICO have updated the data protection impact assessment for surveillance cameras.
YMCA Bournemouth’s Chatterbox Project visit Bournemouth, Christchurch and Poole Council CCTV control room24/02/2020 11:47:00
As part of the National Surveillance Camera Day 2019, Bournemouth, Christchurch and Poole Community Safety Team invited the Chatterbox group to the CCTV control room based at Bournemouth Police Station.
Cyber secure: the benefits of secure by default08/10/2019 11:33:00
This case study looks at the benefits of the Surveillance Camera Commissioner's secure by default self-certification.
Surveillance Camera Commissioner’s annual report, 2017 to 2018 published22/01/2019 15:05:00
Today (22 January) the Surveillance Camera Commissioner’s fifth annual report was laid before Parliament.