Surveillance systems: the governance problem when installers disappear
Surveillance camera systems often outlive the companies that install them. In an interview with Help Net Security, Rob Janssens, Cyber Security Director EMEA of Hikvision Europe, discussed what happens when the integrator disappears, documentation is lost, and no one has administrative credentials anymore. Janssens emphasizes the importance of products allowing customers to regain control autonomously and how default security settings can limit damage caused by predictable installation errors.
The situation where an installer disappears and the customer can no longer manage their cameras is more common than the industry likes to admit. A camera can have a ten-year operational life, while the company that installed it might no longer exist after just five years. People change jobs, contracts change, and documentation is lost.
The need for autonomous system management
From a manufacturer's perspective, this reality must be accepted. The customer is the owner of the system and should not depend on a specific installer to maintain control. For this reason, devices must have a secure activation process, adequate account controls, a controlled way to recover or reset access, firmware maintenance, and sufficient audit information to allow the customer to understand what has happened to the device.
Hikvision requires the mandatory creation of a password during activation, monitoring of failed access attempts, IP address filtering, and controlled access via SSH. These controls are useful, but they only work if the device remains under the customer's control and is properly maintained.
The importance of improved asset management
Another change that Janssens expects to see is better asset management. Security teams are becoming much better at discovering devices, checking configurations, and identifying systems that have fallen out of the normal management cycle. Artificial intelligence will help in this process, but it should not be considered the solution to a basic governance problem. The main requirement remains ownership, governance, and a documented recovery process.
Designing for a non-ideal installation channel
A significant portion of physical security equipment is specified by purchasing teams that choose based on price, installed by electricians, and never touched again. You cannot build a security strategy based on the assumption that every installer will read a long security manual and remember it five years later.
The product must therefore do more work. For example, requiring a new password when a device is activated is much better than shipping equipment with a universal default password. Unnecessary services should not simply be exposed because they are available. Remote administration should be controlled, and the device should make the secure choice the easiest.
The difference between secure-by-design and secure-by-default
The difference between secure-by-design and secure-by-default is crucial. Secure-by-design means that security is considered during development, testing, and maintenance. Secure-by-default means that the customer does not have to become a security expert just to achieve an initially reasonably secure configuration.
Hikvision's Security Development Lifecycle covers the product from specifications and design through development, verification, release, and maintenance. This is the right approach for the industry. Security cannot be something that is added at the end of the installation project.
Product responsibility and customer risk decisions
Of course, no manufacturer can compensate for every bad network design. If someone puts a camera directly on the public Internet, disables controls, and never patches it, there is still a risk. However, we can make the product much more resilient to predictable errors.
If an integrator consciously disables security features because a customer wants remote access to work in five minutes instead of five hours, Janssens warns: "This is a recipe for disaster. Security should not be an afterthought". For customers, this means adopting a proactive approach to camera management, while for manufacturers, it means offering not only secure products but also continuous support and clear documentation. Only in this way can the evolution of threats be addressed and the operational continuity of installations guaranteed.
The impact of sanctions and corporate transparency
US sanctions against Hikvision have created significant challenges, especially for European customers operating critical infrastructures. Janssens emphasizes that transparency is key: "We don't ask customers to trust us just because we say so. We need to provide concrete evidence". This includes sharing details about the firmware development cycle, verification processes, and security measures implemented. Hikvision has invested in certifications like ISO/IEC 27001 for vulnerability management and has published detailed product security guides. However, Janssens acknowledges that trust is not built solely with documentation: "A customer must be able to see for themselves what happens behind the scenes".The importance of binary analysis and code escrow
Binary analysis is a valuable tool for customers who want to verify what actually runs on a device. Janssens explains: "It's not enough to rely on documentation. Sometimes, an independent analysis can reveal details that our internal teams might have overlooked". Regarding code escrow, Janssens is cautious: "Having access to the code does not automatically guarantee that a product is secure. It's just part of a broader ecosystem that includes robust development processes, continuous testing, and vulnerability management".Origin restrictions: a complex debate
Geopolitical concerns have led some customers to impose restrictions based on the country of origin. Janssens acknowledges the legitimacy of these concerns but warns against an overly simplistic approach: "Nationality should not replace an objective technical assessment of security". Instead, he suggests focusing on concrete technical controls: "What evidence can suppliers provide? What development processes do they follow? What certifications have they obtained? These are the factors that should guide decisions, not just the flag under which a company operates".The evolution of threats and the importance of governance
With the increase in automated scanning, old security practices are no longer sufficient. Janssens warns: "Configurations that once went unnoticed can be identified in a few minutes. This makes the 'we've always done it this way' approach obsolete". Governance is key. Janssens emphasizes that artificial intelligence can help in device identification, but it does not solve fundamental problems like lack of documentation or clear recovery processes. "AI is a tool, not a complete solution. The foundation must be accurate management of camera assets".Security as a continuous process
Janssens concludes by reiterating that security is not a static goal but a dynamic process that requires collaboration between suppliers and customers. "We need to work together to create a safer ecosystem. This means transparency, concrete evidence, and a shared understanding of risks". For customers, this implies adopting a proactive approach to camera management, while for suppliers, it means offering not only secure products but also continuous support and clear documentation. Only in this way can the evolution of threats be addressed and the operational continuity of installations guaranteed.Editorial Note and Disclaimer
The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.
GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not engage in real-time information activities.
The GoYou project does not provide professional, technical, legal, or financial advice and disclaims all liability for the improper use of the information published.
In the Crypto sector, every investment involves risks: readers are invited to always inform themselves independently before making any decision.