Short answer: Review CCTV access whenever a staff member changes role or a maintenance provider leaves. Confirm who controls the system, give each authorised user only the permissions needed, withdraw obsolete access and check that recording, retrieval and any agreed monitoring still work.
A working camera picture does not tell you who can view it remotely. For a commercial property, the handover needs to cover accounts and responsibilities as well as equipment. Treat this as a planned change involving the property manager, CCTV maintainer and IT provider where relevant.
Start with ownership, not a shared password
Identify the organisation responsible for the CCTV system and the named person who can approve access. Establish who controls any cloud account, local recorder administration and account-recovery method. An installer’s login should not be the only route through which the customer can manage its system.
Ask the outgoing provider to explain the supported transfer process. Some products distinguish an owner account from invited users; others manage permissions locally. Do not assume that changing one app password transfers ownership or removes every other route into the system.
Keep the detailed account inventory and recovery information in an appropriately restricted record. Do not send passwords, recovery codes or screenshots of sensitive settings through a general enquiry form.
Separate viewing, exporting and administration
A receptionist who needs a live entrance view may not need to export recordings or change camera settings. A maintainer may need technical access without unrestricted routine viewing. Define the purpose of each role before deciding its permissions.
The NCSC’s access-control principles recommend limiting access to legitimate needs and treating management functions as privileged. Apply that principle using the roles the actual product supports; do not assume every recorder offers the same controls.
- Who needs live viewing, and for which business purpose?
- Who may search recordings and approve an export?
- Who may add users or change system settings?
- Which supplier access is needed for ongoing maintenance?
- Who reviews permissions when responsibilities change?
Protect access without creating a recovery problem
Use individual accounts where supported so actions can be associated with an authorised user. Avoid passing one administrator login between successive employees. Check the manufacturer’s supported authentication options with the maintainer.
For online accounts, the NCSC’s current account-security guidance recommends passkeys where available, or strong unique passwords and two-step verification where passwords remain in use. Not every CCTV platform supports these options. Record limitations and discuss a proportionate remedy rather than claiming a feature is enabled when it is not.
Make sure authorised recovery does not depend solely on a departing employee’s personal email address or phone. Transfer recovery arrangements through the provider’s legitimate process before removing the old user. Never disable authentication simply to make a handover easier.
Withdraw obsolete access as a controlled change
Agree the cutover with the incoming and outgoing providers. Ask the responsible maintainer to identify obsolete users, delegated permissions and relevant remote-access arrangements. Where supported, check whether active sessions or previously authorised devices also need revoking.
Removing an app from somebody’s phone is not evidence that their account or session has been revoked. Equally, deleting the wrong owner account can disrupt administration. Follow the product’s documented process and record what was changed, by whom and when.
Coordinate changes with any monitoring provider. Do not remove a service connection blindly, reset a recorder or interrupt recording just to prove an access change has worked.
Test the handover and record the result
Check authorised access, the intended permission boundaries, recording and playback, and the ability to retrieve a suitable clip through the approved process. Confirm any agreed monitoring connection separately. Record unresolved limitations and assign an owner and review point.
The ICO’s surveillance guidance addresses secure storage, restricted access and usable retrieval of footage. It is currently marked as under review following legislative changes; check the current guidance when reviewing your arrangements. An account handover is not, by itself, a complete data-protection compliance assessment.
Make access review part of the maintenance brief
Repeat the review when staff duties, suppliers or account ownership change, not only after a problem. Keep a concise management record of approved roles and outstanding actions without circulating credentials or detailed network information.
For a CCTV requirement, explore ZimCos’s CCTV installation service. To discuss an existing system, send the property postcode, equipment details and scope of the requested review, without passwords or access codes. Technical feasibility and the work required need confirmation. This is general planning guidance, not a product-specific configuration instruction.
Featured image: an illustrative CCTV camera photograph, not a claim about a ZimCos installation or client site.