Video surveillance system and related threats

Source- This post on Threats of Video Surveillance systems is based on the article “Centre asks States to not procure CCTVs from suppliers with history of security, data breaches” published in “The Hindu” on 1st May 2024.

Why in the news?

Due to security concerns, the Ministry of Home Affairs (MHA) has directed all states and government departments to avoid procuring CCTVs and related hardware from suppliers with a history of security breaches.

This move comes in response to growing concerns about the security implications associated with CCTVs and other Internet of Things (IoT) devices.

About the guidelines:

1. The Ministry of Electronics and Information Technology (MeITY) has outlined guidelines for safeguarding the overall security and integrity of CCTV cameras and IoT devices.

2. These guidelines include procuring cameras made in India or equipment certified in accordance with norms set by the Bureau of Indian Standards.

3. The goal is to mitigate risks such as data security breaches, privacy violations, hacking, and cyberattacks associated with surveillance technologies.

4. Earlier, amendments have been made to the public procurement order for CCTVs and video surveillance systems, as well as the Electronics and Information Technology Goods (Requirement of Compulsory Registration) Order, 2021, to strengthen regulations.

About video surveillance system and related threats

1. About video surveillance system: A video surveillance system, also known as Closed-Circuit Television (CCTV) system is a collection of cameras and other related equipment used to monitor and record activities in a specific area commonly used for security and surveillance purposes.

2. Components of a video surveillance system: Key components of a video surveillance system typically include cameras, Video Management System (VMS) Software, Storage (Network Video Recorders (NVRs) or Digital Video Recorders (DVRs)), Power Supply etc.

3. Concerns associated with CCTV System: Some of the growing risks associated with CCTV systems include data security, privacy breach, hacking and cyber-attack etc. Various incidents have also been reported due to security flaw in the surveillance cameras.

4. Measures suggested by the ministry: Following measures are advised to minimize the risk associated with CCTV surveillance system:

i) Government Ministries/Departments should adhere to comprehensive security guidelines for CCTV cameras.

ii) Entities need to follow applicable rules and regulations, such as the Public Procurement Order (Make in India) and the Electronics and Information Technology Goods (Requirement of Compulsory Registration) Order, 2021.

iii) BIS has formulated Blank Detail Specification (BDS) for IS 16910 for performance requirements of CCTVs. The procuring government agency can stipulate their own technical requirements for the parameters listed in the BDS and the testing can be done as per the test methods prescribed in the standard.

iv) The procurement of Video Surveillance System should be done from the brand having history of security breaches and data leakages should be avoided.

v) For the Hardware Security testing of CCTV cameras, the government agencies should use the testing infrastructure available with Standardization Testing and Quality Certification (STQC) Laboratory or any other agency notified by MeitY from time to time for testing the CCTVs as per the Essential Requirement(s) notified under the PPO for CCTV.

vi) The general cyber security practices for installation and monitoring should also be adopted.

UPSC Syllabus: Governance, science and technology