id: "PE-06(03)" title: "Video Surveillance" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-06.03" priority: "P2" implementation_level: "organization" parent: "PE-06" enhancement: True
Employ video surveillance of {{ insert: param, pe-06.03_odp.01 }};
Review video recordings {{ insert: param, pe-06.03_odp.02 }} ; and
Retain video recordings for {{ insert: param, pe-06.03_odp.03 }}.
Guidance
Video surveillance focuses on recording activity in specified areas for the purposes of subsequent review, if circumstances so warrant. Video recordings are typically reviewed to detect anomalous events or incidents. Monitoring the surveillance video is not required, although organizations may choose to do so. There may be legal considerations when performing and retaining video surveillance, especially if such surveillance is in a public location.
Assessment Objective: video surveillance of {{ insert: param, pe-06.03_odp.01 }} is employed;
Assessment Objective: video recordings are reviewed {{ insert: param, pe-06.03_odp.02 }};
Assessment Objective: video recordings are retained for {{ insert: param, pe-06.03_odp.03 }}.
Physical and environmental protection policy
procedures addressing physical access monitoring
video surveillance equipment used to monitor operational areas
video recordings of operational areas where video surveillance is employed
video surveillance equipment logs or records
system security plan
privacy plan
privacy impact assessment
privacy risk assessment documentation
other relevant documents or records
Organizational personnel with physical access monitoring responsibilities
organizational personnel with information security and privacy responsibilities
Organizational processes for monitoring physical access
mechanisms supporting and/or implementing physical access monitoring
mechanisms supporting and/or implementing video surveillance