GuideSecurity systems
CCTV and access control: what to specify before you request quotes
By Inara Crest Engineering 2 min read
Define what each camera must achieve, how long footage is kept, how doors behave in a fire and how data is protected.
Security quotes are only comparable when they are based on the same requirements. A short specification saves money and avoids systems that record plenty of footage but cannot identify anyone.
1. Define the purpose of each camera
For each area, decide what the camera must achieve. The IEC 62676-4 standard describes this as pixel density on the target:
- Detection — see that a person is present (about 25 pixels per metre).
- Observation — see what they are doing (about 62 px/m).
- Recognition — recognise someone you know (about 125 px/m).
- Identification — identify a stranger beyond reasonable doubt (about 250 px/m).
Identification at a main entrance needs a very different camera and position from detection across a car park.
2. Specify recording and retention
State how many days of footage must be kept. Storage depends on resolution, frame rate, compression (H.265 uses less storage than H.264) and whether cameras record continuously or on motion. Ask suppliers to show their storage calculation.
3. Plan lighting and the network
- Check night-time performance: infrared range or additional lighting.
- Power cameras over Ethernet and confirm the switch’s PoE budget.
- Place cameras on a separate network segment (VLAN) from office computers.
- Install the recorder in a locked, ventilated space on UPS power.
4. Secure remote viewing
Avoid exposing recorders directly to the internet through port forwarding. Change default passwords, keep firmware up to date and use the manufacturer’s secure remote service or a VPN.
5. Decide how doors behave
For access control, list each door, the credential type (card, RFID tag, PIN or biometric) and who may pass when. Doors on escape routes normally use fail-safe locks that release when power is lost or the fire alarm activates — confirm requirements with your fire safety adviser.
6. Consider data protection
CCTV footage and access logs are personal data, and biometric data is classed as sensitive personal data under Kenya’s Data Protection Act, 2019. Display signage, limit who can view footage, set retention periods and document why biometrics are necessary if you use them.
Planning a security system? See our cybersecurity and security systems services.
About the author
Inara Crest Engineering
Engineering team
Written by the Inara Crest Technologies engineering team, who design, install and support software, network, security, power and data centre systems for organisations in Kenya and East Africa.