Cloud video surveillance is taking over. At most trade shows, manufacturers are highlighting their answers to cloud-based security. Cloud is not all created equal, and without understanding the cybersecurity posture of cloud cameras, organizations could be opening themselves up to unnecessary risk.

This does not mean that cloud is insecure. When done properly, cloud-managed cameras can provide better cybersecurity hygiene than any on-premise system. Standard features like cloud-deployed firmware and security patching, by themselves, are an important way to reduce the threats on the network that traditional surveillance systems leave open.

When looking at cloud, understanding the following 4 items can help keep your organization safe.

Dedicated cybersecurity hardware

  • Does the hardware build in a separate Trusted Anchor Module to provide secure boot functions?
  • Does the camera have a way to validate the hardware has not been tampered with?
  • Does the camera have a way to validate the firmware is as shipped from factory?

Cloud infrastructure

  • Was it built on AWS or Azure or a home-grown cloud? If the former, how does that affect cost?
  • If home-grown, how is it designed to scale across hundreds or thousands (or hundreds of thousands) of cameras, sites, or customers?
  • How is cybersecurity and privacy handled by the manufacturer to protect customer footage and data?

Integration to cybersecurity tools

  • Does the cloud provider leverage MFA and SSO tools like Okta?
  • Is there a way to work with other technologies like firewalls, intrusion detection, and malware protection technologies in the same dashboard as the cameras?
  • Can you limit access to certain cameras or locations based on roles of administrators to the cloud platform?

Endpoint access administration

  • How does the solution manage the device to access and administration?
  • Does the device have a web server built-in with device-level passwords?
  • Or does it limit access and administration via the cloud application or another centralized authentication platform?
  • If it has device layer/level passwords for users to administer, how do those passwords get rotated?

Convergint partners with Cisco Meraki to deliver a highly scalable, intelligent, and agile IoT and physical security platform that empowers organizations with the visibility and data they need to protect and secure what matters now and in the future. This transformative platform enables the convergence of IT, physical security, IoT, and an ecosystem of API software to create operational efficiencies through automation. Learn more about Convergint and Cisco Meraki’s cloud-based solutions below.

LEARN MORE

A global leader in systems integration

Convergint is a global, service-based systems integrator focused on mission-critical security, fire, and life safety infrastructure. Convergint offers last-mile delivery for emerging technology, backed by a 20-year commitment to its core value of service. Contact a Convergint specialist to learn more.

Recommended Articles