Security is paramount for organizations these days, and most good protection strategies include video surveillance. More often than not, the default enterprise system centers around either a network video recorder (NVR) or digital video recorder (DVR) to capture footage from the various cameras that monitor the premises. While plenty of companies have found success using such system architecture, it can also be fraught with under-discussed pain points. As people continue to ignore everything from hidden costs and challenging installations to unforeseen cybersecurity concerns and scalability limitations, the following five myths still circulate about these systems. Issues run the gamut—from inconvenient, to expensive, to potentially devastating—making it imperative to understand the pros and cons of any security system. Myth #1: NVRs/DVRs Are the Most Economic Surveillance Solution While it’s true that NVR/DVR-based systems are often among the most affordable options out of the box, focusing on upfront costs alone could prove to be short sighted. The truth is that these solutions include many hidden costs that only become apparent after the initial hardware investment has been made. Enterprises should be aware of the ongoing IT maintenance expenses, which can add up quickly since reviewing footage can be slow and tedious with the outdated software solutions available. Upgrading services and storage, replacing equipment that fails and expanding the system as you grow will all require additional expenditures. While NVR/DVR devices are available with 16 or even 32 channels, many locations initially use smaller models that only support four or eight camera inputs. Though this may be sufficient when the office opens, in time, the company might have to add more NVRs or DVRs to accommodate additional cameras. Myth #2: NVRs/DVRs Offer the Utmost Reliability One selling point boasted by NVR/DVR providers is the system’s reliability. This is overhyped for various reasons, but the most significant is the reliance on what can become a single point of failure. First and foremost, when an NVR or DVR stops functioning, all the connected cameras fail with it. So rather than just having one entry point or area left without surveillance, the entire facility enters a blackout—a potentially disastrous result, which malicious actors can exploit. Moreover, this type of failure means you don’t just lose the ability to monitor the site when the system malfunctions. You will potentially lose historical footage that may be tied to an earlier incident of consequence. And when retention protocols come undone, legal risks emerge. Then comes the small stuff. A loose cable connecting a camera to the recording device, for example, would mean that nothing is recorded in that area, and the manual nature of the system often leads to such issues not being identified immediately. This will leave you with a lack of coverage for hours, days or even weeks in the most complacent locations. Myth #3: NVRs/DVRs are Easy to Install DVR systems are usually billed as “idiot-proof” solutions, since they allow operators to simply attach cameras to the device by plugging in a few cables. NVRs are known to require a bit more effort in terms of setting up networked cameras. But both are sold with the promise of being very simple to implement and use. However, all the equipment still has to be configured to communicate with each other and software must be run on top of the system if you want to monitor the video locally. This, of course, requires a monitor to be input as well—while viewing remotely necessitates the addition of a router that passes the footage through a firewall then through the internet to be seen on computers, smartphones or other devices. Add in all the cables and installation of software on remote access devices and your seemingly plug-and-play system becomes anything but. Myth #4: NVRs/DVRs Are Secure Because an NVR or DVR is located on site, it can be self-contained locally and remain fully disconnected from the wider internet. In theory, this makes it incredibly difficult for malicious actors to hack and manipulate. But most enterprises will want some sort of remote access. Monitoring live footage is critical when it comes to responding to serious incidents in real time. (This is one of the main reasons many organizations need security cameras in the first place.) And from an IT perspective, making firmware or other updates remotely saves time, money and hassle. So while a NVR/DVR system could potentially be air gapped from the world and fully protected, in order to use a video recorder in the way most companies want to, you have to drop its security defenses. Any established firewall must be punched through to establish remote access, and a VPN (even when established properly) can still expose your system to some of the worst network risks. This helps explain why Symantec, in its benchmark 2018 Internet Security Threat Report (ISTR), ranked DVRs second on its list of vulnerable devices involved in the Internet of Things attacks against its honeypot last year. Cameras also made the top ten, coming in eighth. Myth #5: NVRs/DVRs Are Scalable, Regardless of Enterprise Size While these systems can offer a low cost of entry, any savings can quickly vanish as a business tries to scale up its video security. What works well in a single location can be difficult and expensive to roll out across multiple sites. Even more than the cost, many companies come to disdain the hassle of having a new on-premises device in every building. Not only does this require a small army of employees to follow retention and other protocols across all the different locations, but it also adds time and requires more personnel when it comes to servicing, updating and generally managing the system. And in each location, the organization will now have an additional point of failure. This issue is magnified by the fact that the segmented nature of the various NVR/DVR devices requires that they all be monitored separately if you want them to be protected against cyber threats. While conventional video systems may be adequate for certain organizations or use cases, modern enterprises should keep these NVR/DVR myths and challenges in mind as they make forward-looking decisions about their video surveillance systems. Want to learn more about the future of enterprise video surveillance? Give CITE a call at 605-791-2423.