Page 164 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Under 40 CFR 68, as part of coordination with local emergency response officials required by section 68.93, the owner or operator must consult with these officials to establish an appropriate frequency for tabletop exercises, and must conduct a tabletop exercise before December 21, 2026, and at a minimum of at least once every three years thereafter.
Read the playbook
Privacy controls act at different points in the video lifecycle. Map masking, access restriction, and redaction to the disclosure risk each control is intended to reduce.
Read the guide
An evidence lock can preserve selected video beyond normal retention. Define who may create, extend, review, and remove each lock before storage and legal obligations collide.
Read the playbook
SRTP can protect RTP and RTCP media traffic, but its result depends on key management and does not secure camera administration, storage, export, or operator access.
Read the explainer
Scene metadata can support search, alerts, and trends, but it has its own generation, transport, retention, and export path. Verify that path independently from video.
Read the guide
Encrypting a camera card can protect removed media, but initialization and recovery actions can erase recordings. Establish passphrase custody and recovery tests first.
Read the playbook
A PIV card supports multiple authentication mechanisms with different assurance characteristics. Select the mechanism from risk rather than treating card presence as one uniform control.
Read the guide
FIPS 201-3 removed the CHUID authentication mechanism while retaining the CHUID data object for support of other mechanisms. Inventory doors that still authorize on CHUID data alone.
Read the briefing
The HIPAA Security Rule addresses maintenance records for physical security components. Covered workflows should capture relevant door, lock, wall, and hardware changes.
Read the guide
The HIPAA Security Rule addresses procedures for facility access supporting disaster recovery and emergency-mode operations. Translate that requirement into tested, accountable access paths.
Read the playbook