In the name of Allah, the Most Gracious, the Most Merciful Saudi Arabian Monetary Authority Head Office Office of the Deputy Governor for Financial Sector Development

Circular

Subject: Technical Specifications for the Financial Sector Security Surveillance System

Dear Sir,
Greetings,

With reference to the telegram from His Royal Highness the Minister of Interior No. 68733 dated 27/03/1440H regarding the Royal Decree No. 59766 dated 20/11/1439H, which stipulates that the Ministry of Interior shall prepare a regulatory framework obligating all government, commercial, public places, and any other places the Ministry deems appropriate to install security surveillance cameras connected to the National Information Center, and to the telegram from His Excellency the Deputy Minister for Security Capabilities No. 8692 dated 03/09/1440H, which directs competent authorities to oblige banks, financial institutions, and financial organizations to apply the technical specifications for security systems agreed upon, and to provide the Agency with the implementation timeline.

Attached is a final copy of the technical specifications for security systems for the financial sector, and we hope to work on enforcing them as soon as possible from the date of this circular for all your new branches or those under construction. As for currently existing branches, they must be provided with an upgrade and modification plan within two weeks from the date of this circular, including the site name, number of cameras, and the timeframe. In case of any inquiries regarding this matter, coordination can be made with the advisor to the Deputy Governor for Financial Sector Development, Mr. Mohammed bin Abdulaziz Al-Amri, phone (0114662757) or via email (BankingSafetySecurity@SAMA.GOV.SA).

Accept my highest regards,
Hashim bin Uthman Al-Jaqeel
Deputy Governor for Financial Sector Development

Distribution List:

• Banks, finance companies, and insurance companies operating in the Kingdom
• His Excellency the Deputy Governor for Supervision
• His Excellency the Deputy Governor for Administrative Affairs
• Head Office Administration: General Administration of Branches and Monetary Centers, General Administration of Legal Affairs.

P.O. Box 1992, Riyadh 11169, Tel: 4633000 - Fax: 4662037

---

Financial Sector Safety and Security Guidelines CCTV Specifications Summary V 1.0 – July 2019

---

Security Surveillance Systems
The Security Surveillance Systems specified in this document are based on the following standards:

• BS EN 62676-4 2015, Application Guidelines, including Operational Requirements.
• Centre for Applied Science and Technology CAST (UK Government).
• ANSI/ASIS PAP-1:2012 Physical Asset Protection.

Note:

• The minimum recording retention for all bank facilities (Head Office, Branches, Cash Centres and ATMs) security surveillance systems shall be 90 days.
• In the event of any claims or complaints from customers, financial organisations need to create a copy of the CCTV footage of the incident and store it for a period of 1 year from the date of receiving the complaint.
• In the event of any rejected claims or complaints from the customer, banks need to take a copy of the CCTV footage of that incident and store for a period of 5 years from the date of the complaint.

The following specifications shall be used to define surveillance objectives for CCTV equipment at branches:

CCTV system surveillance objectives

Ser	Surveillance objective	Body representation	Appropriate linear resolution	Face width	Camera type required for coverage
1	Identification	120%	250 Pixels/m	40 Pixels	Full HD with WDR above 120db
2	Recognition	50%	100 Pixels/m	17 Pixels	Full HD camera
3	Detection	10%	20 Pixels/m	3 Pixels	Full HD Camera

The following table defines how specific areas within branches/facilities shall be considered with reference to the surveillance objectives defined above.

CCTV specifications Summary
V 1.0 – July 2019

Surveillance objectives by branch/facility area

Branch/facility area	Surveillance objective
All entrances and exits; indoor and outdoor	Identification
Full coverage of parking areas	Detection
Full coverage of cash counters	Identification
Full coverage of perimeter area	Detection
Full coverage of reception and customer waiting area	Identification
Full coverage of service area	Recognition
Full coverage of locker/safe rooms	Identification
Emergency doors and exits	Identification
Entrances to utility/communication/HVAC/electrical rooms	Identification
Full coverage of IT rooms and data centres	Identification
Full coverage of ATMs	Identification
Cull coverage of customer face at ATM/CCDM	Identification

The following table specifies the branch surveillance objectives by functional area and the technology required to achieve these objectives.

Surveillance objectives by branch (Customer side) functional area and technological requirements

Functional area	Surveillance objective	Technology required
Main branch entrance	Identification	Wide Dynamic Range (WDR) and IR camera
Waiting area	Identification	Normal dome camera with 2.8 - 12mm VF lens
Reception	Identification	Normal dome camera with 2.8 - 12mm VF lens
Corridors	Detection	Normal dome camera with 2.8 - 12mm VF lens
Lobbies	Identification	Normal dome camera with 2.8 - 12mm VF lens
Tellers	Identification	WDR Box camera with 20mm VF lens
Operations area	Recognition	Indoor IR camera with VF lens
Elevators — outside of elevator	Recognition	Normal dome camera with 2.8 - 12mm VF lens
Customer Parking	Recognition	Outdoor IR/PTZ IR camera
Perimeter	Recognition	Outdoor IR/PTZ IR camera
ATM	Identification	Inbuilt pin-hole camera

The following table specifies the office surveillance objectives by functional area and the technology required to achieve these objectives.

Surveillance objectives by office (Staff /Employee side) functional area and technological requirements

Functional area	Surveillance objective	Technology required
Main entrance door	Identification	WDR camera
Reception	Identification	Normal dome camera with 2.8 – 12mm VF lens
Lobby	Identification	Normal dome camera with 2.8 – 12mm VF lens
Corridors	Detection	Normal dome camera with 2.8 – 12mm VF lens
Elevators	Detection	Normal dome camera with 2.8mm VF lens
Emergency exits	Identification	Normal dome camera with 2.8 – 12mm VF lens
Storage areas	Recognition	Normal dome camera with 2.8 – 12mm VF lens
IT / IDF room	Identification	Indoor IR camera with VF lens
Security Control Room / IT room	Identification	Indoor IR camera with VF lens

CCTV specifications Summary
V 1.0 – July 2019

CCTV specifications Summary
V 1.0 – July 2019

CCTV specifications Summary

V 1.0 – July 2019

Functional area	Surveillance objective	Technology required
SWIFT/dealing/treasury room	Recognition	IR camera with VF lens
File and Passport office	Recognition	IR camera with VF lens
Data centre	Identification	Indoor IR camera with VF lens
Vault – outside	Identification	Indoor IR camera with VF lens
Vault – inside	Identification	Indoor IR camera with VF lens
Office entrance	Recognition	Normal dome camera with 2.8 – 12mm VF lens
Vehicle entry	Identification	Indoor IR camera with VF lens and number plate recognition
Access points to the building	Detection	Indoor IR camera with VF lens
Utility rooms	Recognition	Indoor IR camera with VF lens
Perimeter	Detection	PTZ camera/Outdoor IR camera
Parking - indoor	Detection	Indoor IR camera with VF lens
Parking - outdoor	Detection	PTZ camera/Outdoor IR camera

CCTV System Installation Requirements

The CCTV system design shall enable monitoring of buildings and facilities from a security control room; furthermore, the system must be able to integrate with third party systems including but not limited to the Building Management System (BMS), Access Control Systems (ACS) and the Intruder Detection System (IDS).

The system must be designed, engineered, furnished, delivered, installed and tested prior to handover, with appropriate handover documentation signed by the receiving authority and the installation engineers. The system must be supported by an Uninterruptable Power Supply (UPS) as well as being connected to a generator to ensure for long term continuity in the event of power loss.

The security surveillance system must support the following recording types:

• Motion Detection
• Continuous Recording
• Video Analytics

Each branch/facility shall maintain a register which records all security equipment failures, including details regarding time and date of failure; type of failure; action taken; date of rectification. All failures and intentional stoppages of the system shall be recorded in the log.

---

All cameras shall be installed in protective enclosures at locations and heights which are not easily accessible. These enclosures shall be rated to prevent the ingress of dust, dirt and moisture that might affect the operation of the camera. Vandal proof housings shall be used for cameras installed at a height which is accessible to people. Outdoor camera enclosures shall be rated to a minimum of IP66, with a sun-shield. All siting of cameras should appropriately consider factors such as lighting ambient conditions.

Supporting CCTV equipment shall be installed in lockable racks or cabinets in secure rooms, in accordance with the branch security zoning policy.

General CCTV Camera Specifications

CCTV cameras shall be compliant with the following specifications:

• IP cameras shall be compliant with the H.264 baseline encoding profile
• IP cameras shall be capable of multi-stream with its native resolution and FPS
• Live stream of IP cameras shall be a minimum resolution of 720p at a minimum of 12 FPS
• Recording streams of IP cameras shall be in accordance with storage requirements in this document
• Each camera shall be configurable with a single IP address
• IP cameras shall support security features including HTTPS standards
• IP cameras shall be able to automatically start streaming according to the last known configuration when it is restarted/reset/rebooted
• Cameras must support 4CIF through full HD resolutions
• Full HD quality day and night cameras with wide dynamic range (WDR) above 120dbs and with backlight compensation shall be required for the main areas as per surveillance objectives
• The FPS software should be capable of being scalable between 12 – 30 FPS
• IP cameras shall be synchronised to the NTP server or similar time server
• All cameras shall be configured with a unique name based on the location and coverage; camera names shall not be repeated.
• The system must have a time and date display on the image.
• The system must be capable of searching by time, date and the camera for real time view.
• The system must be an integral part of a private network with an IP-based infrastructure.
• The network infrastructure should be able to afford high quality images and video during display and recording.
• A firewall and security system should be provided for the CCTV network in case of connecting to other networks.
• The system should give warnings when the communication is interrupted or lost.

CCTV specifications Summary
V 1.0 – July 2019

Specifications for CCTV Cameras and NVR server

The following tables define the exact specifications for each specific camera type employed at branches/facilities and the NVR server.

PTZ IP cameras

PTZ IP cameras specification table

Ser	Specification description
1.	The image sensor shall be ⅓ or ½ CMOS (complementary metal-oxide semiconductor)
2.	Shall be true Day and Night and automatically switches between colour and black/white depending on the illumination
3.	Minimum of 20x optical zoom and 12x digital zoom, minimum 2 Megapixel Full HD resolution cameras. Min of 20x optical zoom in HD cameras
4.	Optical zoom control shall provide a scaling function that automatically adjusts the speed of the pan and tilt movement dependent on the field of view
5.	Shall be a true IP camera with a high-level connection to the other components in the system; camera shall communicate internal errors and support built-in functions like motion detection through a TCP/IP
6.	Auto focus and iris with manual override
7.	Shall support a minimum illumination for colour 0.2 lux 80% scene reflectance and 0.02 lux 80% scene reflectance for B/W
8.	Shall have back-light compensation; multiple users; privacy zone masking; auto and manual tour; remote set-up and automatic image flip
9.	Gain control should be automatic; manually ‘on’ or ‘off’
10.	Shall be capable of utilising encrypted password transmission (HTTPS)
11.	Panning range shall be 360° continuous and tilting range shall be 180°. In-built geared pan/tilt is preferred
12.	Pan/tilt speed shall be minimum of 0.5%/s to 100%/s
13.	Minimum 100 pre-sets and shall have accuracy of +/- 0.1°
14.	Operating temperature shall be -10°C to +60°C. Relative humidity shall be 0 – 95% non-condensing
15.	Shall have built-in compression algorithms such as MJPEG and H.264
16.	Vandal- and dust-proof housing construction with polycarbonate dome and cast aluminium body

External fixed IP cameras

External fixed IP cameras specification table

Ser	Specification description
17.	Shall be ONVIF (open network video interface forum) compliant
18.	Outdoor cameras shall be in an IP66 rated enclosure with sun-shroud
19.	Cameras must contain open API and support multi streaming

External fixed IP cameras specification table

Ser	Specification description
1	The image sensor shall be ⅓ or ½ CMOS. CCD chips used in less than 0.5 lux illumination with 20mm vari-focal lens, minimum 2-megapixel camera. Lux should be 0.2lux colour, 0.01 lux B/W
2	Shall be D/N automatically, switching between colour and B/W mode and vice versa
3	Auto focus and iris with manual over-ride
4	Shall have upgradable internal storage minimum 32GB SD card
5	Shall be ONVIF (open network video interface forum) compliant
6	Outdoor cameras shall be in an IP66 rated enclosure with sun-shroud
7	Shall support 12VDC, 24VDC and POE (power over Ethernet)
8	Automatic tracking white balance
9	Operating temperature should be -10 to +60
10	Cameras must contain open API and support multi streaming

Dome IP cameras

Dome IP cameras specification table

Ser	Specification description
1	The image sensor shall be ⅓ or ½ CMOS. CCD chips used in less than 0.5 lux illumination with 20mm vari-focal lens, minimum 2-Megapixel camera. Lux should be 0.2lux colour, 0.01 lux B/W
2	Auto focus and iris with manual over-ride
3	Shall have tri-axis
4	Shall have upgradable internal storage minimum 32GB SD card

CCTV specifications Summary
V 1.0 – July 2019

Saudi Arabian Monetary Authority

5	Shall be ONVIF (open network video interface forum) compliant
6	Shall support 12VDC, 24VDC and POE (power over Ethernet)
7	Automatic tracking white balance
8	Shall have built-in compression algorithms such as MJPEG and H.264
9	Cameras must contain open API and support multi streaming

Indoor IR IP cameras

Indoor IR IP cameras specification table

Ser	Specification description
1	The image sensor shall be ⅓ or ½ CMOS. CCD chips used in less than 0.5 lux illumination with 20mm vari-focal lens, minimum 2-megapixel camera. Lux should be 0.2lux colour, 0.01 lux B/W
2	High power infrared LED’s
3	Auto focus and iris with manual over-ride
4	Shall support 12VDC, 24VDC and POE (power over Ethernet)
5	Shall have built-in compression algorithms such as MJPEG and H.264
6	Shall be ONVIF (open network video interface forum) compliant
7	Automatic tracking white balance
8	Cameras must contain open API and support multi streaming

Indoor IP Box cameras

Indoor IP Box cameras specification table

Ser	Specification description
1	The image sensor shall be ⅓ or ½ CMOS. CCD chips used in less than 0.5 lux illumination with 20mm vari-focal lens, minimum 2-Megapixel camera. Lux should be 0.2lux colour, 0.01 lux B/W
2	Dual encoding stream support
3	Support up to 32GB SD card capable to record in motion in case of NVR failure
4	Automatic tracking white balance
5	Shall have built-in compression algorithms such as MJPEG and H.264

CCTV specifications Summary
V 1.0 – July 2019

Saudi Arabian Monetary Authority

6	Shall be ONVIF (open network video interface forum) compliant
7	Shall support 12VDC, 24VDC and POE (power over Ethernet)
8	Cameras must contain open API and support multi streaming

Outdoor IR IP cameras

Outdoor IR IP cameras specification table

Ser	Specification description
1	The image sensor shall be ⅓ or ½ CMOS. CCD chips used in less than 0.5 lux illumination with 20mm vari-focal lens, minimum 2-megapixel camera. Lux should be 0.2lux colour, 0.01 lux B/W
2	Auto focus and iris with manual override
3	Shall support a minimum illumination for colour 0.2 lux 80% scene reflectance and 0.02 lux 80% scene reflectance for B/W
4	High power infrared LEDs
5	Shall have built-in compression algorithms such as MJPEG and H.264
6	Shall be ONVIF (open network video interface forum) compliant
7	Outdoor cameras shall be in an IP66 rated enclosure with sun-shroud
8	Operating temperature shall be -10°C to +60°C. Relative humidity shall be 0 – 95% non-condensing
9	Cameras must contain open API and support multi streaming

Pinhole IP cameras

Pinhole IP cameras specification table

Ser	Specification Description
1.	The image sensor shall be ⅓ or ½ CMOS. CCD chips used in less than 0.5 lux illumination with 20mm vari-focal lens, minimum 2-Megapixel camera. Lux should be 0.2lux colour, 0.01 lux B/W
2.	Super wide dynamic range
3.	Shall have built-in compression algorithms such as MJPEG and H.264

CCTV specifications Summary
V 1.0 – July 2019

4.	Shall be ONVIF (open network video interface forum) compliant
5.	Operating temperature shall be -10°C to +60°C. Relative humidity shall be 0 – 95% non-condensing
6.	Cameras must contain open API and support multi streaming

NVR server

NVR specification table

Ser	Specification description
1	When viewing recorded footage the server shall be capable of providing 90 to 180 days of continuous recorded footage at a minimum of 12 FPS with the resolution of 5MP with RAID 5 on hot swappable hard disk arrangement; the RAID 5 shall be hardware controlled. External NAS/SAN storage shall be considered for any branch installation with more than 32 cameras
2	Shall be capable of full operation under a Physical Security Information Management (PSIM) system with full integration capability for video analytics
3	Shall be client-server based NVR
4	Shall support simultaneous recording, playback, exporting video and searching
5	Shall support recording of a minimum of 12 FPS with 5MP resolution for each video channel individually
6	Shall have extra 25% provision in video inputs and storage capacity for future expansion
7	Shall support H.264/MPEG4/MJPEG compression
8	Shall have twin gigabit Ethernet ports
9	Shall have a USB ports and HDMI ports and VGA ports
10	Shall be based on Linux or Windows server (at least 2008) standard platform or above
11	The NVR and storage shall be equipped with dual processor, dual power supplies and a minimum of 10/1 gigabit per second dual communication uplinks to network with any single point of failure.
12	The CPU load of server and storage must not exceed 70%
13	Shall support plug and play configuration
14	Shall support individual camera schedule with different frame rates and resolution
15	Shall support continuous, motion based, alarm and events based recording

CCTV specifications Summary
V 1.0 – July 2019

Ser	Specification description
16	Shall be synchronised automatically with time server or NTP server
17	Shall support ONVIF communication protocol
18	Shall support multiple users with different privileges
19	Shall be protected with passwords
20	Shall be capable of sending an email in the event of a loss of video or NVR failure
21	Shall be in a secure location, which limits access to those with access rights and fixed in an IT rack

CCTV Operational Deployment Requirements

The following operational deployment requirements for CCTV will be maintained for all branches/facilities

Security Surveillance operational deployment requirements

---

Ser	Operational deployment requirement
1	Each branches/facilities entrance and exit (whether from outside or from inside a building) shall be provided with a dedicated CCTV camera, deployed to provide identification of an unknown person, e.g. 120% of screen height. Cameras looking towards the outside of the building from an internal mounting position will need a wide dynamic range in order to capture the intended target
2	All internal public circulation and assembly areas shall be provided with a camera with general views which allow the individual target to be tracked throughout the branch. This requires recognition of a known person e.g. 50% of screen height
3	Each entrance to the private (staff) domain (whether from the exterior or from the public domain) shall be provided with a dedicated CCTV camera, deployed to provide identification of an unknown person, e.g. 120% of screen height. Cameras looking towards the outside from an internal mounting position will need a wide dynamic range in order to capture the intended target
4	Provided the entrance to the private (staff) domain are sufficiently covered by CCTV there should be no need to track through the common staff areas, unless required by each individual bank policy
5	As well as a general view of the teller area, each individual teller station should have its own dedicated camera. The dedicated camera should be able to capture all transactions as well as identifying an unknown customer e.g. 120% of screen height. The dedicated camera should ideally be positioned above the teller station, looking towards the

CCTV specifications Summary
V 1.0 – July 2019
```

Ser	Operational deployment requirement
6	Highly restricted access areas (operations room, IT servers, data centres, safety deposit rooms, tellers, operations area and any other cash dealing areas) require fixed cameras with general views which allow an individual target to be tracked throughout the area while monitoring their activities. This requires identification of a known person, e.g. 1200% of screen height. If the area is too large to be covered by an individual camera, additional cameras shall be deployed as necessary to comply with this guidance
7	The entrance to the vault/strong room/safety deposit box room shall be provided with a dedicated CCTV camera on the inside in addition to the vault entrance from the outside, deployed to provide identification of an unknown person, e.g. 120% of screen height. Additionally, the area should be provided with general views which allow an individual target to be tracked throughout the area while monitoring their activities, requiring recognition of a known person, e.g. 50% of screen height. Users of safety deposit boxes shall be provided a private area where items can be deposited and removed out of sight of the cameras
8	The entire cash and valuables in transit (CVIT) route shall be monitored by CCTV. The route should be provided with a general view which allows an individual target to be tracked along the entire path and their activities monitored, requiring recognition of a known person, e.g. 50% of screen height
9	All ATM’s shall have a wide dynamic range camera within the body of the machine to identify the user, e.g. 120% of screen height. Additionally, all ATM shall have a general view camera covering the area around the machine which provides recognition of a known person, e.g. 50% of screen height
10	All branch external facades shall be monitored by CCTV. The cameras shall be able to observe the activities around the entire branch perimeter, e.g. 25% of screen height. Additionally, any external areas owned by the branch, such as customer and staff parking, should also have observation coverage.
11	It is mandatory for fixed CCTV cameras to be deployed in the following areas: ; - Teller areas/teller counters focussing to teller and customer’s face as well as teller counter for cash demonstration (using one camera for each teller and another camera for the drawer) ; - Teller door entrance/teller counters field area ; - Customer services and waiting areas ; - Operations areas, back office and cash loading area ; - All corridors leading to the vault, where applicable

CCTV specifications Summary
V 1.0 – July 2019

Ser	Operational deployment requirement
	Branch vault room, focussing on the whole vault entrance/exit
	Branch vault room, focussing on the cash cabinet and the entrance
	Safety deposit box room entrance
	ITD server; SWIFT/dealing and security room: CPD; Cad file office; HR filing; passport office; IDF room
	On-site and off-site ATMs (a minimum of two cameras, one focussing on the customer’s face and the other on the withdrawal of cash; with an additional camera used for perimeter/rear entry of the service cabinet, where applicable)
	Staff entrance door
	Bank main entrance
	Bank premises and parking area
	Lift lobbies, office entrances and emergency exit
	Customer service, counter coverage and reception area
	Any other risk area as per requirements
	To cover the security items
	Entry to high security areas, subject to prior approval from authorised staff
	Design and fixing of cameras shall be in proper sequence with the recording device
	Specification and viewing angles shall comply with SAMA policy
	Recording capacity shall be in accordance with SAMA policy
	NVR recorder must be secured in accordance with this document
	CCTV system shall be supported by a UPS in accordance with SAMA requirements
	There shall be separate power supply for all devices and cameras
	No cables shall be exposed without conduits
	CCTV room temperatures shall be maintained as per system requirements
	Spot monitor for branch manager and security officer
	Sufficient lighting shall be provided for all monitoring and recording areas
	Security system drawings must be received from the supplier prior to the installation of the systems, and once the systems have been installed

CCTV specifications Summary
V 1.0 – July 2019

```markdown

Ser	Operational deployment requirement
12	CCTV room shall be covered by a camera and the entrance shall be via an access control system reader. Only designated and authorised bank personnel shall handle the CCTV system and equipment
13	Deployment of CCTV cameras shall be at an appropriate angle, in which maximum areas can be viewed. In the event that a camera’s location needs to be changed approval shall be sought from the respective branch manager or department head in consultation with the security department
14	Branch staff shall be assigned to ensure the correct temperature is maintained in the CCTV room
15	A CCTV system viewing monitor shall be installed in the office of the respective branch manager
16	Authorisation for access to the security system control room shall be restricted to the designated staff only. In the event of a requirement for system vendor/maintenance technician attendance, this should only be authorised by the designated responsible staff and designated security department personnel. Technician attendance should be logged alongside the purpose for the visit
17	Entry to the CCTV/IT room is restricted and all entry shall be documented in the security log-book alongside a reason and relevant justification
18	Support to law enforcement authorities will follow the bank procedures after approval by the bank’s security department
19	Video data overwriting or missing recordings shall be reported immediately to the branch/facility management and the security department
20	To ensure optimum system performance the branch manager/delegated staff shall check the CCTV system on a daily basis; the Head of branch operations/delegated staff shall ensure that the security personnel are checking the system on a daily basis and that there is no interruption to the system. Checks should include whether standard time is applied to the security system. Any interruption in recording or fault in the security system shall be reported immediately to the security department who will coordinate with the vendor maintenance team
21	Security systems maintenance records shall be maintained in a separate file for future record and maintenance. All visits of contractors/system vendors shall be recorded in the log, and shall be at the prior approval of relevant branch/facility manager in consultation with the bank security department
22	The CCTV checking form used in branches and bank facilities shall be maintained daily and submitted at the end of the month by security to the security department; it shall be signed by the designated staff alongside the signature of the security guard

CCTV specifications Summary
V 1.0 – July 2019

Ser	Operational deployment requirement
23	In compliance with system maintenance requirements, the CCTV system shall be regularly maintained by the vendor to ensure it is working optimally
24	Each branch/facility must ensure that the system is in operational condition at all times and recordings are stored for the duration dictated by SAMA regulations
25	All cameras on the NVR shall be coded with a unique identification number
26	All equipment requiring users to log on using a password shall be configured with user/site-specific password/passwords. No system/product default passwords shall be allowed
27	The CCTV system at all branches/facilities shall be inspected annually by the security department

CCTV specifications Summary
V 1.0 – July 2019
```

CCTV Surveillance Specifications

1. General

The ATM will have a pin-hole camera located above the client facing screen to record the client’s face, this will be supported by an overhead camera to record the transaction and whether cash was deposited and withdrawn. Additionally, in the case of an off-site ATM and additional camera is to be located to observe and cover rear entrance to the cash service room as well as an internal camera to observe the custodians/financial organisation employees during their activities inside the service room. Supporting CCTV equipment shall be installed in lockable racks or cabinets in secure rooms, in accordance with the branch security zoning policy.

Note: This section must be read along with Security Surveillance Systems, from pages 2-16, as the primary resource and means to support and clarify the surveillance requirements.

Camera Description

1. The specified unit shall be of manufacturer’s official product line, designed for commercial and/or industrial 24/7/365 use.
2. The specified unit shall be based upon standard components and proven technology using open and published protocols
3. The specified unit shall be manufactured in accordance with ISO 14001.

Certifications and Standards

General abbreviations and acronyms:

1. AGC: Automatic gain control
2. AES: Advanced Encryption Standard
3. API: Application Programming Interface
4. Aspect ratio: A ratio of width to height in images
5. Bit Rate: The number of bits/time unit sent over a network
6. Bonjour: Enables automatic discovery of computers, devices, and services on IP networks.
7. DHCP: Dynamic Host Configuration Protocol
8. DNS: Domain Name System
9. EIS: Electronic Image Stabilization
10. FPS: Frames per Second

---

11. FTP: File Transfer Protocol
12. H.264 (Video Compression Format)
13. IEEE 802.1x: Authentication framework for network devices
14. IP: Internet Protocol
15. IR light: Infrared light
16. ISO: International Standards Organization
17. JPEG: Joint Photographic Experts Group (image format)
18. LAN: Local Area Network
19. LED: Light Emitting Diode
20. LPR: License Plate Recognition
21. Lux: A standard unit of illumination measurement
22. MBR: Maximum Bit Rate
23. MPEG: Moving Picture Experts Group
24. Multicast: Communication between a single sender and multiple receivers on a network
25. NTP: Network Time Protocol
26. NTSC: National Television System Committee – a colour encoding system based on 60Hz
27. ONVIF: Global standard for the interface of IP-based physical security products
28. PACS: Physical Access Control System
29. PAL: Phase Alternating Line – a colour encoding system based on 50Hz
30. PoE: Power over Ethernet (IEEE 802.3af/at) standard for providing power over network cable
31. Progressive scan: An image scanning technology which scans the entire picture
32. PTZ: Pan/Tilt/Zoom
33. QoS: Quality of Service
34. RAID: Redundant Array of Independent Disks
35. SaaS: Software as a Service
36. SIP: Session Initiation Protocol
37. SMTP: Simple Mail Transfer Protocol
38. SMPTE: Society of Motion Picture and Television Engineers
39. SNMP: Simple Network Management Protocol
40. SSL: Secure Sockets Layer
41. TCP: Transmission Control Protocol
42. TLS: Transport Layer Security
43. Unicast: Communication between a single sender and single receiver on a network
44. UPnP: Universal Plug and Play
45. UPS: Uninterruptible Power Supply
46. VBR: Variable Bit Rate
47. VMS: Video Management System
48. WDR: Wide dynamic range

The specified unit shall carry the following EMC approvals:

1. EN 55032 Class A, EN 55024, EN 61000-6-1, EN 61000-6-2
2. FCC Part 15 - Subpart B Class A
3. VCCI Class A
4. RCM AS/NZS CISPR 32 Class A
5. ICES-003 Class A

---

CCTV specifications Summary
V 1.0 – July 2019

CCTV specifications Summary
V 1.0 – July 2019

```markdown
6. KCC KN32 Class A, KN35

The specified unit shall meet the following product safety standards:

1. IEC/EN/UL 60950-1
2. G. The specified unit shall meet relevant parts of the following video standards:
3. SMPTE 296M (HDTV 720p)
4. SMPTE 274M (HDTV 1080p)
5. SMPTE ST 2036-1 (UHDTV)

The specified unit shall meet the following standards

1. MPEG-4:
   a. ISO/IEC 14496-10 Advanced Video Coding (H.264)
2. Networking:
   a. IEEE 802.3at (Power over Ethernet Plus) b. IEEE 802.1X (Authentication)
   c. IPv4 (RFC 791)
   d. IPv6 (RFC 2460) e. QoS – DiffServ (RFC 2475)

Quality Assurance

A. All installation, configuration, setup, program and related work shall be performed by electronic technicians thoroughly trained by the manufacturer in the installation and service of the equipment provided.

B. The contractor or designated sub-contractor shall submit credentials of completed manufacturer certification, verified by a third-party organization, as proof of the knowledge.

C. The Contractor shall provide four (4) current references from clients with systems of similar scope and complexity that became operational in the past three (3) years. At least three (3) of the references shall be utilizing the same system components, in a similar configuration as the proposed system

D. The specified unit shall be manufactured in accordance with ISO 9001.

Warranty

A. All security system components and labour furnished by the contractor including wiring, software, hardware and custom parts shall be fully warranted for parts, materials, labour and travel expenses for a minimum of three (3) years from date of the final acceptance of the Video Surveillance System.

B. The manufacturer shall provide warranty and optional extended warranty for the camera for a total period of maximum five years. If enacted as part of the contract, the contractor will repair or replace parts and/or labour per the warranty for the length of this warranty at no cost to the client.

CCTV specifications Summary
V 1.0 – July 2019
```