Cyber-secure CCTV · Axis · Cyber Essentials
CCTV that doesn’t open a back door into your network.
Every camera is a computer on your network. We install Axis because its security is built into the hardware and supported for years, and because we’re a cyber security company as well as a CCTV installer.
- 8–12 yrsof security updates for a typical Axis device
- FIPS 140-3Level 3 security chip on newer Axis cameras
- Cyber Essentialsheld by Axis and by PC1
The risk
Why cameras are a cyber security risk.
Cameras sit on your network, run their own software and stay in place for years. A camera that no longer gets security updates, or still has its default password, is an easy way in.
On 24 November 2022 the UK government told departments to stop deploying surveillance cameras on sensitive sites where the manufacturer is subject to China’s National Intelligence Law, not to connect such equipment to core networks, and to consider replacing what was already installed (written statement HCWS386).
Built into Axis
Security Axis builds into the hardware.
- Axis Edge Vault: a security chip that checks the software at start-up (secure boot) and keeps encryption keys in protected hardware, certified to FIPS 140-3 Level 3 on newer models.
- A signed operating system, so a camera only runs genuine Axis software.
- Signed video, so you can prove a recording hasn’t been edited since the camera made it.
- A unique device identity (IEEE 802.1AR), with support for 802.1X network access control and HTTPS.
- Published support periods: typically 8 to 12 years, and generally five years after a model is discontinued.
- Axis is a CVE Numbering Authority, publishes security advisories and ships a software bill of materials with each AXIS OS release.
- Axis holds ISO 27001 and Cyber Essentials.
Ask before you buy
Six questions to ask about any CCTV system.
| Ask | Why it matters | With Axis |
|---|---|---|
| How long will it get security updates? | Unsupported cameras build up known vulnerabilities. | A published end-of-support date for every model, typically 8 to 12 years. |
| Does it check its own software at start-up? | Tampered firmware can hide on a device for years. | Secure boot and a signed operating system. |
| Where are its keys kept? | Keys in ordinary memory are easier to extract. | In a hardware secure element, FIPS 140-3 Level 3 on newer models. |
| Can you prove the footage is genuine? | Evidence may be challenged. | Signed video and digitally signed exports. |
| Who is the manufacturer accountable to? | Government guidance restricts some manufacturers on sensitive sites. | Axis is a Swedish company, based in Lund. |
| How are vulnerabilities reported? | You need to know when to patch. | Axis is a CVE Numbering Authority and publishes security advisories. |
How we install
Installed by a cyber security team.
- Cameras, recorders and door controllers on their own network segment, away from your office PCs.
- Every default password changed before a device goes live.
- Firmware kept up to date alongside the rest of your IT.
- Cameras included in your wider cyber security and Cyber Essentials work.
PC1 holds Cyber Essentials, certified by IASME. We can look after your cameras and door controllers as part of managed cyber security.
Secure CCTV questions
What people ask before switching.
Can CCTV cameras be hacked?
How long are Axis cameras supported?
Can you check our existing cameras?
Is it worth replacing cameras that still work?
Case studies
Networks and security we look after.
IT Support · Aberdare · since 2008
Eighteen years of IT, CCTV and web
30+ Axis cameras, fibre between buildings, VLANs and Juniper networking, seven-year off-site disaster recovery and websites.
WDL ConcreteRead case study
Cyber Security · London · since 2019
From the manufacturer’s network to Cyber Essentials Plus
Their own network, Microsoft 365 and on-site IT when the manufacturer stepped back, then Cyber Essentials every year and Cyber Essentials Plus in 2026.
Two London Toyota centresRead case study
Free site survey
Find out how secure your cameras are.
A PC1 engineer checks your cameras, recorders and network and sends a plan with fixed pricing.
- Reply within one working day
- Fixed prices, in writing
- A senior engineer, not a salesperson