A guide to the changes between BS 8418:2010 and BS 8418:2015

Transcription

1 A guide to the changes between BS 8418:2010 and BS 8418:2015 March 2016 For other information please contact: British Security Industry Association t: e: Form No. 303 Issue 1 This document is the copyright of the BSIA and is not to be reproduced without the written consent of the copyright owner.

2 1. Introduction BS 8418 has undergone a substantial revision and has been republished as BS 8418:2015 Installation and Remote Monitoring of Detector-Activated CCTV Systems Code of Practice. The revision has taken account of experience gained from the 2010 version, some of the main changes are: A greater emphasis on planning, including a requirement to carry out a threat assessment and risk analysis as part of the planning process. An operational requirement document being generated, using inputs from the threat assessment, risk analysis and the customer s needs. Clarified that this standard now applies to the use of temporary and portable systems. Relaxed some of the tamper recommendations and provided a tamper detection table (table 1). Included a fault recognition table (table 2). Decreased the number of event memory recommendations. The need for a UPS is now determined by threat assessment and risk analysis. Now states that a minimum of one data transmission path is required. Further paths determined by threat assessment and risk analysis. Increased responsibility on the CCTV company to ensure that: agreements are in place between CCTV company, customer and RVRC the RVRC have all of the information required to respond correctly maintenance criteria is agreed with the customer all contracted parties understand their responsibilities. Key to table: This guide has been undertaken in a clause-by-clause basis where there are changes or additional clauses added to BS 8418:2015. This will provide an easy reference to those reading this guideline. : Denotes an additional clause in BS 8418:2015 Note: The references to BS IEC series of standards in BS 8418:2015 are referred to BS EN series of standards in this document, as they have since been adopted by CENELEC (European electrotechnical standards body) and published as such in the UK. 2 of 15

3 BS Clause ref. BS Clause ref. Content change detail Title BS8418:2015 Installation and remote monitoring of detector activated CCTV systems Code of practice Foreword The foreword has been updated and provides a compliance timeline and an outline of the principal changes. BS 8148:2010 was withdrawn on 31st July 2015, and was superseded by BS 8418:2015, which came into effect on 31st January Introduction Words have been added to clarify the aim of this standard in ensuring the integrity and effectiveness of an installed CCTV system and that quality and resilience are maintained at all times. 1 1 Scope The scope introduces some terminology changes (see the terms definitions and abbreviations clause). Maintenance has been added to the scope. This standard now applies whether an installation is permanent or temporary/ portable and irrespective of the length of time the CCTV system is installed for. 2 2 Normative references The list of documents referred to has been updated. ly included in the normative references: BS 8243:2010+A1:2014 BS 8591:2014 BS EN , BS EN :2014 Removed from the normative references: BS 8495 BS EN Terms, Definitions and Abbreviations There have been a number of inclusions and deletions to the Terms, Definitions and Abbreviations clause: CCTV company replaces installer, but scope is now widened to cover all services provided to customer Customer replaces owner, and scope now also refers to organizations Supervised premises replaces protected premises, but definition remains the same. ly included terminology: activation delay procedure, alternative power source, asfitted document, dormant period, fault, isolation, omission, operational requirement (OR), tamper, uninterruptable power supply, emergency service provider (ESP) and video surveillance system (VSS). Removed old terminology: automatic timer, channel, identification code, artificial illumination, natural illumination, radio frequency (RF), recorded material, BST, ISDN, PSTN, RF and VMD. 3 of 15

4 4 4 CCTV system planning and design Title has changed, it was: CCTV System Design. 4.1 Planning (new sub-heading) Note Threat assessment and risk analysis Introduces the principal of threat assessment and risk analysis prior the generation of the operational requirement (OR). Operational requirement requirement to produce this document (in accordance with BS EN :2014) that clearly defines the needs, justification and purpose of the CCTV system and is driven by the threat assessment and risk analysis [4.1.1] above. This document then assists in the design, technical specification and test procedures. Temporary and/or portable systems Standard now includes temporary and portable CCTV systems. CCTV system design proposal Should now agree CCTV system design proposal, based on the OR, with the customer. Some terminology changes, but essentially the same. Clause becomes a note. Reference to Annex B as before. Detector selection, positioning and configuration Added selection to the title of this clause. Detector selection and configuration (was 4.2.3) is now separated into two sub clauses. General No change to requirement. note 2 providing examples of detector status. Detector selection This was part of in BS 8484:2010, now has its own clause, otherwise there are only terminology changes to the selection requirements. Detector position The secure area no longer has to be divided into multiple detection zones. This is now optional depending on the on-site factors. (Annex B). Detector configuration Removed Detectors no longer have to be adjustable in both the vertical and horizontal axis Camera positioning and configuration note - drawing attention to the Data Protection Act, the Human Rights Act, the Protection of Freedoms Act and the Surveillance Camera Code of Practice. 4 of 15

5 General clause relating to the size of a person when displayed on a screen, in accordance with BS EN :2014, 6.7. Clause renumbered and reworded. No change to requirement. Note added regarding privacy masking. Clause renumbered and reworded. Secondary camera orientation should be in a different plane to primary cameras. Illumination Clause renumbered and reworded. No change to requirement. Note 2 and 3 added regarding the agreement of a process to report artificial illumination failure. Clause renumbered and reworded, original wording now used as part of a new note. Requirement remains the same Audio challenge Clause renumbered and reworded. No change to requirement. 5 of 15

6 CCTV system performance and integrity Video transmission changed to data transmission. Also, data compression should not compromise the image presented at the RVRC. Clause renumbered and reworded. No change to requirement. Clause renumbered and reworded. No change to requirement. Detector omission log should now be maintained at the supervised premises, with the option of maintaining at the RVRC. Detector Isolation Clause renumbered and reworded. No change to requirement No change to requirement of RVRC logging detector isolation; additionally this may now be logged at the supervised premises Video Integrity Reference now to table 2 (Fault recognition and indication), video loss not restored within 30 seconds should be logged and indicated locally. Clause no longer requires this to be reported to RVRC Tamper Security (title changed from tamper detection) Now refers to table 1 for tamper protection and indication requirements Tamper indications should be audible. Additionally the indication may be visual. The setting/unsetting device should include tamper detection as per table 1. Table 1 Table 1 is new and relaxes some of the tamper recommendations; this table clarifies all tamper detection and indication requirements Fault Detection This is a new clause; fault detection now has its own clause and sub-clauses, and includes a new table [Table 2], to clarify the fault recognition and indication requirements Wireless and semi-wired detectors Clause moved and renumbered. The fault reporting element is now included in table 2. Loss of communication between control equipment and detector now has to be notified within 20 minutes. 6 of 15

7 Control equipment integrity Clause renumbered and reworded. No change to requirement. Clause renumbered and reworded. No change to requirement. Clause renumbered and reworded. This clause no longer applies to a remote location. Control equipment failure should generate a fault as per table The communication media between control equipment and receiver should be monitored, at intervals of at least every 100 seconds, to ensure that signals may be transmitted Event log at the supervised premises The event log should now record at least 2,000 events (reduced from 10,000). Additional to this clause is the requirement to protect the log against deletion or alteration. Three additional events require logging: Overriding of prevention of setting; Detector isolation not carried out by the RVRC; and Detector omission not carried out by the RVRC. Data transmission to the RVRC This clause replaces Communication integrity. Now there is only references to data transmission paths whether or not that data transmission path is wireless. Stated that there should be a minimum of one data transmission path. Further data transmission paths should be determined by the threat assessment and risk analysis carried out at the planning stage to assess the risk. References added to BS EN , BS EN , BS EN and BS EN clause stating that data transmission path(s) should have the capability to transmit data to the RVRC Data transmission path (whether wireless or not) failure should be reported to, or detected by, the RVRC within 3 minutes Retry procedure Ten minute window added. A CCTV system should try to establish a connection to the RVRC six times in a ten minute window, before a fault indication is presented, as per table Authorization procedure Clause renumbered and reworded , 3 & The authorization procedure should take no longer than ten minutes, if still unsuccessful then a fault indication as per table 2 should be presented. (Ten unsuccessful attempts are no longer required) 7 of 15

8 Power Supplies General Power supplies should be in housings, either its own housing, or one of the CCTV component s housings. Power supplies should be monitored and capable of generating fault outputs for various types of fault described in this clause, identifiable to each power supply. Power supply faults should be indicated as per table 2. Wireless components should be capable of operating right up until the next routine maintenance visit (e.g. battery needs to be able to last until the next routine maintenance visit as a minimum). Wireless component power sources (e.g. battery) should be replaced periodically. Low battery fault should be indicated as per table 2. The need for an UPS is now determined by threat assessment and risk analysis and OR. Where UPS is installed, faults should be indicated as per table 2 Alternative power source Alternative power source is required for CCTV control equipment, devices used to transmit data to the RVRC, detectors and semi-wired detectors. Change over between prime power source and alternative power source (and vice versa) should not create an alarm condition. Batteries should be dated. Alternative power source used for CCTV control equipment and devices used to transmit data to the RVRC, must be capable of supporting these devices for a minimum of 30 minutes following power loss (this was 4 hours on a UPS) Alternative power source used for detectors and semi-wired detectors, must be capable of supporting these devices for a minimum of 4 hours following power loss. 5 5 Installation Note Wiring, cabling and connections Note: attention is drawn to BS 7671 and BS Clause renumbered and added cables should take into account equipment manufacturer s specifications. 8 of 15

9 Detectors No change to requirement. Note added regarding mechanical protection where necessary Camera equipment installation reference to: BS EN :2014, 4.7 and Commissioning Supervised premises documentation prior to commissioning of a CCTV system Renumbered and change of responsibility. CCTV company should provide the list of documentation in this clause to the RVRC at least 24 hours before the detectoractivated CCTV system is commissioned. This was an RVRC responsibility Checklist Engineer walk test Reworded, but no change to the requirement. Basic tests should now be carried out in the set condition. Note: Basic testing should confirm conformity with the OR, including confirmation of detection areas and configuration, camera fields of view, the image quality at the site and the RVRC and the accuracy of the recorded data (most importantly the labels used to describe the CCTV system). a) b) c) d) a) b) c) d) Detector configuration (this was just sensitivity, it is now all configuration settings). Reference images Reference images should now be reviewed to ensure that they meet the system design proposal. Reference images for functional cameras, relating to each of the preset positions, should now be reviewed to ensure that they meet the system design proposal. Night remote check Environmental soak test Extra recommendation added: Camera configuration to be checked at both daytime and night-time. At the end of the soak test all performance issues should be recorded and resolved. 9 of 15

10 Faults The term contracted party has been added in here, in place of the owner, this may refer to the customer, the CCTV company or another third party. Otherwise the requirements remain the same CCTV system acceptance certificate The CCTV company is no longer required by the standard to demonstrate aspects of functionality or performance prior to acceptance; however this may still happen as part of the RVRC acceptance processes Liaising with the customer upon completion of the installation and leaving the supervised premises Clarified that As-fitted documentation should be completed and left at the supervised premises Setting/unsetting procedures of the CCTV system on the supervised premises General The CCTV system should be configured not to cause activations during the setting or unsetting procedures, unless otherwise agreed in writing, e.g. where the monitoring of people/traffic is a requirement of observation during an agreed operational practice e) Communication links between control equipment and wireless or semi-wireless devices used for setting/unsetting should generate a fault indication within 20 minutes, as per table 2. Setting should be prevented when a fault is present. A user may override this, as long as it records this event in the log at the supervised premises. If a detector is active at the time of setting, indication should be generated at the place of setting, and RVRC. Setting and unsetting devices should have 10,000 differs (electronic), 3,000 differs (mechanical). 10 of 15

11 7.2 c) d) e) a) b) & c) d) a) b) c) d) 7.2 a) b) c) a) b) c) a) b) c) d) Setting and unsetting outside secure areas at the supervised premises The requirement that setting/unsetting devices should be covered or housed has been removed from the standard. Note: Tamper detection and indication requirements are now contained in table 1. Setting and unsetting inside secure areas Unsetting Events on the defined entry route, during unsetting may generate activations if agreed in writing. [see 7.1.1] Setting Events on the defined exit route, during setting may generate activations if agreed in writing. [see 7.1.1] f) e) Automatically timed setting and unsetting The automatic setting and unsetting procedure should be agreed in writing between the CCTV company and customer, and shared with the RVRC. (a responsibility change) RVRC initiated setting/unsetting Clause reworded. No change to requirement. 8 8 Responsibilities and considerations General A change of responsibility here: the CCTV company creates the agreement in consultation with the customer and RVRC to cover the responsibilities for the correct operation of the system. Added to the list of requirements to include in the agreement are: The maintenance of the artificial lighting, and; The expected response to control equipment failure. No longer required in the agreement, is the procedure for multiple restarts of the CCTV control equipment. This is now covered by the response plan. 11 of 15

12 a) b) Information regarding the supervised premises Change of responsibilities in this clause The CCTV company should now supply the documentation as required [by clause 6.1] to RVRC. CCTV company should now ensure that customer proposed changes are documented and discussed with RVRC. Response plan The response plan does not only cover activation responses, it now includes fault and failures responses. There should be an agreed response plan, between the CCTV Company, the RVRC and the customer. Added Note 2, regarding the viewing of images by the RVRC at other times (when no activation has been received), should also be stated in the contractual terms and conditions, between the customer, the CCTV company and the RVRC. Failure reporting has been moved into the response plan, the response plan should now detail actions in response to individual failures of: Failure of the artificial illumination Video loss Detector failure Control equipment restart failure Tamper indication and; Transmission path failure Staff access There is a change of responsibility in this clause; the CCTV company is now responsible for ensuring that the customer carries out the activities within this clause. Otherwise the requirement is the same c) 9 9 RVRC operator procedures & General The RVRC should now satisfy itself that the documentation provides a clear understanding of the layout and areas to view of the supervised premises RVRC operators should have enough information from the supervised premises plan [6.1c] to describe incidents as they occur, i.e. layout and camera fields of view. Activation delay procedures The RVRC and/or the CCTV company should agree any activation delay procedure with the customer. 12 of 15

13 Equipment faults CCTV system faults should be notified to the contracted party (the customer, the CCTV company or another third party) Illumination problems should be reported in accordance with Omitting detectors The RVRC should now inform the CCTV company of all omissions (i.e. all omissions that the RVRC is aware of). Customers, by agreement may also wish to be informed Construction and facilities Clause moved. RVRC construction and facilities may now conform to BS 5979:2007, Category II or BS 8591:2014, Cat II Management and operation of the RVRC (new title) General No change to requirement Lost monitoring No change to requirement Logging and recording Added to the list that the RVRC should log or record is detector isolation. Otherwise this requirement remains the same RVRC support Picture quality RVRC procedures and documentation Non-image records and event logs at the RVRC No change to requirement & Storage of images received Renumbered and moved reference images clause from commissioning clauses to here. Otherwise there is no change to the requirement No change to requirement No change to requirement Images for evidential purposes Renumbered. Also, where images are stored digitally, there is a new standard to comply with, BS EN :2014, Clause Confidentiality reference to the requirement to agree procedures for the exchange of confidential information between RVRC and customer. These should be agreed with the CCTV company and the customer RVRC operator actions Image quality check Reworded and a change of responsibility. Observed poor image quality, leaving the RVRC operator unable to determine the nature and detail of an event, should be formally notified to the CCTV company and/or the customer, requesting remedial action Critical data omissions Reworded and a change of responsibility. Missing critical data leaving the RVRC operator unable complete the response plan, should be formally notified to the CCTV company and/or the customer, requesting the supply of the missing data Activation management 13 of 15

14 Classification of activations Clause reworded. No change to requirement Multiple unwanted activations Service levels General The RVRC should now conform to either BS 5979 or BS Activation response time CCTV system fault reporting Title changed from Local CCTV system fault reporting. Clause remains the same, except that agreement to set a time limit, other than 60 minutes, should be made between the RVRC, the CCTV company and the customer Incident reporting Incident reporting has been extended from 12 hours to 24 hours General maintenance and personnel screening CCTV system maintenance Maintenance agreement and routine visits No change to maintenance frequency. However the need to have a maintenance contract in place before monitoring is accepted at the RVRC, has now been removed. Note regarding one of the remote maintenances being carried out by the RVRC has been removed & & Corrective and preventive maintenance criteria should now be agreed between the CCTV company and the customer. Examples of maintenance can be found in BS EN :2014, Clause 17. Renumbered and reworded. No change to requirement. CCTV company maintenance engineer actions Maintenance engineer should inform the RVRC that corrective/ preventive maintenance is due to take place. Renumbered and additional requirement to the clause; remedial action should be documented and agreed with the customer. Renumbered and reworded. No change to requirement. No longer required to request changes of configuration of the transmission equipment to the RVRC. However the RVRC should be informed of the changes and should test accordingly [ ]. Renumbered. No change to requirement. requirement - Images of each detection area should be compared with the relevant stored reference images by the CCTV company in conjunction with the RVRC at each maintenance visit. Where necessary new reference image(s) should be created and stored at the RVRC. 14 of 15

15 RVRC maintenance actions Reworded. No change to the requirement Reworded. No change to the requirement Personnel screening Reworded. No change to the requirement. Annex A Annex A Diagrams for positioning detectors Minor change on figure A.1, showing the anticipated direction of intrusion. Minor changes, in wording only, on both figures A.2, A.3, A.4 and A.5. No change to requirements. Annex B Annex B Factors affecting the design requirements for a detector-activated CCTV system Minor rewording changes throughout this annex, however there are no changes to the requirements. B.4 B.4 Direct artificial light has been added into the list of environmental factors that can affect the functionality of a detector-activated CCTV system. Annex C Annex C Types of technology used in detection equipment Minor rewording changes throughout this annex, however there are no changes to the requirements. Annex D Annex D Illumination of the field of view of the camera Minor rewording changes throughout this annex, however there are no changes to the requirements. Annex E Annex E Checklist criteria for the commissioning of a detector-activated CCTV system Table E.1 No. 2 Table E.1 No. 2 Template for the commissioning of a CCTV system Some minor rewording in table. No change to requirement. Replaced BS EN with BS EN No. 8 No. 7 From item No. 7, renumbering has taken place (No. 7 was not present in BS 8418:2010) Annex F Annex F Setting procedure with a detector in the active state Minor wording changes. No change to requirement. 15 of 15

16 This document was created by the CCTV Section of the British Security Industry Association (BSIA). The British Security Industry Association is the trade association for the private security industry in the UK. Our members provide over 70% of UK security products and services and adhere to strict quality standards. CCTV has had a profound impact on crime prevention and detection. The UK leads the way in the application of CCTV and its use is wide-ranging, encompassing facial-recognition technology, remote video monitoring, video smoke detection, mobile systems and Automatic Number Plate Recognition as well as many other functions. In order to provide guidance and simplification in the complex area of CCTV, the BSIA is very active in the European & International standards arenas and also develops its own guides and codes of practice where currently standards do not exist. The CCTV section encourages debate on new developments and concerns, such as digital video evidence and facilitating communication protocols between different manufacturers products. In doing so it seeks to ensure that all stakeholder interests are represented including: security companies, users, the police, inspectorates and insurers. The section also works with government on these issues. CCTV must be operated responsibly in order to respect citizens rights and maintain public confidence. Laws such as the Data Protection Act have an important role to play in achieving this. BSIA CCTV companies drive best practice in this area and can provide advice on how CCTV users can adhere to the relevant legislation. BSIA membership will raise your company profile and ensure that your business is at the heart of influencing the future of the security industry. You will become part of a unique group of high quality and professional companies which are well-respected and well-represented to government, end users, specifiers, standards and legislative bodies. For more information contact the BSIA. BSIA Ltd Kirkham House John Comyn Drive Worcester WR3 7NS t: e: info@bsia.co.uk