When should a security operator review surveillance footage?

When should a security operator review surveillance footage?

• A. Only during audits conducted by management.
• B. Whenever a badge is scanned in.
• C. At the start of every shift regardless of events.
• D. In response to an incident, suspicious activity, or as part of routine verification, while respecting privacy and retention policies.

Answer: (D)

Surveillance footage should be reviewed when there is a legitimate security reason, such as responding to an incident, investigating suspicious activity, or performing routine verification to ensure controls are functioning. This approach balances the need to verify events and protect assets with the obligation to respect privacy and adhere to retention policies. Reviewing footage only during audits is too limited and delay-prone; relying on every badge scan to trigger a review is intrusive and usually unnecessary, and reviewing at the start of every shift regardless of events wastes resources and can expose unrelated data. By aligning reviews with actual security needs and policy guidelines, you ensure timely investigations and ongoing protection without overreaching privacy or data retention rules.

Surveillance footage should be reviewed when there is a legitimate security reason, such as responding to an incident, investigating suspicious activity, or performing routine verification to ensure controls are functioning. This approach balances the need to verify events and protect assets with the obligation to respect privacy and adhere to retention policies. Reviewing footage only during audits is too limited and delay-prone; relying on every badge scan to trigger a review is intrusive and usually unnecessary, and reviewing at the start of every shift regardless of events wastes resources and can expose unrelated data. By aligning reviews with actual security needs and policy guidelines, you ensure timely investigations and ongoing protection without overreaching privacy or data retention rules.