ExplainerBeginnerPhysical Security

What Is CCTV? Video Surveillance Systems Explained

CCTV (Closed-Circuit Television) is a video surveillance system that transmits camera feeds to a limited set of monitors or recorders. Modern IP-based CCTV uses network cameras, NVRs, and video management software for remote monitoring, analytics, and integration with access control.

Emanuel De AlmeidaJuly 23, 20268 min read

Level

Beginner

Reading time

8 min

Concept

CCTV (Closed-Circuit Television)

Last reviewed

July 19, 2026

CCTV (Closed-Circuit Television) is a video surveillance system where camera feeds are transmitted to a limited set of monitors or recorders, not broadcast publicly. Modern CCTV systems use IP cameras that stream over Ethernet or Wi-Fi to network video recorders (NVRs), replacing legacy analog systems with coaxial cables and DVRs.

Key takeaways

  • CCTV transmits video from cameras to a limited set of monitors/recorders (closed circuit).
  • Modern IP CCTV uses network cameras, PoE, NVRs, and VMS software.
  • IP cameras are IoT devices that need cybersecurity hardening: VLANs, firmware updates, strong passwords.
  • H.265 compression reduces storage by ~50% compared to H.264 at similar quality.
  • ONVIF is the interoperability standard for IP cameras and recorders.

Quick explanation

In simple terms

CCTV is a video surveillance system that uses cameras to record and monitor activity in a specific area, with feeds viewable on dedicated screens or remotely over a network.

Technical definition

CCTV is a video surveillance architecture using IP or analog cameras to capture video, transmitted over closed networks (Ethernet, coaxial) to NVRs/DVRs for recording and VMS platforms for monitoring, with support for ONVIF interoperability, H.264/H.265 compression, and PoE power delivery.

Analogy

CCTV is like a private TV channel for your building. Unlike broadcast TV that anyone can watch, CCTV sends video only to specific screens and recorders that you control.

Definition

CCTV is a video surveillance system that transmits camera feeds to specific monitors and recorders over a private network. Modern IP-based CCTV uses network cameras, NVRs, and VMS software for recording, remote viewing, and analytics.

CCTV stands for Closed-Circuit Television. It's a video surveillance system where cameras transmit feeds to a limited set of monitors and recorders over a closed (private) network, as opposed to broadcast television which is transmitted publicly.

Modern CCTV systems use IP cameras that connect via Ethernet or Wi-Fi, stream encoded video (H.264/H.265) to network video recorders (NVRs), and are managed through video management software (VMS). IP cameras often receive power via PoE (Power over Ethernet), reducing cabling to a single Ethernet cable per camera. The ONVIF standard provides interoperability between cameras and recorders from different manufacturers.

Why it matters

CCTV is deployed in virtually every commercial, industrial, and public facility for security, safety, and operational monitoring. For IT professionals, IP cameras are IoT devices on the network that require cybersecurity hardening.

Core concepts

IP Camera

A camera that captures video and transmits it as a digital stream over an IP network.

IP cameras connect to the network via Ethernet (often PoE for power and data over one cable) or Wi-Fi. They encode video using H.264 or H.265 codecs and stream via RTSP or ONVIF protocols. Resolution ranges from 1080p to 4K and beyond. Many include onboard analytics (motion detection, line crossing).

Example

A Hikvision 4MP PoE dome camera streaming H.265 video at 15fps to an NVR over Cat6 Ethernet.

Network Video Recorder (NVR)

A server that records video streams from IP cameras to disk storage.

NVRs receive compressed video streams from IP cameras over the network. Unlike DVRs (which process raw analog video from coaxial cables), NVRs handle already-encoded digital streams. Storage capacity determines retention: a 16-camera 1080p system at 15fps with H.265 uses roughly 1TB per week.

Example

A Synology NAS running Surveillance Station recording 16 IP cameras to a 4-disk RAID5 array.

How it works

1

Cameras capture and encode video

IP cameras capture video, encode it using H.264 or H.265 codecs, and stream it over the network using RTSP or ONVIF protocols. Many cameras receive power via PoE (Power over Ethernet).

Camera → Encoded stream

2

Network transmission

Video streams travel over the local network (Ethernet, Wi-Fi) to the NVR or VMS server. PoE switches provide power and data connectivity to cameras through a single cable.

Stream → Network → NVR

3

Recording and storage

The NVR or VMS server records streams to disk (RAID arrays for redundancy). Retention periods range from days to years depending on storage capacity and legal requirements.

NVR → Storage (RAID)

4

Monitoring and playback

Operators view live and recorded feeds on monitors, workstations, or mobile apps. VMS software provides multi-camera layouts, alerts, search, and export.

VMS → Operator screens

Benefits

Deterrence and evidence collection

CCTV deters criminal activity and provides evidence for investigations. Per studies cited by the UK Home Office, visible cameras reduce property crime in parking areas by up to 51%.

Remote monitoring over IP networks

IP cameras stream over the network, allowing operators to monitor feeds from any location via VMS software or mobile apps.

Video analytics and AI integration

Modern NVR/VMS platforms support AI-powered analytics: motion detection, facial recognition, license plate recognition, people counting, and anomaly detection.

Limitations

IP cameras are cybersecurity targets

High

IP cameras are IoT devices. Per CISA, they often ship with default credentials, outdated firmware, and insecure protocols. The Mirai botnet demonstrated the risk.

Workaround — Segment cameras on a dedicated VLAN. Change default passwords. Update firmware regularly. Disable UPnP. Use HTTPS for management interfaces.

Bandwidth and storage costs at scale

Medium

High-resolution cameras (4K) at high frame rates generate significant storage and bandwidth demands. A 32-camera 4K system can saturate a gigabit uplink.

Workaround — Use H.265 compression, motion-triggered recording, and tiered storage (fast SSD for recent footage, HDD archive for older).

Examples

Mirai botnet and IP camera security (2016)

The Mirai botnet exploited IP cameras with default passwords to build a massive DDoS botnet.

Per multiple security research reports, the Mirai botnet in 2016 compromised hundreds of thousands of IP cameras and DVRs with default credentials to launch massive DDoS attacks, including the attack on DNS provider Dyn that disrupted major websites.

OutcomeDemonstrated that unsecured IP cameras are a critical IoT attack vector. Led to increased focus on camera cybersecurity.

Comparisons

IP CCTV vs. Analog CCTV

Myths, corrected

Myth

CCTV cameras record everything all the time

Correction

Most modern systems use motion-triggered recording or scheduled recording to reduce storage costs. Continuous recording at high resolution generates terabytes of data daily.

Why it happens: The perception of 'always watching' comes from crime dramas and public awareness campaigns.

Myth

IP cameras are plug-and-play secure

Correction

Per CISA, many IP cameras ship with default passwords, unencrypted streams, and outdated firmware. Without hardening, they're among the most vulnerable IoT devices on a network.

Why it happens: Consumer cameras market ease of setup, which often means security is not configured by default.

Practical implications

For admins

Segment CCTV on a dedicated VLAN with firewall rules restricting camera-to-internet access. Manage firmware updates centrally. Monitor for unauthorized access.

For business

CCTV investment includes cameras, NVR, storage, network infrastructure, and ongoing maintenance. Cloud-based alternatives shift costs from CapEx to OpEx.

For security

Treat IP cameras as IoT endpoints. Include them in vulnerability scanning and asset inventory. Per NIST, apply IoT security baselines to all network-connected cameras.

Decision guide

Use when

  • You need video surveillance for facilities, campuses, or public areas.
  • Remote monitoring from off-site locations is required.
  • Integration with access control, alarms, or analytics is needed.

Alternatives

  • Cloud-based video surveillance (Verkada, Meraki MV)
  • Body-worn cameras for mobile operations
  • Access control systems for entry monitoring without video
Choose IP CCTV for new installations requiring remote access, analytics, and scalability. Cloud-based systems reduce on-premises hardware but have ongoing subscription costs and bandwidth requirements.

Related terms

NVR

Network Video Recorder, a server that records IP camera streams to disk.

ONVIF

Open Network Video Interface Forum, an interoperability standard for IP surveillance.

PoE

Power over Ethernet, delivering power and data to cameras over a single cable.

Frequently asked questions

What does CCTV stand for?

CCTV stands for Closed-Circuit Television. 'Closed-circuit' means the video signal is transmitted to a limited set of monitors or recorders, not broadcast publicly like broadcast television.

What is the difference between IP and analog cameras?

IP cameras transmit digital video over a network (Ethernet/Wi-Fi). Analog cameras send analog signals over coaxial cable to a DVR. IP cameras offer higher resolution, remote access, PoE power, and analytics capabilities.

How do I secure IP cameras on my network?

Per CISA, change default passwords immediately, update firmware regularly, segment cameras on a separate VLAN, disable UPnP, use HTTPS for management, and encrypt video streams where supported.

What is ONVIF?

ONVIF (Open Network Video Interface Forum) is a standard for interoperability between IP cameras and VMS/NVR software. ONVIF-compliant cameras work with any ONVIF-compliant recorder regardless of manufacturer.

How much storage does CCTV need?

A 16-camera 1080p system at 15fps with H.265 compression uses roughly 1TB per week. 4K cameras use roughly 4x more. Storage needs depend on resolution, frame rate, compression codec, and retention period.

Conclusion

CCTV has evolved from analog coaxial systems to IP-networked platforms with AI analytics, cloud storage, and remote access. Modern deployments use PoE-powered IP cameras, NVRs with RAID storage, and VMS software for centralized management.

Per CISA and NIST, IP cameras are IoT devices that need network segmentation, firmware updates, strong credentials, and encrypted streams. The Mirai botnet demonstrated the consequences of leaving default credentials on network cameras.

Main takeaway

Modern CCTV is an IP-networked system that requires both physical security planning and cybersecurity hardening.

Explore Video Management Software (VMS) platforms like Milestone XProtect and Genetec Security Center for enterprise CCTV management.

Reader reviews

Rate this articleBe the first to rate
No written reviews yetRate the article above, or be the first to share your experience.

Related articles