Table of Contents
Questions to Ask Your Security System Supplier
You manage multiple sites, juggle competing priorities, and need security systems that work without constant hand-holding. Before signing with any supplier, ask these questions to avoid ending up with isolated systems, blind spots in your security posture, and expensive service calls.
Access & User Management
Can all my staff access one platform with their own login?
Shared passwords are a security nightmare. When someone leaves, you should be able to disable their access instantly - not change a password that's written on a sticky note somewhere.
What to expect:
- Individual user accounts with unique credentials
- Permission levels (view-only, operator, admin) per person
- Instant access revocation when staff leave
- Single login across all your sites
Tip: TetherX provides granular user permissions with role-based access. One login gives each user appropriate access across all sites you manage.
Does the system support two-factor authentication?
If someone's password is compromised, 2FA prevents unauthorised access. This isn't optional for compliance-conscious organisations.
What to expect:
- Authenticator app support (not SMS - it's insecure)
- 2FA enforcement for admin accounts
- Clear recovery process if someone loses their phone
Tip: TetherX supports TOTP-based 2FA with any standard authenticator app.
Audit & Compliance
Can I see exactly who viewed what footage and when?
When investigators ask "who accessed the footage from last Tuesday?", you need an answer in seconds - not a shrug.
What to expect:
- Complete login history with timestamps
- Record of which cameras and recordings were viewed
- Export capability for compliance reports
- Permanent audit trail that cannot be modified
Tip: The TetherX Audit Log records every login, footage view, download, configuration change, and deletion - permanently stored and exportable.
Will I be notified of suspicious access attempts?
If someone tries to log in from an unusual location or device, you should know immediately.
What to expect:
- Email alerts for new device logins
- Failed login attempt notifications
- Ability to restrict access by IP address
System Health & Reliability
How will I know if a camera goes offline?
Discovering your cameras weren't recording during an incident is the worst possible outcome. Proactive monitoring catches problems before they matter.
What to expect:
- Real-time health monitoring of all equipment
- Automatic alerts for offline cameras, storage issues, or connectivity problems
- Weekly health summary emails
- Historical health data to spot patterns
Tip: TetherX Health Reports provide weekly summaries with colour-coded issues, and the TetherBox continuously monitors all connected equipment.
What happens if someone vandalises or steals the recording equipment?
If a criminal destroys your recorder, will you still have footage of what happened?
What to expect:
- Cloud backup options for critical cameras
- Footage automatically uploads before local storage can be destroyed
- Same interface for cloud and local recordings - no separate apps
Will the system keep working during Internet outages?
Local recording should continue regardless of Internet connectivity. When the connection returns, everything should sync automatically.
What to expect:
- Continuous local recording during outages
- Automatic cloud synchronisation when connectivity returns
- No manual intervention required
Tip: TetherBox continues recording during Internet outages. Once connectivity returns, footage automatically synchronises to the cloud.
Remote Access & Multi-Site
Can I view all my sites from a single dashboard?
Logging into separate systems for each location wastes time and creates blind spots. You should be able to compare activity across sites instantly.
What to expect:
- Single login for all locations
- Side-by-side camera views from different sites
- Cross-site search (find footage across all locations at once)
- Unified event timeline across your portfolio
Will remote access work if my IT team changes the router?
Systems that require port forwarding break every time the network changes. You shouldn't need to call your installer whenever the ISP upgrades equipment.
What to expect:
- No port forwarding or firewall changes required
- Works through standard HTTPS (if you can browse the web, it works)
- No static IP address requirements
Tip: TetherX uses secure VPN tunnelling with no port forwarding required. If your network can reach google.com, your TetherBox will connect.
Can I access the system from any device?
You shouldn't need to install special software or pre-configure devices. Access should work from any browser on any device.
What to expect:
- Web browser access (no software installation)
- Mobile-optimised interface for phones and tablets
- No device pre-registration required
- Same interface across all devices
Integration & Future-Proofing
Does the system work with equipment from different manufacturers?
Single-manufacturer lock-in limits your options and increases costs. Your security platform should work with cameras and devices from any major brand.
What to expect:
- Support for cameras from multiple manufacturers
- ONVIF compatibility for industry-standard integration
- Ability to add new cameras without replacing existing equipment
Tip: TetherX supports 200+ camera manufacturers through ONVIF and native API integrations.
Can the system connect to my alarm panel and access control?
A security platform should unify your cameras, alarms, and access control - not create another isolated system to manage.
What to expect:
- Alarm panel integration with video verification
- Access control event correlation
- ANPR (number plate recognition) support
- Environmental monitoring (temperature, flood sensors)
Will the system receive regular updates?
Security vulnerabilities emerge constantly. Your system needs automatic updates without expensive engineer visits.
What to expect:
- Automatic security patches
- New features delivered without site visits
- No manual firmware management
Tip: TetherX pushes automatic updates to all TetherBox units. Security patches and new features arrive automatically.
Finding Footage
How quickly can I find footage without knowing the exact time?
Scrubbing through hours of timeline is not acceptable. You should be able to find relevant footage visually, in seconds.
What to expect:
- Visual event timeline with thumbnail previews
- Filter by motion, analytics events, or time of day
- Search across multiple cameras simultaneously
- Representative "best image" for each event
Tip: TetherX Events shows visual summaries with best-image technology. Find what happened in seconds, not hours.
Can I search across all cameras and sites at once?
If you're looking for an incident, you shouldn't have to repeat the search on each camera or site individually.
What to expect:
- Cross-camera search within a site
- Cross-site search across your portfolio
- Saved search filters for recurring queries
Support & Maintenance
Can issues be diagnosed remotely?
Every site visit costs money. Your integrator should be able to diagnose and resolve most issues without travelling to site.
What to expect:
- Remote diagnostics and configuration
- Secure tunnel access for integrator support
- Detailed system logs for troubleshooting
- Automatic health alerts to your integrator
Tip: TetherX tunnelling lets integrators securely access any device on your network for remote support.
What service level can I expect?
Understand response times and support hours before you need them.
What to expect:
- Defined response time commitments
- Clear escalation procedures
- Documentation and self-service options
- Transparent pricing for support beyond standard coverage
Regulatory Compliance
Where is my data stored?
Data residency matters for compliance. Know where your footage is stored and whether the provider can guarantee regional storage.
What to expect:
- Clear data centre locations (UK, EU, US, etc.)
- Option to keep data within specific jurisdictions
- Transparency about sub-processors and third parties
Tip: TetherX operates data centres in the UK, US, Canada, India, and Australia. Ask your integrator about regional storage options.
Is the platform GDPR compliant?
If you operate in the EU or UK, or process data of EU/UK residents, GDPR compliance is mandatory. This affects how footage is stored, accessed, and deleted.
What to expect:
- Data processing agreements available
- Subject access request (SAR) procedures
- Configurable retention periods with automatic deletion
- Audit trails for demonstrating compliance
Key regulations by region:
| Region | Regulation | Key Requirements |
|---|---|---|
| EU | GDPR | Data minimisation, retention limits, subject access rights, breach notification |
| UK | UK GDPR / Data Protection Act 2018 | Similar to EU GDPR, enforced by ICO |
| US (California) | CCPA/CPRA | Consumer rights to access, delete, and opt-out of data sale |
| US (Federal) | NDAA Section 889 | Prohibits certain Chinese-manufactured equipment in federal contracts |
Are the cameras NDAA compliant?
For US government contracts and many enterprise organisations, NDAA Section 889 prohibits equipment from specific manufacturers including Hikvision, Dahua, Huawei, ZTE, and Hytera.
What to expect:
- Clear documentation of camera manufacturer origins
- NDAA-compliant camera recommendations
- Ability to use compliant cameras alongside existing equipment during transition
Warning: NDAA compliance isn't just for government contracts. Many enterprises and critical infrastructure organisations require it as standard policy.
Does the provider hold security certifications?
Third-party certifications demonstrate that security practices have been independently verified.
Common certifications to ask about:
| Certification | What It Covers |
|---|---|
| ISO 27001 | Information security management system |
| ISO 9001 | Quality management system |
| SOC 2 Type II | Security, availability, and confidentiality controls (US) |
| Cyber Essentials | UK government-backed cybersecurity baseline |
| Cyber Essentials Plus | Cyber Essentials with independent verification |
Does the system support compliance reporting?
When auditors or regulators ask questions, you need answers quickly.
What to expect:
- Exportable audit logs in standard formats
- Retention policy documentation
- Access control reports showing who can see what
- Evidence of encryption in transit and at rest
Summary Checklist
Use this checklist when evaluating any supplier:
| Requirement | Ask |
|---|---|
| Individual logins | "Does each user get their own account?" |
| 2FA support | "Do you support authenticator app 2FA?" |
| Audit trail | "Can I see who viewed what footage and when?" |
| Health monitoring | "How will I know if a camera goes offline?" |
| Cloud backup | "Will footage survive if equipment is stolen?" |
| No port forwarding | "Does remote access require network changes?" |
| Multi-site access | "Can I view all sites from one login?" |
| Multi-vendor support | "Does it work with cameras from different brands?" |
| Automatic updates | "Are security patches applied automatically?" |
| Visual search | "Can I find footage without knowing the exact time?" |
| Remote support | "Can you diagnose issues without a site visit?" |
| Data residency | "Where is my footage stored geographically?" |
| GDPR compliance | "Can you provide a data processing agreement?" |
| NDAA compliance | "Are the cameras NDAA Section 889 compliant?" |
| Security certifications | "Do you hold ISO 27001 or Cyber Essentials?" |
Related Articles
- TetherBox - How the TetherBox unifies your security infrastructure
- User Permissions - Configure who can access what
- Two-Factor Authentication - Secure your account with 2FA
- Audit Log - Track all system activity
- Health Report - Proactive system health monitoring
- Events - Find footage quickly with visual event search
Referenced in: