5.3 CCTV Systems, SIRA Specifications & Evidence Handling

5.3 CCTV Systems, SIRA Specifications & Evidence Handling

Quick Summary: In the Emirate of Dubai, electronic video surveillance is legally governed by the Security Industry Regulatory Agency (SIRA) under Dubai Law No. (12) of 2016 and Administrative Resolution No. (13) of 2025 Approving the Preventive System Manual. Regulated commercial, residential, financial, and industrial facilities must install fully digital recording architectures capable of executing simultaneous live view, recording, and playback without performance degradation. Technical standards distinguish live view (at least 25 fps; 1080p single-screen, 2 CIF multi-screen) from recording (at least 1080p at 10 fps, with motion-activated recording covering no less than 70% of the day), archived for 31 days with a mandatory 20% storage capacity buffer. The general standard requires at least 30 minutes of UPS backup; shutdown integration at 25% battery is marked optional, and sector requirements can specify longer backup. Exported footage must be transferable in standard playable video formats (or include dedicated standalone viewing software) and follow strict chain-of-custody protocols for Dubai Police and SIRA authorities.

---

SIRA Regulatory Framework: Law No. (12) of 2016 & Administrative Resolution No. (13) of 2025

Under Dubai Law No. (12) of 2016 Regulating the Security Industry in the Emirate of Dubai, electronic surveillance is a statutory legal obligation rather than an optional facility feature. SIRA establishes mandatory technical and operational benchmarks that govern the design, engineering, installation, and operation of Video Surveillance Systems (VSS).

In 2025, Dubai Government and SIRA issued Administrative Resolution No. (13) of 2025 Approving the Preventive System Manual, modernizing and formalizing the technical specifications for all security installations across the Emirate. SIRA technical auditors rigorously inspect facilities prior to granting building completion certificates, issuing initial security approvals, or renewing commercial trade licenses. Security guards, CCTV operators, and security supervisors must thoroughly master these updated technical standards.

---

Digital Recording Devices & Performance Standards

Under Administrative Resolution No. (13) of 2025, recording architectures must comply with explicit technological and functional performance baselines:

1. Exclusively Digital Recording Equipment

All surveillance recording equipment must be exclusively digital. Network Video Recorders (NVRs), enterprise IP video servers, and digital storage arrays are mandatory. Legacy analog recording media (such as magnetic VHS tapes, analog cassettes, or obsolete analog video multiplexers) are strictly prohibited across all licensed installations.

2. Simultaneous Triplex / Multiplex Operation

Digital recording devices must be capable of executing three core operational tasks concurrently without any performance degradation, system latency, or frame-dropping:

1. Live View Display: Seamlessly feeding live video streams to operator workstations, spot monitors, and central video walls.
2. Continuous / Event Recording: Simultaneously encoding and writing incoming high-definition streams from all connected cameras to internal disk arrays.
3. Playback and Archive Retrieval: Allowing authorized operators or investigators to search, review, and export historical video archives concurrently without interrupting active recording or degrading live monitoring streams.

---

Technical Specifications: Live View vs. Recording

A critical distinction established in SIRA's Preventive System Manual (Administrative Resolution No. 13 of 2025) is the differentiation between Live View performance requirements and Recording performance requirements. These requirements set minimum live-display and recording performance. Evidential usefulness also depends on the camera view, lighting, system operation and preservation of the actual recording.

Detailed Analysis of Live View Standards

• Single-Screen Display: When an operator expands a camera feed to full-screen or directs a critical camera to an incident spot monitor, the system must render at a minimum of 1080p Full HD resolution at 25 fps.
• Multi-Screen Grids: In split-screen monitoring layouts (e.g., 2×2, 3×3, or 4×4 camera grids), the system may utilize substreams to optimize processing loads, but each camera tile must provide a minimum resolution of 2 CIF (or equivalent D1/higher) at 25 fps per camera window to preserve situational awareness without video stuttering.

Detailed Analysis of Recording Standards

• Resolution: Every camera mandated under SIRA regulations must record at 1080p Full HD or higher.
• Motion-Activated Configuration: SIRA authorizes motion-activated recording to optimize storage efficiency, provided the motion-detection sensitivity and scheduling are configured to record no less than 70% of the day for each camera at a minimum of 10 fps. In zones with continuous pedestrian or vehicle movement (such as main lobbies or public entrances), recording effectively operates continuously 24/7.
• Statutory 31-Day Retention: All channels must retain uncorrupted, accessible video recordings for at least 31 continuous calendar days. Systems must never automatically purge, down-sample (e.g., dropping resolution or lowering frame rate after a few days), or overwrite footage prior to the expiration of this 31-day window.

---

Storage Capacity Calculations & System Resilience

Compliance with SIRA video storage regulations requires rigorous hardware dimensioning and fault tolerance:

1. Mandatory 20% Storage Extra Margin

When calculating the total hard disk drive (HDD) capacity required to store all camera feeds for 31 days at the required resolution, frame rate, and compression codec (such as H.264 or H.265), system designers must add at least 20% additional storage capacity above the calculated baseline:

$\text{Total Required Storage} = \text{Base 31-Day Storage Requirement} \times 1.20$

This 20% safety margin prevents catastrophic storage exhaustion caused by sudden surges in facility motion activity, high-contrast visual noise (e.g., sandstorms or rain), file system formatting overhead, and disk sector retirement.

2. RAID Storage Redundancy

Redundant disk arrays can support the approved storage design. The manual’s general recording-device table requires disk-failure alarms; it does not prescribe RAID 5 or RAID 6 for every recorder:

• RAID 5 / RAID 6: Storage arrays distribute parity data across multiple drives. In a RAID 5 array, one drive can fail completely without data loss; in RAID 6, two drives can fail simultaneously. With a correctly configured healthy array, redundancy can preserve access during the supported drive failure. A trained technician must manage replacement and rebuilding; RAID does not replace preservation of incident evidence or a backup strategy.

3. Integrity Checks and Original Evidence

Preserve original recordings and document exports. A hash can help show whether a file remains byte-for-byte unchanged by comparing its later hash with the recorded original value. Some systems also use digital signatures or watermarks. These tools support integrity checks; they do not automatically notify a court, prove every fact in a recording, or make every recorder apply SHA-256. Use the approved export/verification method and keep a clear handling record.

---

Uninterruptible Power Supply (UPS) Specifications

Power stability is critical for electronic security infrastructure. SIRA's Preventive System Manual sets clear, standardized parameters for emergency battery backup:

1. The General 30-Minute Standard

The 2025 manual’s general energy table requires at least 30 minutes of UPS operation. All VSS recording devices must be connected to a UPS; requirements for other system components are detailed in the applicable appendices. Do not replace the approved site power plan with a blanket assumption about every component.

2. Optional Shutdown Integration at 25% Battery

The same table marks recording-device/UPS shutdown integration optional. Where provided, it enables the UPS to shut down recording devices when its remaining charge reaches 25%, allowing an orderly shutdown before battery exhaustion. Operate and test this feature only under the approved maintenance procedure; it is not a universal mandatory recording-device setting.

3. Sector and System Requirements

Some requirements exceed the general 30-minute baseline. The manual specifies at least eight hours for alarm-system backup, and eight-hour VSS/door backup for specified self-storage facilities. Its security monitoring operations-centre requirements also specify at least eight hours of battery support for computer systems. Apply the requirements for the actual facility and system; these are minimum durations, not an eight-hour maximum.

---

Optical Standards & Environmental Hardware Resilience

Dubai's climate and architectural characteristics impose demanding requirements on surveillance hardware:

1. Wide Dynamic Range (WDR ≥ 110 dB or Equivalent)

Dubai's intense sunlight creates severe contrast between bright exterior plazas and shaded building interiors. For cameras facing natural or artificial light sources, including reflected light, the manual requires WDR of at least 110 dB or equivalent. True WDR captures multiple exposures per frame (short exposure for bright areas, long exposure for dark areas) and combines them into a balanced image, ensuring individuals entering through bright glass doors are clearly identifiable rather than silhouetted.

2. Environmental Enclosure Ratings (IP & IK Standards)

• Weather Protection (IP66 / IP67): Exterior cameras must possess an Ingress Protection rating of at least IP66 or IP67 to withstand fine desert dust, blowing sand, intense thermal expansion, and seasonal humidity.
• Vandal Resistance (IK10): Cameras mounted within reach in public corridors, elevator interiors, parking structures, and stairwells must carry an IK10 mechanical impact rating, capable of withstanding 20 joules of direct impact.

---

Mandatory Facility Surveillance Coverage Zones

SIRA specifies coverage by facility category. The following table illustrates common security areas and possible equipment choices; the actual mandatory locations, view types and frame rates come from the applicable sector requirements and approved design:

---

Control Room Operations & Operator Visual Fatigue Management

The Security Control Room (Central Monitoring Station) serves as the coordination hub for site security. A certified SIRA CCTV Operator monitors real-time feeds, processes alarms, coordinates physical patrols, and manages emergency communications.

The Physiology of Vigilance Decrement

Scientific research into operator vigilance reveals that human attention degrades rapidly during passive video monitoring:

• Vigilance Decrement: Sustained monitoring can reduce detection performance over time. NPSA guidance describes this commonly occurring after about 20–30 minutes, depending on the task; it does not establish one fixed 70% loss for every operator.
• Information Overload: When exposed to large monitor walls displaying 16, 32, or 64 simultaneous camera grids, the human visual system experiences cognitive saturation. Operators unconsciously overlook critical movements, mistaking active breaches for normal ambient activity.

Operational Fatigue Countermeasures

1. Surveillance by Exception (Smart Analytics): SIRA-compliant Video Management Systems (VMS) utilize intelligent edge analytics (e.g., tripwire crossing, perimeter loitering, unattended baggage, and wrong-way direction alerts). Instead of monitoring static screens, operators are alerted by visual highlights and audio chimes when an analytical rule triggers, automatically popping the active camera to the primary display.
2. The 20-20-20 Rule and Visual Pacing: Operators must actively practice visual pacing. Every 20 minutes, the operator must look away from display screens at an object at least 20 feet away for at least 20 seconds, to help relieve digital eye strain. Arrange coverage so a visual break does not leave a critical feed unattended; this eye-care practice does not replace task rotation or rest.
3. Console Shift Rotation: Use the approved roster and relief arrangements. NPSA recommends brief periods around 20 minutes for intensive vigilance tasks; arrange suitable task changes or breaks while maintaining continuous security coverage. This is general human-factors guidance, not a universal published two-hour SIRA rule.
4. Ergonomic Environmental Controls: Provide suitable diffuse lighting, comfortable temperature and adjustable supported seating. Control glare and reflections and report discomfort or fatigue; follow the approved room design rather than assuming one lighting or temperature range suits every console.

---

Evidence Handling, Export Formats & Strict Chain of Custody

Surveillance video captured within the Emirate of Dubai is protected by stringent legal confidentiality standards. Article 44 of the Cybercrime Law covers specified digital acts intended to invade private or family life without consent outside legally authorised cases. Protect recordings from unauthorised access or disclosure; the applicable offence and circumstances determine criminal liability and penalties.

1. Personal Devices and Control-Room Confidentiality

The manual’s security monitoring operations-centre requirements prohibit filming with mobile phones and using the room or systems for non-security purposes. Do not photograph monitors, make personal copies or share footage in private chats. Follow the site’s device-storage and access policy; do not confuse a local phone-possession rule with the manual’s filming prohibition. Report a breach immediately and preserve the facts. Employment, licensing and criminal outcomes depend on the applicable rules and decisions, rather than one automatic blacklist or sentence.

2. Export Video Format Standards under the 2025 Manual

Under Administrative Resolution No. (13) of 2025, technical specifications govern how video evidence must be exported and packaged:

• Standard Playable Video Formats: Exported footage must be transferable to standard storage media (such as USB flash drives, external solid-state drives, or optical media) in standard playable video formats that can be displayed on standard media playback systems without requiring specialized proprietary software licenses.
• Provision of Dedicated Playback Software for Nonstandard Files: If an exported video uses a nonstandard or proprietary container format (which may be utilized by specific NVR manufacturers to maintain cryptographic hashing, digital watermarks, or multi-camera synchronized playback), provide the software needed to view those files on Windows computers. Include the required player with the handover where permitted and verify compatibility; do not assume every proprietary file opens without installation on any computer.

3. Authorised Access and Release Protocols

Guards must not provide casual viewing, copies or personal-phone recordings to tenants, visitors, insurers or friends. Refer requests to the authorised manager, who must establish the lawful purpose, identity of the recipient and applicable disclosure procedure.

Police, SIRA and Public Prosecution requests require prompt cooperation through the proper channel. Internal review and any other disclosure likewise need an authorised purpose and applicable safeguards; the guard does not decide privately who may see the footage. Keep access limited and logged, preserve material needed for an investigation, and do not post it online.

Handling Public or Tenant Requests: Explain: "I cannot release or show recordings at the desk. I will refer your request to the authorised manager. Please report any crime or collision through the appropriate police channel so the relevant evidence can be preserved and requested." Record the request and alert control-room staff promptly where footage may otherwise be overwritten.

4. CCTV Chain of Custody & Evidence Handover Protocol

When video footage is requested by Dubai Police or SIRA for an official investigation, security personnel must execute a rigorous, tamper-proof Chain of Custody protocol:

1. Verify Official Credentials: Inspect and record the requesting police officer's name, rank, military ID number, police station, and official incident/case reference number.
2. Authorized Export: Under supervisory approval, extract the exact requested video clip from the 31-day archive, recording camera identifiers, the requested time range, any known clock offset and the approved integrity check.
3. Format & Software Verification: Ensure the export is saved in a standard playable format, or verify that dedicated standalone viewing software is bundled alongside proprietary files.
4. Media Packaging & Labeling: Use the approved clean, secure storage media and transfer procedure; do not use an untrusted personal USB drive. Permanently label the media exterior with: site name, camera numbers, incident date and time range, export date, and unique media tracking serial number.
5. Complete Handover Register: Both the releasing security supervisor and the receiving police officer must sign the official Video Evidence Handover Form, detailing:
   • Date, hour, and minute of transfer.
   • Exact start time, end time, and camera IDs.
   • Crime/incident reference number.
   • Full name, rank, and ID of receiving officer.
   • Full name and SIRA license number of exporting officer.
6. Permanent Documentation & Audit Trail: Log a complete, factual record of the handover in the facility Daily Occurrence Book (DOB) and preserve the internal VMS export audit log for regulatory compliance inspection.