Remote Monitoring for Sensitive Sites and Critical Infrastructure

A sensitive site or critical national infrastructure (CNI) refers to a facility whose disruption, whether accidental or malicious, could have serious consequences for the population, the economy or national security. In the UK, this includes sites and assets within the country's Critical National Infrastructure (CNI) sectors, such as energy, communications, transport, water, health and finance. Certain industrial sites handling dangerous substances may also fall under the Control of Major Accident Hazards (COMAH) Regulations 2015.

These facilities face specific risks. A malicious intrusion, whether aimed at stealing equipment, strategic data or sabotaging infrastructure, can have consequences far beyond the site itself. There are also industrial risks specific to the activity: hazardous substance leaks, fires and technical failures. Industrial espionage must not be overlooked either: it is a discreet but very real threat for companies holding strategically important expertise.

Faced with this diversity of threats, human surveillance alone quickly shows its limitations. An officer can only cover a limited field of vision, vigilance decreases with fatigue, and the cost of providing 24/7 coverage can quickly become disproportionate across a large perimeter. Regulations also leave little room for approximation: the most sensitive sites may be subject to strict security, safety and resilience requirements that must be followed carefully.

An effective system never relies on a single technology. It combines four complementary functions that transform a simple alert into a controlled response: detect, verify, respond and deter.

An alarm alone does not tell you whether a threat is genuine. The role of the remote monitoring centre is to distinguish between a genuine incident and a false alarm within seconds. This video alarm verification is carried out by trained operators who view live footage and accurately assess the situation before triggering an appropriate response.

The quality of this link can be assessed against relevant UK standards. BS EN 50518, for example, sets requirements for monitoring and alarm receiving centres, while BS 8418 covers the design, installation, commissioning, maintenance, operation and remote monitoring of detector-activated CCTV systems.

Each alarm follows a precise handling protocol, with procedures defined in advance and direct coordination with the police, emergency services or security personnel present on site, where appropriate.

The remote monitoring centre can be seen as the control tower of the system: it transforms a raw alert into a qualified, rapid and proportionate response.

The most effective security system is often the one that never needs to intervene. A visible remote monitoring system known for its responsiveness creates a strong deterrent effect, discouraging an incident before an attempt is even made.

Predictive analysis takes this approach further. By identifying abnormal patterns of behaviour, artificial intelligence can flag a potentially risky situation before a conventional alarm is even triggered. Continuous innovation now makes it possible to anticipate threats rather than simply react to them.

But a connected system is also a target. The cybersecurity of security equipment has become a critical consideration in its own right. Encryption of video streams, network security and protection against ransomware are no longer optional: they are essential conditions for ensuring that a security system does not itself become a vulnerability.

Service continuity also depends on redundant communication links. Fibre, 4G/5G and satellite: using multiple transmission channels helps ensure that the system remains operational even if one connection is interrupted or fails.

It is this trusted orchestration between technologies, procedures and relevant UK standards that makes the difference between a system that performs well on paper and one that remains genuinely reliable over time.

Every site is different. Designing a remote monitoring system therefore follows a rigorous four-step methodology.

This methodology enables our clients to benefit from a single point of contact, from initial assessment through to long-term monitoring and support, rather than having to manage multiple providers.

Modern remote monitoring is no longer simply an option for sensitive sites and critical national infrastructure: it is a technological and human ecosystem that has become essential. Detection, verification, response and deterrence combine to provide protection that matches the challenges involved, while operating within a strict regulatory and security framework.

The future of the sector is already taking shape: predictive artificial intelligence, increasing automation and ever-greater integration between systems. Anticipating these developments today means remaining prepared for tomorrow's threats.

Your infrastructure is unique, and its security should be too. Contact our SCUTUM experts to carry out a comprehensive security audit and design the remote monitoring solution suited to your requirements.

Video surveillance is primarily used to record and view footage. Remote monitoring goes further: it provides active surveillance through a monitoring centre that processes alerts in real time using trained operators.

Video alarm verification makes it possible to quickly confirm an intrusion or incident before triggering an appropriate response. On a sensitive site, these systems will typically incorporate advanced technologies such as perimeter detection, intelligent video analytics, access control and additional sensors. Response procedures are adapted to the specific requirements of each critical site.

→ Video Surveillance vs. Remote Monitoring: What Is the Difference for Your Business? | Scutum

The use of video surveillance systems in the UK must comply with applicable data protection requirements, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Organisations using surveillance systems must identify an appropriate lawful basis, provide transparent information to individuals where required, use surveillance proportionately and ensure that recorded information is securely stored and accessed only by authorised people.

The Information Commissioner's Office (ICO) also recommends clear and visible signage informing people that surveillance is in operation and explaining who operates the system and why it is being used. There is no universal statutory retention period for CCTV footage under the UK GDPR and Data Protection Act 2018: retention should be limited to the shortest period necessary for the purpose for which the footage was collected.

Certain sensitive sites and regulated activities may also be subject to additional security and resilience requirements. For example, sites covered by the COMAH Regulations 2015 are subject to specific requirements relating to the prevention and mitigation of major accidents involving dangerous substances.

Video footage should be encrypted where necessary during transmission and storage. Access should be restricted to authorised individuals, with appropriate authentication and audit measures in place to ensure traceability.

Footage should only be accessed for legitimate purposes defined by the organisation's procedures, such as an alarm, security incident or investigation. Additional cybersecurity measures can further reduce the risk of unauthorised access.

Under UK data protection guidance, recorded information should be stored securely in a way that preserves its confidentiality, integrity and availability, with access restricted to authorised individuals.