Skip to content Skip to sidebar Skip to footer

How to build an audit-ready video surveillance strategy

Michael Jones, Regional Sales Manager for the Gulf South Region at Salient Systems, looks at the challenges which arise between recording and retrieving video.

The fastest way to tell whether a healthcare facility’s surveillance program is audit-ready is to ask one question: “Can you show me what happened yesterday around 2:15am?”

If the team starts bouncing between systems, calling IT or scrolling through footage, the answer is clear. The cameras may be working perfectly, but if it takes 30 minutes to find what you need, the program isn’t audit-ready, it’s just recording.

That gap between recording and retrieving is where most challenges arise. And in healthcare, it happens often.

Audit-readiness is a strategy, not a feature

Hospital security faces far more scrutiny than it did a few years ago.

Workplace violence is a major driver, alongside accreditation reviews, liability claims, patient-safety investigations, HR matters and law enforcement requests.

Increasingly, security leaders don’t just need video, they need to build a timeline quickly that shows exactly what happened and who was involved.

No single product delivers that. Audit-readiness is the sum of decisions across retrieval, system integration, retention and access governance; each made so the record you need is complete, accurate and available the moment someone asks for it under pressure.

Design for the investigation, not just the live wall

The most common mistake is designing for live monitoring rather than investigations.

Camera counts, megapixels and coverage all matter, but they aren’t the questions that matter most later: how long does it take to find an incident? Can operators search across multiple cameras at once?

Those turn out to matter far more once the system is in the ground.

Retrieval gets neglected because cameras are what everyone sees. It is easy to justify adding another camera; retrieval is less visible, so it slides down the list until an incident happens.

Then everyone wants answers immediately, and it becomes clear that the software and search tools matter as much as the cameras.

Retrieval is the core of the strategy

Consider a workplace-violence incident in an emergency department. Leadership wants to know what happened, HR wants the facts, security is investigating and law enforcement is sometimes involved.

When synchronized video, badge events and door activity can be pulled in a few minutes, everyone makes decisions faster.

When it takes half a day to assemble, valuable time is already lost. In practice, the investigation begins with how easily the evidence can be found.

Baton Rouge General Health System, a not-for-profit system serving multiple parishes in Louisiana, upgraded for exactly this reason.

On its legacy platform, a department leader’s request for incident video meant a daunting, time-consuming search. The footage existed, but finding it was the bottleneck.

The health system needed a platform that could do what its operation required, and CompleteView made that practical: with video searchable by time and area, a search that once dragged now returns the desired footage in minutes.

Footage that can’t be found on demand may as well not exist when an investigator is waiting.

The defensible record is a joined one

Video tells only part of the story. When someone enters a restricted area, the camera shows them walking in – but not who opened the door, whether it was their own badge, whether they tailgated behind another employee or whether a forced-door alarm was triggered.

Combining video with access control and other system data replaces guesswork with proof, which is a far stronger position in an audit or legal matter.

This is why an open platform matters more than a closed one. A single-vendor stack is often assumed to be safer for evidence integrity, but in healthcare that rarely matches reality.

Most hospitals have grown over time – acquiring facilities, renovating buildings and inheriting different systems – so very few are truly single-vendor.

An open platform that integrates cleanly with existing systems, while maintaining strong audit trails, offers flexibility without sacrificing evidence integrity.

That’s what Baton Rouge General built. Because CompleteView is an open platform, the health system added video to its existing access control instead of replacing it.

Now an evening lockdown narrows the campus to a single point of entry, and any door access instantly pulls up the camera for the dispatcher who can see whether it was propped or who came and went.

The badge event and the video become one record exactly what an audit-ready program is built to produce.

Govern retention and access on purpose

Retention and access governance is the piece most programs underbuild and it is exactly what auditors ask about.

A retention window shouldn’t be chosen simply because it’s what has always been used; it should reflect risk, and different departments may warrant different policies.

Just as important are the controls around who can search footage, who can export it, and how those exports are tracked. The goal is ensuring the right people have access while protecting the integrity of the evidence.

Build it for the day you’ll be asked to prove it

Blanket numbers are hard to defend, because every environment is different. What holds true across them is that investigations once measured in hours can be narrowed to minutes when operators no longer dig through video by hand.

Saving an hour on every investigation adds up quickly over a year but the larger benefit is confidence.

When leadership, HR or law enforcement asks for evidence, an audit-ready program can produce it quickly and stand behind its completeness.

As Baton Rouge General’s Director of Security, put it: “In security, our work is never done.” Audit-readiness reflects that.

It is not a box to check once, but a posture to design and revisit as facilities, risks and technology change.

Ask yourself one question: If an incident happens tomorrow, a claim is filed or a surveyor walks through the door, could your team immediately produce a complete, accurate record and stand behind it with confidence?

Build your security program with that standard in mind, and audit readiness becomes the byproduct, not the goal.

This article was originally published in the September edition of Security Journal Americas. To read your FREE digital edition, click here.

Go to Top