CCTV System Documentation Standards and Best Practices: What Every Installation Should Include

Why Documentation Matters More Than You Think

A CCTV system without proper documentation is a bit like a building without a floor plan. Everything looks fine until something goes wrong — a camera fails, a technician needs to trace a cable, a police officer requests footage from a specific time, or a new property manager takes over and has no idea how the system is configured. At that point, the absence of documentation becomes a real, expensive problem.

Good documentation serves multiple functions simultaneously. It protects the installer by proving what was agreed and delivered. It protects the property owner by ensuring the system can be serviced, extended, and operated correctly by anyone with access to the records. It supports legal and compliance requirements, particularly relevant as Kenya’s Data Protection Act 2019 places obligations on organisations operating surveillance systems. And it creates a paper trail that can be the difference between usable evidence and a failed investigation.

Documentation is not glamorous work. It doesn’t show up on a quote line or make for interesting conversation. But among professional security installers, the quality of a company’s documentation is one of the most reliable indicators of how seriously they take their work overall.

1. The Site Survey Report

The site survey is the foundation of any properly planned CCTV installation. It happens before any equipment is purchased or installed, and the report that comes from it should inform every decision that follows. A verbal site visit with no written record is not a site survey — it is just a conversation.

What a Site Survey Report Should Contain

A thorough site survey report documents the physical environment the system will operate in. This means a description of the property — its layout, construction type, number of floors, access points, perimeter boundaries, and existing infrastructure. It should identify the specific areas and objectives of surveillance: which zones need coverage, what level of detail is required at each position (detection, recognition, or identification), and any environmental constraints like lighting conditions, reflective surfaces, or areas of high sun exposure.

The report should include a risk assessment — where are the most likely points of entry, what are the highest-value assets, what are the current security gaps? This drives camera placement decisions rationally rather than by guesswork or convenience.

Existing infrastructure should be assessed: is there existing cabling that can be reused, where is the proposed DVR/NVR location, is there a reliable power supply at that location, and what is the internet connectivity situation for remote viewing? For IP systems, the network infrastructure — router capability, available ethernet ports, Wi-Fi coverage — should be assessed and recorded.

The site survey report should be a written document, signed by both the installer and the client, before any quotation is finalised. It forms part of the agreement between both parties and protects both sides if there are later disputes about scope or deliverables.

2. System Design Document

The system design document translates the site survey findings into a technical specification for the installation. It is the blueprint for what will be installed, where, and why — and it should exist before a single cable is run or a bracket is drilled into a wall.

Camera Schedule

The design document specifies every camera in the system: its position (described in text and shown on a layout diagram), its type (bullet, dome, PTZ), its resolution, its field of view angle, the lens focal length, and whether it is indoor or outdoor. For outdoor cameras, it should note the IP rating and whether a drip ledge or additional housing is required.

System Architecture

This section specifies the recording unit — DVR or NVR, brand and model, channel count — along with the hard drive specification (brand, capacity, RPM, rated for 24/7 operation), UPS specification, and any network equipment required. For IP systems, it documents the PoE switch (if separate from the NVR), router, and cabling plan including cable types and estimated run lengths.

Coverage Map

A coverage map is a floor plan or site plan with camera positions marked, field-of-view cones drawn, and any blind spots identified. This does not need to be an architect-level drawing — a clear sketch drawn to rough scale is sufficient. What it must show is that every critical area is covered and that there are no significant gaps in surveillance. The coverage map is also a useful record for future maintenance or expansion.

3. As-Built Drawings

The system design document describes what was planned. The as-built drawings record what was actually installed — because the two are never perfectly identical. In practice, cable routes change when you discover a concrete beam in an unexpected place, camera positions shift slightly when you find the original angle is blocked by a sign, and component models sometimes change when a specified item is out of stock at the supplier.

As-built drawings are updated from the design documents during or immediately after the installation. They should show the actual camera positions and angles as installed, the exact cable routes (including which walls and ceilings the cables pass through), the location of the DVR/NVR and all junction boxes, and the location of the power distribution board.

These drawings are invaluable for future maintenance — a technician coming to replace a failed camera or trace a cable fault years after installation needs to know where things actually are, not where they were supposed to be. Without as-built drawings, every maintenance visit involves rediscovering the installation from scratch, which costs time and money every single time.

“As-built drawings are the difference between a 30-minute fault-finding visit and a three-hour investigation every time something goes wrong.”

4. Equipment Schedule and Component Register

The equipment schedule is a complete inventory of every component installed in the system. This sounds straightforward, but it’s remarkable how often this basic record doesn’t exist — leaving owners unable to identify what they have, what warranty applies, or where to source replacement parts when something fails.

Serial numbers are particularly important. When a camera fails and a warranty claim needs to be made, the serial number is the reference the supplier needs. Without it, warranty claims are difficult to process and owners often end up paying for replacements that should have been covered.

5. Cable Register and Labelling Standards

A cable register is a document that maps every cable in the system — from which camera it originates, through which route it travels, to which DVR/NVR channel it terminates at. Combined with physical cable labelling at both ends, it transforms a future fault-finding exercise from a guessing game into a straightforward lookup.

Physical Labelling

Every camera should be labelled with a unique identifier — typically CAM-01, CAM-02, and so on, or a descriptive label like GATE-CAM or RECEPTION-CAM. That same label should appear at the DVR/NVR end of the cable and in the on-screen camera name configured in the recording software. When all three match, there is never any ambiguity about which physical camera corresponds to which channel on the recorder or which feed on the phone app.

Cable Labelling

For larger installations with multiple cable runs, each cable should be labelled at both ends using durable cable markers or heat-shrink labels. This is particularly important in cable trays, conduit entries, and junction boxes where multiple cables run together. The cable label should reference the camera it serves and the DVR channel it connects to.

6. System Configuration Record

This is the document that most installations in Kenya completely omit — and its absence causes more frustration than almost any other documentation gap. The configuration record captures every software setting in the DVR/NVR that someone would need to know if they had to access, troubleshoot, or reconfigure the system from scratch.

What the Configuration Record Should Include

7. Commissioning and Handover Checklist

The commissioning checklist is completed at the end of the installation, before the client signs off on the work. It confirms that every aspect of the system has been tested and verified — not just installed. A system that looks installed but hasn’t been tested is not a delivered system.

Camera and Coverage Verification

• Every camera is live and displaying a clear image on the monitor
• Camera angles match the approved design and coverage map
• No significant blind spots in critical coverage areas
• Night vision / IR is functional on each camera (tested in low-light conditions)
• WDR or backlight compensation is correctly configured for high-contrast positions
• Camera labels on screen match physical camera labels and DVR channel labels

Recording System Verification

• Hard drive is detected and operational at full rated capacity
• Recording is active on all configured channels
• Playback works correctly — footage can be retrieved and reviewed
• Recording schedule is configured as agreed with the client
• Overwrite is configured correctly so the system doesn’t stop recording when the HDD fills
• Time and date are correctly set and synced

Remote Access Verification

• Client can view live footage on their phone via the agreed app
• Remote playback is functional
• Motion alert notifications are working and arriving on the correct device
• Remote access tested from outside the local network (i.e., on mobile data, not Wi-Fi)

Client Handover

• Client has been shown how to view live footage on monitor and on phone
• Client has been shown how to review and export recordings
• Client has been given all login credentials in writing
• Client has been given all documentation listed in this guide
• Client has signed a completion certificate confirming acceptance of the system
• Warranty terms have been explained and documented

The completion certificate is a short, signed document confirming that the installation has been delivered as specified, the client has accepted it, and both parties agree on the warranty terms and support arrangement going forward. It protects both the installer and the client by creating a clear record of what was delivered and when.

8. User Manual and Operating Procedures

A system that the owner cannot operate confidently is a system that will not be used effectively. The user manual does not need to be a thick technical document — a clear, site-specific guide covering the everyday tasks the owner will actually need to perform is far more useful than a manufacturer PDF written for a general audience in a foreign language.

What a Good User Manual Covers

The manual should cover, in plain language: how to log into the DVR/NVR on the local monitor, how to switch between live view and playback, how to search for footage by date and time, how to export a clip to a USB drive, and how to view cameras remotely on the phone app. It should include the specific steps for the actual model installed — not generic instructions — with screenshots where possible.

It should also cover basic troubleshooting: what to do if a camera shows a blank screen, how to check if the hard drive is recording, and who to call and what information to have ready if a fault cannot be resolved without a site visit.

Emergency procedures are worth including: what is the process if an incident occurs and footage needs to be preserved before the system overwrites it? Many owners don’t realise that a DVR set to continuous overwrite will eventually record over an incident if they don’t export the footage. The manual should specify how long footage is retained and what steps to take immediately after an incident to preserve it.

9. Maintenance Log and Service Records

Every service visit — whether a routine maintenance check or a fault repair — should be recorded in a maintenance log. This creates a history of the system’s performance over time, which is useful for identifying recurring problems, tracking component age, and demonstrating due diligence to insurers or authorities if the system’s reliability is ever questioned.

What a Service Record Should Document

Recommended Maintenance Frequency in Kenya

Given Kenya’s climate — dust during dry season, humidity and insects during rains, and UV exposure year-round — an annual maintenance visit is the minimum for any serious installation. Commercial properties and those in particularly dusty or humid environments benefit from six-monthly checks. Routine maintenance should include cleaning camera lenses and housing, checking and re-securing any cable fixings that have worked loose, verifying HDD health using the DVR’s built-in diagnostics, checking and updating firmware, and verifying that the UPS battery is holding charge correctly.

10. Footage Request and Incident Log

Every time footage is reviewed following an incident, or when footage is requested by a third party — police, insurer, neighbouring property — that request and the response to it should be documented. This is both a good practice record and, in commercial settings, a compliance requirement under Kenya’s Data Protection Act 2019.

What the Incident Log Should Record

Each entry should note: the date and time of the incident the footage relates to, the date the request was made and by whom, whether footage was found covering the relevant time and camera, what action was taken (footage exported, reviewed internally, provided to police with reference number), and whether any footage was unavailable and why. If footage was unavailable because the recording had been overwritten, that should be documented along with the retention period in effect at the time — this protects the system operator from accusations of deliberate deletion.

11. Data Protection and CCTV Policy

For businesses, schools, apartment blocks, and any organisation operating CCTV in a context where employees, tenants, or members of the public are recorded, a written CCTV policy is both good practice and increasingly a legal expectation under Kenya’s Data Protection Act 2019.

What a CCTV Policy Should Cover

The policy should state the purpose of the CCTV system — why it exists and what it is intended to achieve. It should describe the areas under surveillance and confirm that areas where people have a reasonable expectation of privacy (bathrooms, changing rooms, private offices) are not monitored. It should specify the data retention period — how long footage is stored before being automatically overwritten — which should be no longer than necessary for the stated purpose. Thirty days is the standard commercial retention period in most applications.

The policy should identify who has access to footage — by job title rather than individual name, so the policy survives staff changes — and under what circumstances footage will be reviewed. It should set out the procedure for handling footage requests from data subjects (individuals who appear in the footage and request to see it) and from law enforcement. It should state that footage will not be shared with third parties without a lawful basis for doing so.

For organisations with employees, the CCTV policy should be communicated to all staff and acknowledged in writing. CCTV signage at all monitored entrances is a minimum legal and ethical requirement for any commercial or organisational setting.

CCTV Documentation in the Kenyan Context

The documentation standards described in this guide are based on professional best practice internationally, adapted to the realities of the Kenyan security installation market. The honest picture is that documentation standards vary enormously among installers in Kenya — from companies that provide a thorough handover pack to those who hand over a system with nothing in writing at all.

There are a few particular documentation gaps that come up repeatedly in the Kenyan market:

No Written Agreement Before Work Begins

A significant number of installations proceed on the basis of a verbal quote and a handshake. Without a written scope of work — specifying exactly what is to be installed, the brand and model of each component, the warranty terms, and the payment schedule — disputes about what was agreed are almost impossible to resolve fairly. Any installation costing more than KES 15,000 warrants a written agreement signed by both parties before work begins.

No Credentials Provided at Handover

It is surprisingly common for Kenyan property owners to have a CCTV system installed and not receive the DVR/NVR admin password in writing. Some installers — intentionally or otherwise — retain this information, creating a dependency relationship. Every client has a right to full administrative access to their own system. If your installer won’t provide the login credentials, that is a serious concern.

No Record of the Remote Access Configuration

Remote viewing on a phone involves configuring the DVR/NVR with a specific app, P2P UID, or DDNS hostname. This configuration is invisible to the user and cannot easily be reconstructed without the original installer’s knowledge of how it was set up. When a system is replaced, the router is changed, or a new phone needs to be configured, the absence of this record means starting from scratch — or calling the original installer and hoping they remember.

What to Ask Your Installer About Documentation

Before committing to any CCTV installer in Kenya, these are the documentation-related questions worth asking directly:

• Will you provide a written site survey report before the installation begins? If the answer is no, the system design is based on impressions rather than a structured assessment.
• Will you provide a coverage map showing where each camera is positioned and what it covers? This is the minimum visual documentation of the installation.
• Will I receive an equipment list with make, model, and serial numbers for every component? This is essential for warranty claims and future servicing.
• Will you provide all login credentials in writing at handover? DVR/NVR admin password, remote app credentials, and any cloud account details.
• Will you demonstrate how to use the system and provide written operating instructions? Verbal training is forgotten. Written instructions are referred to for years.
• Do you provide a written completion certificate at handover? This confirms the system has been tested and accepted.
• Do you offer a maintenance contract, and does it include service records? A company that maintains records has skin in the long-term performance of the system.

A professional installer will answer yes to all of these questions without hesitation. Hesitation or vague answers on any of these points is a signal worth taking seriously before the contract is signed.

Frequently Asked Questions

Documentation Is Part of the Installation

A professionally installed CCTV system and a well-documented CCTV system are not the same thing — but they should be. The hardware is what you see. The documentation is what makes it maintainable, legally defensible, and genuinely useful beyond the day it is switched on.

For property owners in Kenya, the practical takeaway is this: before accepting any CCTV installation as complete, ensure you have the equipment list, the login credentials, the coverage diagram, and the operating instructions in your hands. If your current system lacks these, it is not too late to build that documentation — start with what you can access now and work from there.

For anyone planning a new installation, ask about documentation standards before you sign anything. The installers who take documentation seriously tend to be the same ones who take everything else seriously too. It is one of the most reliable indicators of professional quality in a market where quality varies enormously.