https://hans.study/books/cctv-and-access-control/https://hans.study/books/cctv-and-access-control/cover.jpgThe Study Guide to CCTV and Access Control Systems, front coverFront cover of The Study Guide to CCTV and Access Control Systems: A Field Reference for Working Integrators and Security Technicians, by Hans Study, CISSP. First edition, 2026. Padlock over door and rack installation drawings, with a wireframe city skyline.https://hans.study/cpcsc_book/https://hans.study/cpcsc_book/cover.jpgThe Study Guide to CPCSC Readiness, front coverFront cover of The Study Guide to CPCSC Readiness: A Field Reference for Canadian Defense Suppliers, by Hans Study, CISSP. First edition 2026, revision 1.3, October 2026. A worn Canadian flag over a map of Canada on a dark circuit background.https://hans.study/cpcsc_book/back.jpgThe Study Guide to CPCSC Readiness, back coverBack cover of The Study Guide to CPCSC Readiness by Hans Study, CISSP: the book summary, an author photo and bio, revision 1.3, October 2026, and the ISBN 978-1-0680175-2-0 barcode.https://hans.study/books/network-and-system-hardening/https://hans.study/books/network-and-system-hardening/cover.jpgThe Study Guide to Network and System Hardening, front coverFront cover of The Study Guide to Network and System Hardening: A Field Reference for Systems and Security Integrators, by Hans Study, CISSP. First edition, 2026. Engineering-drawing block with a glowing padlock over a network and identity schematic.https://hans.study/about/https://hans.study/images/hans-study.jpgHans Study, CISSP, headshot (square)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/images/hans-study-portrait.jpgHans Study, CISSP, headshot (portrait)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/images/hans-study-headshot_wide.jpgHans Study, CISSP, headshot (wide banner)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/who-is-hans-study/https://hans.study/images/hans-study.jpgHans Study, CISSP, headshot (square)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/images/hans-study-portrait.jpgHans Study, CISSP, headshot (portrait)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/images/hans-study-headshot_wide.jpgHans Study, CISSP, headshot (wide banner)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/media/https://hans.study/images/hans-study.jpgHans Study, CISSP, headshot (square)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/images/hans-study-portrait.jpgHans Study, CISSP, headshot (portrait)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/images/hans-study-headshot_wide.jpgHans Study, CISSP, headshot (wide banner)Hans Study, Independent Network and Security Consultant, Ontario, Canadahttps://hans.study/isacc/https://hans.study/og/isacc.pngI.S.A.C.C. title cardI.S.A.C.C.: Intelligence, Security, Analytics, Command and Control. In development at Hans Study, Ontario, Canada.https://hans.study/axis-camera-station-pro-6-14-ai-analytics-search/https://hans.study/images/articles/axis-camera-station-pro-6-14.webpAxis Camera Station Pro 6.14: AI, Analytics, and Search Have Finally Caught UpAXIS Camera Station Pro reached version 6.14 in mid-2026, and the AI/analytics/search story is finally cohesive. Smart Search 2 with free text, Object Analytics integration, Data Insights dashboards, License Plate Verifier maturation. A field-level review of what works, what doesn't, and where it fits in a real deployment.https://hans.study/bill-c-8-ccspa-critical-infrastructure/https://hans.study/api/og.svg?title=Bill+C-8+Is+Law.+What+the+CCSPA+Means+If+You+Service+Critical+Infrastructure&kind=PostBill C-8 Is Law. What the CCSPA Means If You Service Critical InfrastructureBill C-8 received Royal Assent on 15 June 2026. Part 1 is already in force. The Critical Cyber Systems Protection Act is not, and Schedule 2 is still empty. Here is what is actually binding today, and why the supply chain clauses reach the people who install and maintain the systems.https://hans.study/ccsra-how-dnd-decides-your-cpcsc-level/https://hans.study/api/og.svg?title=The+CCSRA%3A+How+DND+Will+Decide+Which+Level+Your+Contract+Carries&kind=PostThe CCSRA: How DND Will Decide Which Level Your Contract CarriesCPCSC levels are not chosen by suppliers. A cyber security risk assessment on each contract decides. What it weighs, and how to read your own contracts first.https://hans.study/configuring-and-tuning-genetec-security-center/https://hans.study/api/og.svg?title=Genetec+Security+Center%3A+Server+Configuration+and+Performance+Tuning&kind=PostGenetec Security Center: Server Configuration and Performance TuningPower plan, NIC buffers, SQL Server memory, antivirus exclusions, video drive configuration, and camera stream settings for Genetec servers.https://hans.study/cpcsc-applies-if-you-build-to-print/https://hans.study/api/og.svg?title=Does+CPCSC+apply+if+I+only+make+parts+to+my+customer%27s+drawings%3F&kind=PostDoes CPCSC apply if I only make parts to my customer's drawings?A shop that machines or fabricates to a customer's drawings is in CPCSC if those drawings are Specified Information. How to check, and where the edge cases sit.https://hans.study/cpcsc-camera-systems/https://hans.study/api/og.svg?title=Does+my+camera+system+need+to+be+CPCSC+compliant%3F&kind=PostDoes my camera system need to be CPCSC compliant?Your VMS doesn't hold blueprints, but it watches the factory floor. How to tell whether a camera system falls inside CPCSC scope, and what to change if it does.https://hans.study/cpcsc-flow-down-what-your-prime-will-ask/https://hans.study/api/og.svg?title=Flow-Down+Is+Coming%3A+What+Your+Prime+Will+Ask+Before+They+Can+Bid&kind=PostFlow-Down Is Coming: What Your Prime Will Ask Before They Can BidCPCSC will not stop at the prime. Allied programs already cascade cyber requirements down every subcontract tier. What lower-tier suppliers need to have ready.https://hans.study/cpcsc-level-1-evidence-prime-will-ask/https://hans.study/api/og.svg?title=What+evidence+will+my+prime+ask+for+at+CPCSC+Level+1%3F&kind=PostWhat evidence will my prime ask for at CPCSC Level 1?Level 1 is a self-assessment, so evidence is mostly yours to keep. What PSPC says to retain, what a prime is likely to ask for, and how to organize it.https://hans.study/cpcsc-level-1-multifactor-authentication/https://hans.study/api/og.svg?title=Do+I+need+multi-factor+authentication+for+CPCSC+Level+1%3F&kind=PostDo I need multi-factor authentication for CPCSC Level 1?Yes. MFA is one of the 13 Level 1 requirements, 03.05.03. Plan for all accounts, even though PSPC's how-to words the duty more narrowly.https://hans.study/cpcsc-level-2-readiness-how-long/https://hans.study/api/og.svg?title=How+long+does+CPCSC+Level+2+readiness+take+for+a+small+shop%3F&kind=PostHow long does CPCSC Level 2 readiness take for a small shop?My estimate is about 6 months of part-time work for a contained shop and about 18 for a flat network. What PSPC has and hasn't published on Level 2 timing.https://hans.study/cpcsc-physical-security-access-control-cctv/https://hans.study/api/og.svg?title=Physical+security+and+CPCSC%3A+getting+access+control+and+CCTV+ready&kind=PostPhysical security and CPCSC: getting access control and CCTV readyWhat the ITSP.10.171 physical protection requirements ask of card access and camera systems, the configuration that holds up, and the evidence an assessor will want to see.https://hans.study/cpcsc-security-integrators/https://hans.study/api/og.svg?title=Security+integrators+and+CPCSC%3A+what+changes%2C+and+how+to+get+ahead&kind=PostSecurity integrators and CPCSC: what changes, and how to get aheadCPCSC reaches security integrators through project files, remote support, and the devices they install. Where integrators fall in scope and how to get ahead of it.https://hans.study/cpcsc-what-counts-as-specified-information/https://hans.study/api/og.svg?title=What+counts+as+Specified+Information+under+CPCSC%3F&kind=PostWhat counts as Specified Information under CPCSC?Specified Information is government information a contract says must be protected on a supplier's systems. The contract decides, and so do you, when scoping.https://hans.study/flat-network-problem-cpcsc-level-1-small-shop/https://hans.study/api/og.svg?title=The+Flat+Network+Problem%3A+Level+1+From+Inside+a+30-Person+Shop&kind=PostThe Flat Network Problem: Level 1 From Inside a 30-Person ShopCAD, CNC controllers, office PCs, and the owner's laptop on one flat network behind a home router. Getting from there to a defensible CPCSC Level 1 attestation.https://hans.study/fortibleed-credential-hygiene/https://hans.study/og/fortibleed-credential-hygiene.pngThe Firewall Did Its Job: What FortiBleed Was Really AboutFortiBleed wasn't a firewall flaw. It was a pile of reused, never-rotated credentials with a brand name attached. The lesson is older than the headline.https://hans.study/genetec-5-9-end-of-life/https://hans.study/og/genetec-5-9-eol.pngGenetec Security Center 5.9 Is End of LifeSecurity Center 5.9 stopped getting security patches in December 2025. What end of life actually means for operators, and how to plan the move before somebody else picks the date.https://hans.study/genetec-archiver-storage-and-retention-design/https://hans.study/api/og.svg?title=Genetec+Archiver+Storage+and+Retention%3A+The+Maths%2C+the+Disks%2C+and+Where+Archivers+Actually+Fall+Over&kind=PostGenetec Archiver Storage and Retention: The Maths, the Disks, and Where Archivers Actually Fall OverRetention arithmetic that survives contact with real bitrates, throughput per Archiver and per volume, RAID and drive selection, iSCSI versus SMB, and the failure modes that produce missing video.https://hans.study/genetec-security-center-5-13-3-release-review/https://hans.study/images/articles/genetec-5-13-3.jpgGenetec Security Center 5.13.3.0: What's New, What Actually Matters, and What We're Still Waiting ForField-level look at Genetec Security Center 5.13.3.0 (May 2026). What changed since 5.13.2.0, which features are worth the upgrade, which are marketing fluff, and the gaps that keep getting punted release after release.https://hans.study/genetec-security-center-5-14-outlook/https://hans.study/images/articles/genetec-5-14.jpgGenetec Security Center 5.14.0.0: What's Coming, What's Already Here, and When to UpgradeSecurity Center 5.14.0.0 released on May 12, 2026. Web App replaces Web Client, custom privilege templates land, the media component goes 64-bit, and HID VertX/Edge gets its retirement notice. What's in the release and why my upgrade clock starts at 30 to 60 days, not day 1.https://hans.study/genetec-security-center-active-directory-deployment/https://hans.study/api/og.svg?title=Deploying+Active+Directory+for+Genetec+Security+Center+Environments&kind=PostDeploying Active Directory for Genetec Security Center EnvironmentsAD prerequisites, OU structure, service accounts, Group Policy, Kerberos configuration, and common pitfalls for Genetec AD integration.https://hans.study/genetec-security-center-architecture-roles-workstations/https://hans.study/api/og.svg?title=Genetec+Security+Center%3A+Architecture%2C+Roles%2C+and+Workstation+Best+Practices&kind=PostGenetec Security Center: Architecture, Roles, and Workstation Best PracticesGenetec Security Center server role architecture, sizing guidance, workstation optimization, federation, and common design mistakes.https://hans.study/genetec-security-center-hardening/https://hans.study/api/og.svg?title=Hardening+Genetec+Security+Center%3A+The+Baseline+I+Deploy&kind=PostHardening Genetec Security Center: The Baseline I DeployA practical hardening baseline for a Genetec Security Center deployment. Windows server baselines, Defender exclusions done right, service-account discipline, SQL, segmentation, certificates, and RBAC. The settings that survive an audit and a real recording load.https://hans.study/genetec-vs-milestone-vs-avigilon-enterprise-multi-site/https://hans.study/api/og.svg?title=Genetec+vs+Milestone+vs+Avigilon+for+Enterprise+Multi-Site%3A+An+Opinionated+Comparison+From+the+Field&kind=PostGenetec vs Milestone vs Avigilon for Enterprise Multi-Site: An Opinionated Comparison From the FieldWhere each platform actually wins on multi-site enterprise deployments: unification versus openness versus integration, licensing shape, federation, analytics, hardening posture, the integrator community in Canada, and a decision table you can argue with.https://hans.study/hardening-aruba-cx-switches-aos-cx-baseline/https://hans.study/api/og.svg?title=Hardening+HPE+Aruba+CX+Switches+Running+AOS-CX%3A+A+Practical+Baseline&kind=PostHardening HPE Aruba CX Switches Running AOS-CX: A Practical BaselineA hardening baseline for HPE Aruba CX access and distribution switches on AOS-CX: SSH on the management VRF, AAA, SNMPv3, authenticated NTP, DHCP snooping, ARP inspection, port security, and a blackhole VLAN.https://hans.study/hardening-cisco-catalyst-switches-ios-xe-baseline/https://hans.study/api/og.svg?title=Hardening+Cisco+Catalyst+Switches+Running+IOS-XE%3A+A+Practical+Baseline&kind=PostHardening Cisco Catalyst Switches Running IOS-XE: A Practical BaselineA working hardening baseline for Cisco Catalyst access and distribution switches on IOS-XE, from SSH-only management and SNMPv3 to DHCP snooping, DAI, and a blackhole VLAN, with the static-IP camera caution.https://hans.study/iec-62443-zones-conduits-small-plant-example/https://hans.study/api/og.svg?title=IEC+62443+Zones+and+Conduits+for+a+Small+Plant%2C+Worked+Through&kind=PostIEC 62443 Zones and Conduits for a Small Plant, Worked ThroughA worked IEC 62443 zones and conduits example for one small site with 3 PLCs, an HMI, a historian, an engineering workstation, and a vendor remote link, with the rules written in plain language.https://hans.study/ot-asset-inventory-without-active-scanning/https://hans.study/api/og.svg?title=Building+an+OT+Asset+Inventory+Without+Active+Scanning&kind=PostBuilding an OT Asset Inventory Without Active ScanningHow to build an inventory of PLCs, HMIs, drives, and switches on a control network without scanning it, using passive monitoring, switch tables, project files, and walk-downs, and why scans upset PLCs.https://hans.study/ot-network-security-controls/https://hans.study/api/og.svg?title=Security+Controls+for+OT+Networks+That+Hold+Up+in+Production&kind=PostSecurity Controls for OT Networks That Hold Up in ProductionThe security controls an operational technology network actually needs, applied in a way that respects how plant systems run. Zones and conduits, the iDMZ, protocol awareness, passive monitoring, secure remote access, and the patching reality nobody wants to admit.https://hans.study/physical-security-network-hardening/https://hans.study/og/physical-security-network-hardening.pngWhy Your Physical Security System Is the Soft Spot in Your NetworkCameras, card readers, and building controllers are networked computers, installed by people who were never trained to secure a network. A field guide to hardening the systems nobody else will.https://hans.study/purdue-model-in-practice-vs-on-paper/https://hans.study/api/og.svg?title=The+Purdue+Model+in+Practice+Versus+on+Paper&kind=PostThe Purdue Model in Practice Versus on PaperWhere real plants blur the Purdue levels, what the Level 3.5 industrial DMZ is for, and which gaps to fix first on a small or mid-size control network.https://hans.study/sql-server-for-genetec-security-center/https://hans.study/api/og.svg?title=SQL+Server+for+Genetec+Security+Center%3A+Sizing%2C+Maintenance%2C+and+the+Failures+That+Follow+Neglect&kind=PostSQL Server for Genetec Security Center: Sizing, Maintenance, and the Failures That Follow NeglectExpress versus Standard, max server memory, recovery models, autogrowth, index maintenance, event retention, and the SQL failures that take Security Center down.https://hans.study/state-of-cyber-hygiene-ontario/https://hans.study/og/scho-map.pngI Checked the Front Doors of 4,450 Ontario Small Businesses. Most Were Open.A week after the PHP2Shell bug, I looked at the public-facing side of 4,450 small businesses across seven regions of Southwest Ontario for the things I would flag in an audit. At least 149 are exposed to the bug, 83% can be impersonated by email, and most of the fixes are free.https://hans.study/top-genetec-security-center-issues/https://hans.study/api/og.svg?title=The+10+Most+Common+Genetec+Security+Center+Issues+I+See+%28And+How+to+Fix+Them%29&kind=PostThe 10 Most Common Genetec Security Center Issues I See (And How to Fix Them)The ten Genetec Security Center problems I see most often in the field, what they look like under load, and how to fix them. Field-tested, vendor-agnostic.https://hans.study/upgrading-to-genetec-security-center-5-14-runbook/https://hans.study/api/og.svg?title=Upgrading+to+Genetec+Security+Center+5.14%3A+The+Runbook%2C+the+Order+of+Operations%2C+and+What+Breaks&kind=PostUpgrading to Genetec Security Center 5.14: The Runbook, the Order of Operations, and What BreaksThe upgrade night itself: pre-flight checks, the order roles and clients go in, the Web Client retirement, the 64-bit media component, SDK plugins and federation, the rollback decision, and the first week after.https://hans.study/vendor-remote-access-ot-without-forgotten-vpn/https://hans.study/api/og.svg?title=Vendor+Remote+Access+to+OT+Without+the+Forgotten+VPN&kind=PostVendor Remote Access to OT Without the Forgotten VPNHow to give an integrator or equipment vendor remote access to a control network safely, using a jump host, time-bound access, session recording, and MFA, plus the questions to put to the vendor.https://hans.study/what-a-drone-adds-to-a-perimeter-security-assessment/https://hans.study/api/og.svg?title=What+a+Drone+Adds+to+a+Perimeter+Security+Assessment&kind=PostWhat a Drone Adds to a Perimeter Security AssessmentAn RPAS pass produces evidence a walk-down cannot: true camera sightlines, fence-line condition in sequence, and mounting hardware at height. Flying it legally.https://hans.study/who-owns-the-network/https://hans.study/og/who-owns-the-network.pngNobody Owns the Network Between the Integrator and ITWhen physical security systems sit on critical infrastructure networks, the most dangerous gap isn't technical. It's that no one is responsible for the seam between the people who install them and the people who run the network.https://hans.study/standards-guidance/ale-omniswitch-base-configuration-for-cctv-and-security-networks/https://hans.study/api/og.svg?title=ALE+OmniSwitch+6360+and+6560+Base+Configuration+for+CCTV+and+Security+Networks&kind=KBALE OmniSwitch 6360 and 6560 Base Configuration for CCTV and Security NetworksAlcatel-Lucent Enterprise OmniSwitch 6360/6560 (AOS 8) configuration template: VLANs, SSH, AAA, Virtual Chassis, port security, BPDU guard, link aggregation, QoS, and syslog for physical security networks.https://hans.study/standards-guidance/antivirus-exclusions-for-video-management-systems/https://hans.study/api/og.svg?title=Antivirus+and+Defender+Exclusions+for+Video+Management+Systems&kind=KBAntivirus and Defender Exclusions for Video Management SystemsWhy real-time scanning breaks video recording, the exclusion lists for Genetec, Milestone, Avigilon, and Axis Camera Station, how to apply them in Defender, and how to prove they took.https://hans.study/standards-guidance/aruba-cx-switch-base-configuration-for-cctv-and-security-networks/https://hans.study/api/og.svg?title=Aruba+CX+6200+and+6300+Base+Configuration+for+CCTV+and+Security+Networks&kind=KBAruba CX 6200 and 6300 Base Configuration for CCTV and Security NetworksAruba CX 6200/6300 (AOS-CX) configuration template: VLANs, SSH, AAA, VSF, port security, BPDU guard, LACP LAG, QoS, and syslog for physical security networks.https://hans.study/standards-guidance/building-a-cctv-network/https://hans.study/api/og.svg?title=Building+a+Network+for+CCTV+and+Access+Control&kind=KBBuilding a Network for CCTV and Access ControlMost physical security deployments I walk into are not engineered. They are assembled. Somebody ran cable, somebody plugged in cameras, somebody configured...https://hans.study/standards-guidance/cisco-catalyst-9200-and-9300-series-base-configuration-template-for-cctv-and-security-networks/https://hans.study/api/og.svg?title=Cisco+Catalyst+9200+and+9300+Base+Configuration+for+CCTV+and+Security+Networks&kind=KBCisco Catalyst 9200 and 9300 Base Configuration for CCTV and Security NetworksComplete Cisco Catalyst 9200/9300 configuration template: VLANs, SSH, AAA, port security, DHCP snooping, DAI, QoS, and syslog for physical security networks.https://hans.study/standards-guidance/hardening-microsoft-windows-server-2019-and-2022-environments-getting-started/https://hans.study/api/og.svg?title=Hardening+Windows+Server+2016%2C+2019%2C+and+2022%3A+Getting+Started&kind=KBHardening Windows Server 2016, 2019, and 2022: Getting StartedBaseline Windows Server hardening: update management, roles audit, local accounts, Windows Firewall, services, NTP, PowerShell logging, and TLS.https://hans.study/standards-guidance/hardening-security-operator-workstations/https://hans.study/api/og.svg?title=Hardening+Security+Operator+Workstations%3A+The+Client+Side+of+the+Video+and+Access+Control+System&kind=KBHardening Security Operator Workstations: The Client Side of the Video and Access Control SystemGuard desk and control room machines are the most exposed hosts on the security network and the least hardened. Operating system choice, local administrator removal, application allow-listing, removable media, session and lock policy for 24/7 desks, browser and mail, and the decode hardware that keeps operators from working around the controls.https://hans.study/standards-guidance/hardening-windows-server-2016-2019-2022-environments-group-policy/https://hans.study/api/og.svg?title=Hardening+Windows+Server+2016%2C+2019%2C+and+2022%3A+Hardening+with+Group+Policy&kind=KBHardening Windows Server 2016, 2019, and 2022: Hardening with Group PolicyGPO structure, password policy, Kerberos, NTLM restriction, Advanced Audit Policy, Defender, SMBv1 removal, and LAPS via Group Policy.https://hans.study/standards-guidance/hardening-windows-server-2016-2019-2022-guide/https://hans.study/api/og.svg?title=Hardening+Windows+Server+2016%2C+2019%2C+and+2022%3A+Other+Considerations&kind=KBHardening Windows Server 2016, 2019, and 2022: Other ConsiderationsTLS 1.2 enforcement, legacy exceptions, Remote Desktop hardening, SMB signing, LAPS, and certificate management for Windows Server.https://hans.study/standards-guidance/hardening-windows-server-2016-2022-environments-audit-logging/https://hans.study/api/og.svg?title=Hardening+Windows+Server+2016%2C+2019%2C+and+2022%3A+Audit+Logging&kind=KBHardening Windows Server 2016, 2019, and 2022: Audit LoggingAdvanced Audit Policy, domain controller GPO, event log sizing, Windows Event Forwarding, Sysmon, key event IDs, and log retention for Windows Server.https://hans.study/standards-guidance/hardening-windows-server-2025-what-changed/https://hans.study/api/og.svg?title=Hardening+Windows+Server+2025%3A+What+Changed+From+2022%2C+and+What+It+Breaks+on+Security+Systems&kind=KBHardening Windows Server 2025: What Changed From 2022, and What It Breaks on Security SystemsSMB signing on by default, NTLM blocking available, Credential Guard on by default for domain members, LAPS built in, delegated managed service accounts, hotpatching, and the integrations that stop working when you move a VMS or access control host to Server 2025.https://hans.study/standards-guidance/ip-addressing-for-security-integrators/https://hans.study/api/og.svg?title=IP+Addressing+for+Security+Integrators%3A+What+You+Actually+Need+to+Know&kind=KBIP Addressing for Security Integrators: What You Actually Need to KnowThe IP addressing conversation comes up on every deployment. Not always at the right time. I have walked into more than a few projects mid-installation whe...https://hans.study/standards-guidance/juniper-ex-base-configuration-for-cctv-and-security-networks/https://hans.study/api/og.svg?title=Juniper+EX+Series+Base+Configuration+for+CCTV+and+Security+Networks&kind=KBJuniper EX Series Base Configuration for CCTV and Security NetworksJuniper EX series (Junos OS) configuration template: VLANs, SSH, AAA, Virtual Chassis, port security, BPDU guard, aggregated Ethernet, QoS, and syslog for physical security networks.https://hans.study/standards-guidance/multicast-for-cctv-networks/https://hans.study/api/og.svg?title=Multicast+for+CCTV+Networks%3A+IGMP+Snooping%2C+Queriers%2C+and+the+Outage+That+Follows+Skipping+Them&kind=KBMulticast for CCTV Networks: IGMP Snooping, Queriers, and the Outage That Follows Skipping ThemWhen multicast video makes sense, why IGMP snooping without a querier floods or starves the VLAN, where to place the querier, and the configuration on Cisco, Aruba CX, and Juniper.https://hans.study/standards-guidance/poe-budgets-for-camera-and-access-control-switches/https://hans.study/api/og.svg?title=PoE+Budgets+for+Camera+and+Access+Control+Switches%3A+Classes%2C+Power+Supplies%2C+and+the+Ports+That+Go+Dark&kind=KBPoE Budgets for Camera and Access Control Switches: Classes, Power Supplies, and the Ports That Go DarkWhat the 802.3af, at, and bt classes actually deliver at the device, why the switch's power supply rather than its port rating sets the budget, how to count a load that includes PTZs and heaters, and what happens when the budget runs out.https://hans.study/standards-guidance/security-system-hardening-guide/https://hans.study/api/og.svg?title=Security+System+Hardening+Guide&kind=KBSecurity System Hardening GuideEnd-to-end hardening reference for physical security network infrastructure. Switches, servers, workstations, cameras, access control panels, RADIUS via NPS, vulnerability assessment, and checklists.https://hans.study/standards-guidance/switch-configuration-audit-checklist-for-security-networks/https://hans.study/api/og.svg?title=Switch+Configuration+Audit+Checklist+for+CCTV+and+Access+Control+Networks&kind=KBSwitch Configuration Audit Checklist for CCTV and Access Control NetworksThe checklist behind the switch config audit tool: management plane, control plane, edge protection, VLAN hygiene, PoE, multicast, QoS, logging, and the evidence to collect for each, with the show commands that prove it on Cisco, Aruba CX, and Junos.https://hans.study/standards-guidance/tia-568-structured-cabling-reference/https://hans.study/api/og.svg?title=TIA-568+Structured+Cabling%3A+Reference+for+Security+Networks&kind=KBTIA-568 Structured Cabling: Reference for Security NetworksWhat TIA-568 actually requires for the cabling that physical security systems run on, and where integrators commonly fall short of it.https://hans.study/standards-guidance/vlan-segmentation-physical-security-networks/https://hans.study/api/og.svg?title=VLAN+Segmentation+for+Physical+Security+Networks&kind=KBVLAN Segmentation for Physical Security NetworksThe segmentation conversation is one I have had hundreds of times. Usually after something has already gone wrong. A workstation on the same network as the...https://hans.study/standards-guidance/windows-event-forwarding-for-security-systems/https://hans.study/api/og.svg?title=Windows+Event+Forwarding+for+Security+Systems%3A+Collector+Design%2C+Subscriptions%2C+and+What+to+Forward+From+VMS+and+Access+Control+Hosts&kind=KBWindows Event Forwarding for Security Systems: Collector Design, Subscriptions, and What to Forward From VMS and Access Control HostsWhere the logs go after audit policy is set: collector sizing, source-initiated subscriptions by Group Policy, the query XML that pulls the right events from VMS and access control hosts, and the checks that prove forwarding is alive.https://hans.study/https://hans.study/api/og.svg?title=Hans+StudyHans StudyIndependent network and security consulting and advisory.https://hans.study/articles/https://hans.study/api/og.svg?title=Technical+WritingTechnical WritingPractitioner-led articles on enterprise networks, OT security, physical security systems.https://hans.study/standards-guidance/https://hans.study/api/og.svg?title=Standards+and+GuidanceStandards and GuidanceKnowledge base for physical security, networks, OT, and compliance.https://hans.study/books/https://hans.study/api/og.svg?title=Books+by+Hans+StudyBooks by Hans StudyField references for systems and security integrators.https://hans.study/learning/https://hans.study/api/og.svg?title=Study+Learning&kind=LearningStudy LearningInteractive courses for security integrators.https://hans.study/training/https://hans.study/api/og.svg?title=Study+Training&kind=TrainingStudy TrainingInstructor-led courses for security integrators and electricians.https://hans.study/tools/https://hans.study/api/og.svg?title=Study+Tools&kind=ToolsStudy ToolsIn-browser tools for network and security work.https://hans.study/genetec-consulting/https://hans.study/api/og.svg?title=Genetec+Security+Center+Consulting&kind=ServiceGenetec Security Center ConsultingIndependent Genetec consulting. Not a Genetec partner.https://hans.study/genetec-health-check/https://hans.study/api/og.svg?title=Genetec+Health+Check&kind=ServiceGenetec Health CheckFocused assessment of a Genetec Security Center environment.https://hans.study/genetec-health-check-checklist/https://hans.study/api/og.svg?title=Genetec+Health+Check+Checklist&kind=ToolGenetec Health Check ChecklistInteractive Genetec Health Check Checklist.https://hans.study/enterprise-network-architecture/https://hans.study/api/og.svg?title=Enterprise+Network+Architecture+Consulting&kind=ServiceEnterprise Network Architecture ConsultingArchitecture review, greenfield design, remediation planning.https://hans.study/industrial-ot-networks/https://hans.study/api/og.svg?title=Industrial+and+OT+Network+Consulting&kind=ServiceIndustrial and OT Network ConsultingOT and ICS network security advisory.https://hans.study/access-control-cctv-consulting/https://hans.study/api/og.svg?title=CCTV+and+Access+Control+Consulting&kind=ServiceCCTV and Access Control ConsultingVendor-agnostic CCTV and access control advisory.https://hans.study/data-centre-structured-cabling/https://hans.study/api/og.svg?title=Data+Centre+and+Structured+Cabling+Advisory&kind=ServiceData Centre and Structured Cabling AdvisoryPre-construction review and design advisory for the physical layer.https://hans.study/physical-security-design-assessment/https://hans.study/api/og.svg?title=Physical+Security+Design+and+Assessment&kind=ServicePhysical Security Design and AssessmentThreat modelling, design, and gap assessment.https://hans.study/icat-design-project-advisory/https://hans.study/api/og.svg?title=ICAT+Design+and+Project+Advisory&kind=ServiceICAT Design and Project AdvisoryIntegrated facility systems advisory.https://hans.study/mentorship-technical-guidance/https://hans.study/api/og.svg?title=Mentorship+and+Technical+Guidance&kind=ServiceMentorship and Technical GuidanceFree mentorship for practitioners.https://hans.study/studybyt3s/https://hans.study/api/og.svg?title=StudyByt3s+Podcast&kind=PodcastStudyByt3s PodcastNetworks, physical security, and cybersecurity, bite-sized.