SCSecurityGuide
AI Video Analytics: Choosing Use Cases That Deliver Value
AI video analytics can reduce the time operators spend watching screens, but only for well-defined events in suitable scenes. This guide helps you choose use cases, test accuracy on your own footage and govern the results.
- Published
- Updated
- Reading
- 4 minutes
- Prepared by
- EngineSpire Technologies
Key points
- Start from an operational problem and the action someone will take when an alert fires.
- Scene conditions such as lighting, angle, distance and obstructions decide accuracy more than product claims do.
- Pilot on your own footage and measure detections, false alarms and missed events before scaling.
- Keep people in the decision for any action that affects someone.
- Treat analytics about people as personal data processing, with documented purpose, proportionality and retention.
What video analytics can do
- Detect and classify objects such as people and vehicles.
- Raise alerts for intrusion into zones or line crossing after hours.
- Count people or vehicles and measure occupancy or queue length.
- Read licence plates at controlled entrances.
- Detect personal protective equipment in defined work areas.
- Speed up investigations by searching recorded video for attributes, such as a vehicle color.
Some capabilities, such as facial recognition, carry much higher privacy risk and deserve separate legal review. Video-based smoke detection can support, but not replace, certified fire detection systems.
Good and poor use cases
| Use case | Why it can work | Watch for |
|---|---|---|
| Perimeter intrusion after hours | A clear rule in a zone with few legitimate visitors | Animals, rain, headlights and moving vegetation |
| Vehicle counting at a gate | A defined zone and a consistent viewing angle | Queues and vehicles blocking each other |
| Queue length at counters | A direct operational response: open another counter | People blocking each other in crowded views |
| Forensic search | Saves investigators hours of manual review | Metadata quality depends on camera placement |
| "Suspicious behavior" detection | Rarely works well | Vague definitions, high false alarm rates and fairness concerns |
Define the use case before buying
- What exactly is the event, and where and when should the rule be active?
- Who receives the alert, and what will they do?
- How many false alarms per shift can operators handle?
- How will success be measured, such as incidents detected earlier or investigation time saved?
Check whether the scene is suitable
- Enough pixels on the target for the task: detection needs far fewer than recognition.
- Lighting at night, including infrared range and glare.
- Camera height and angle that avoid people and vehicles blocking each other.
- Few distractions such as trees, flags, reflections and moving shadows.
- Exposure to weather, dust and insects near infrared lights.
Where the analytics run
Analytics can run on the camera, on a server or in the cloud. Camera-based analytics reduce bandwidth and scale with the cameras. Server-based analytics allow more demanding models on existing cameras but need processing hardware. Cloud analytics reduce local hardware but depend on upload bandwidth and involve sending video off site.
Pilot and measure
- Choose representative cameras, including difficult night and busy scenes.
- Run the pilot long enough to cover day, night, weekends and busy periods.
- Review every alert and classify it as correct or false, and check recordings or staged tests for missed events.
- Calculate precision (the share of alerts that were real) and detection rate (the share of real events that raised an alert).
- Tune zones, schedules and sensitivity with operators, then measure again.
- Compare operator workload before and after.
Governance and privacy
- Document the purpose and why analytics are necessary and proportionate to it.
- Carry out a privacy impact assessment before deployment. NPC Circular No. 2024-02 applies its CCTV requirements to video analytics as well and expects privacy impact assessments to assess and minimize the risks.
- Update CCTV signage and privacy notices.
- Restrict who can view analytics results and metadata, and set retention for them.
- Require human review before any action that affects a person.
- Check vendor terms on whether your footage is used to train their models.
The NIST AI Risk Management Framework offers a structured way to identify, measure and manage risks such as inaccurate results and unfair outcomes.
Operations
- Re-tune rules when scenes change, for example after new racking, lighting or landscaping.
- Keep lenses and infrared illuminators clean.
- Track alert volumes and false alarm rates over time.
- Apply model and firmware updates through change control.
Common questions
How accurate is AI video analytics?
Accuracy depends heavily on the scene, camera placement, lighting and the event being detected. The only reliable figures come from a pilot on your own cameras, including night-time and busy periods.
Can analytics replace security guards or operators?
Analytics can reduce time spent watching screens and speed up investigations, but alerts still need people to verify them and decide on a response. Plan staffing around verified alert volumes, not vendor estimates.
Is facial recognition allowed?
Facial recognition processes biometric information and carries significant privacy risks. Before considering it, obtain legal advice, carry out a privacy impact assessment and consider whether a less intrusive approach would meet the purpose.
Sources and further reading
- [1]AI Risk Management Framework — NIST
- [2]NPC Circular No. 2024-02: Closed-Circuit Television (CCTV) Systems — National Privacy Commission
- [3]NPC Advisory No. 2024-04: Guidelines on the Application of the Data Privacy Act to Artificial Intelligence Systems Processing Personal Data — National Privacy Commission
Need this applied to your environment?
We can turn this guide into a scoped assessment of your own sites, systems and constraints.
Keep reading
- SCFirewall High Availability: What a Real Failover Test Should ProveA firewall pair that reports "synchronized" has not proven anything yet. A real failover test checks traffic, sessions, VPNs, routing, logging and recovery under conditions that resemble an actual failure.3 min read
- SCZero Trust for Mid-Market Organizations: A Phased RoadmapZero trust replaces the idea of a trusted internal network with decisions based on identity, device and context for every access request. Mid-sized organizations can get there in phases, starting with identity and the most sensitive systems.4 min read
- SCCCTV Storage Sizing: Retention, Resolution and Real-World BitrateCCTV storage estimates built from datasheet bitrates are often wrong, because real bitrate depends on the scene, lighting, motion and camera settings. This guide shows how to size recording storage from measured values and agreed retention.4 min read
