CCTV System Design for Buildings โ A Step-by-Step Guide with Calculations
From requirement gathering and site survey through camera placement, bandwidth calculations, switch sizing, server specification, storage planning, and commissioning โ a complete design methodology that enables any facility manager to plan a professional IP CCTV system.
Contents
ToggleDesigning a CCTV system is both an engineering discipline and a practical art. A well-designed system delivers precisely the right coverage, image quality, and retention โ without over-engineering the network, over-specifying storage, or overspending on unnecessary equipment. This guide walks through the complete design process with worked calculations, so that a facility manager, consultant, or procurement officer can independently verify vendor proposals or design a system from scratch.
1. The CCTV System Design Process
Professional CCTV system design follows a structured, sequential process. Skipping any stage โ particularly the requirement gathering and site survey โ invariably leads to a system that fails to meet expectations.
Phase 1 โ Understand Requirements
Define objectives, identify stakeholders, establish budget, determine regulatory requirements, and agree on retention period and integration needs.
Phase 2 โ Site Survey
Physical inspection of the building: entry/exit points, critical zones, lighting conditions, cable route feasibility, existing infrastructure, and environmental factors.
Phase 3 โ Camera Placement
Determine camera locations, types, lens selections, mounting heights, and fields of view. Create the camera schedule document.
Phase 4 โ Network Design
Calculate bandwidth, size PoE switches, design VLANs, plan cable routes, and specify core switch and uplink requirements.
Phase 5 โ Server & Storage
Calculate storage capacity, specify recording servers, determine RAID configuration, and plan for failover and redundancy.
Phase 6 โ Documentation & Procurement
Prepare system drawings, BOQ, tender specifications, evaluate proposals, and manage installation and commissioning.
2. Understanding Requirements
Before selecting any equipment, the designer must answer these critical questions โ ideally in consultation with the building owner, facility manager, and security team:
Purpose of the CCTV System
- Detection: Detecting that someone or something is present in the scene. Requires lower resolution; wider fields of view are acceptable.
- Recognition: Determining that the person seen is the same person seen previously (but not necessarily identifying who they are). Requires moderate resolution.
- Identification: Positively identifying a specific individual โ typically requiring a face capture that fills at least 120 pixels per metre of height in the image (as per the international standard EN 62676-4). Requires higher resolution, appropriate lens selection, and correct camera positioning.
Different locations within the same building may have different objectives. An entrance face-capture camera needs identification-level quality. A corridor camera may need only recognition. A perimeter camera may need only detection.
Key Questions to Answer
- What is the primary purpose โ deterrence, evidence, real-time monitoring, or all three?
- Who will operate the system โ dedicated 24-hour security, part-time operators, or remote monitoring?
- What is the retention period โ 30 days (commercial), 60 days (PSU), 90+ days (banks)?
- Is integration with other systems required โ access control, fire alarm, BMS, visitor management?
- What are the regulatory requirements โ RBI guidelines (banks), BIS/STQC compliance, CVC procurement rules?
- What is the realistic budget โ and does it include 5-year AMC and storage expansion costs?
3. Site Survey
The site survey is a physical inspection that converts the abstract requirements into concrete design inputs. It cannot be done remotely from floor plans alone โ the designer must physically walk every area of the building, at different times of day if possible, to understand lighting conditions and activity patterns.
Site Survey Checklist
| Category | What to Document |
|---|---|
| Entry/Exit Points | Main entrance, side doors, fire exits, loading dock, basement access, roof access, emergency exits. Note direction of foot traffic and lighting at each. |
| Perimeter | Compound wall height and condition, fence line, vehicle gates, pedestrian gates, perimeter lighting. Note distances and line-of-sight obstructions (trees, signboards). |
| Interior Critical Zones | Cash counters, server rooms, vaults, reception, executive areas, document storage, pharmacy (hospital). Note access control points already in place. |
| Common Areas | Corridors, stairwells, lift lobbies, cafeteria, meeting rooms, parking levels. Note corridor widths and ceiling heights. |
| Lighting Conditions | East-west building orientation (sun position), glass facades causing backlight, areas with mixed indoor/outdoor light, poorly lit zones, 24-hour lighting areas vs areas dark at night. |
| Cable Route Feasibility | Existing cable trays, conduit paths, risers between floors, distance from camera positions to nearest network cabinet. Note maximum cable run lengths. |
| Network Infrastructure | Location of existing network rooms/cabinets on each floor, available rack space, UPS capacity, cooling, power outlets. Can CCTV share existing cabinets? |
| Environmental Factors | Temperature extremes, humidity, coastal salt air, dust, vibration from machinery, vandalism risk, heritage building restrictions. |
4. Camera Placement Design
Camera placement is the most critical design decision. Every camera must have a clearly defined purpose, a calculated field of view, and an achievable cable route back to the nearest network switch.
Pixel Density โ The Key Metric
The international standard EN 62676-4 defines surveillance quality in terms of pixels per metre (PPM) โ the number of image pixels that represent one metre of real-world height at the target distance. This is the most objective way to determine whether a camera will deliver the required level of detail:
| Purpose | Required PPM | What It Means |
|---|---|---|
| Monitor / Detect | 25 PPM | Determine whether a person is present. Cannot recognise or identify. |
| Observe | 62 PPM | See some characteristic details (clothing type, general build). |
| Recognise | 125 PPM | Determine with high confidence that this is the same person seen before. |
| Identify | 250 PPM | Positively identify an individual beyond reasonable doubt. Face fills a significant portion of the image. |
How to Calculate Pixel Density
Example: A 4MP camera (2560 ร 1440) with a 2.8mm lens covers approximately 6 metres width at 4 metres distance.
PPM = 2560 รท 6 = 427 PPM โ Excellent for identification at this distance.
The same 4MP camera with a 2.8mm lens at 15 metres distance covers approximately 22 metres width.
PPM = 2560 รท 22 = 116 PPM โ Adequate for recognition but NOT identification.
Camera Mounting Heights
- Face capture at entrances: 2.2โ2.5 metres height, tilted slightly downward, with a narrow field of view focused on the doorway. The goal is to capture every face at roughly the same angle.
- Indoor general surveillance: 2.8โ3.5 metres (standard ceiling height). Higher mounting gives a wider overview but reduces facial detail.
- Corridors: 2.5โ3.0 metres. Consider corridor mode (rotating the camera 90ยฐ for a 9:16 aspect ratio) to maximise coverage of long, narrow spaces.
- Outdoor perimeter: 3.5โ5.0 metres to prevent tampering and provide a commanding view.
- PTZ cameras: 5โ8 metres for maximum pan range and stability.
5. Bandwidth Calculation
Every IP camera continuously transmits video data over the network. Accurate bandwidth calculation is essential for sizing switches, uplinks, and recording server network interfaces.
Factors That Determine Bandwidth
- Resolution: Higher resolution = more pixels = more data per frame
- Frame Rate (FPS): More frames per second = more data. 15 fps is standard for surveillance; 25โ30 fps for high-security areas
- Compression Codec: H.265 reduces bandwidth by ~30โ50% vs H.264; Smart Codec variants reduce further
- Scene Complexity: A busy parking lot generates more data than a static corridor because the compression algorithm must encode more changes between frames
Typical Bitrate Reference Table
| Resolution | H.264 @ 15 fps | H.265 @ 15 fps | H.265+ / Smart @ 15 fps |
|---|---|---|---|
| 2MP (1080p) | 3โ4 Mbps | 1.5โ2.5 Mbps | 0.5โ1.5 Mbps |
| 4MP (2K) | 5โ8 Mbps | 3โ5 Mbps | 1โ3 Mbps |
| 5MP | 6โ10 Mbps | 4โ6 Mbps | 1.5โ3.5 Mbps |
| 4K / 8MP | 12โ20 Mbps | 8โ12 Mbps | 3โ6 Mbps |
๐งฎ Bandwidth Calculator
Bandwidth Results
6. Network Switch Sizing
IP CCTV systems require two tiers of switches: edge switches (PoE switches on each floor that connect cameras) and core switches (that aggregate all edge switch uplinks and connect to servers).
Edge Switch (PoE) Sizing
For each floor or zone, calculate:
- Port count: Number of cameras on that floor + 1โ2 spare ports for future expansion
- PoE budget: Sum of power requirements of all connected cameras (typically 12โ15W per fixed camera, 30โ60W per PTZ)
- Uplink bandwidth: Sum of all camera bitrates on that switch must not exceed the uplink speed
Example: A floor with 20 fixed cameras and 1 PTZ camera:
PoE Budget = (20 ร 15W) + (1 ร 60W) = 300 + 60 = 360W
Select a switch with PoE budget โฅ 360W ร 1.2 (20% margin) = 432W minimum
Edge Switch Selection Guide
| Cameras per Switch | Recommended Switch | PoE Budget | Uplink |
|---|---|---|---|
| 1โ8 cameras | 8-port PoE+ managed switch | 120โ150W | 1 ร 1GbE (SFP or RJ45) |
| 9โ16 cameras | 16-port PoE+ managed switch | 240โ380W | 2 ร 1GbE (SFP) |
| 17โ24 cameras | 24-port PoE+ managed switch | 370โ500W | 2 ร 10GbE (SFP+) or 4 ร 1GbE LAG |
| 25โ48 cameras | 48-port PoE+ managed switch | 500โ740W | 2 ร 10GbE (SFP+) |
Core Switch Sizing
The core switch aggregates all edge switch uplinks and connects to recording servers, VMS servers, and operator workstations. Key requirements:
- Port count: Number of edge switch uplinks + server ports + management ports + spare capacity
- Switching capacity: Must be non-blocking โ the total switching fabric must handle all ports at full line rate simultaneously
- Redundancy: For mission-critical deployments (banks, PSU HQ), use redundant core switches in a stacked or failover configuration
- 10GbE uplinks: Connections from core switch to recording servers should be 10GbE (SFP+) to handle the aggregate bandwidth of all cameras being written to storage simultaneously
7. Data Flow in an IP CCTV Network
The following diagram illustrates how video data flows from cameras through the network infrastructure to the recording servers and operator workstations. The animated data packets show the continuous flow of video streams through each network layer.
8. Storage Calculation
Storage is the most expensive recurring cost in a CCTV system and the component most frequently underestimated. A rigorous calculation prevents both under-provisioning (losing footage before the retention period expires) and over-provisioning (wasting budget on unnecessary hard drives).
Storage Calculation Formula
Simplified: Daily Storage (GB) = Bitrate (Mbps) ร 10.8
Total Raw Storage (TB) = Daily Storage per Camera ร Number of Cameras ร Retention Days รท 1,000
Usable Storage Required (TB) = Raw Storage รท RAID Efficiency Factor
RAID 5 efficiency โ 0.75 (25% lost to parity) ยท RAID 6 โ 0.67 ยท RAID 10 โ 0.50
Worked Example
64 cameras, 4MP resolution, H.265 at 15 fps (average 4 Mbps per camera), 60-day retention, RAID 6:
- Daily per camera: 4 Mbps ร 10.8 = 43.2 GB/day
- Total daily: 43.2 ร 64 = 2,765 GB/day (2.77 TB/day)
- 60-day raw: 2.77 ร 60 = 166.1 TB raw storage
- RAID 6 usable: 166.1 รท 0.67 = 247.9 TB physical disks required
- Add 10% file system overhead: 247.9 ร 1.1 = ~273 TB total disk capacity
๐งฎ Storage Calculator
Storage Results
9. Recording Server Sizing
The recording server receives video streams from cameras (via the network), processes them, and writes them to storage. Correct server sizing ensures smooth recording without dropped frames or performance degradation.
Server Sizing Guidelines
| System Size | CPU | RAM | Network | Server Type |
|---|---|---|---|---|
| Up to 32 cameras 4MP H.265 | Intel Core i5 (12th Gen+) or Xeon E-2300 | 16 GB DDR4 | 1 ร 1GbE dedicated | Desktop workstation or embedded NVR |
| 32โ64 cameras 4MP H.265 | Intel Xeon E-2300 series or Core i7 (12th Gen+) | 32 GB DDR4 | 1 ร 10GbE (SFP+) | 1U/2U rackmount server |
| 64โ128 cameras Mixed 4MP/4K | Intel Xeon Silver 4300 (8โ16 cores) | 32โ64 GB DDR4 | 2 ร 10GbE (SFP+) | 2U rackmount server + external SAN storage |
| 128โ256 cameras Enterprise | Dual Xeon Silver/Gold or split across 2 servers | 64โ128 GB DDR4 | 2 ร 10GbE per server | Multiple 2U servers + SAN/NAS storage |
- Recording is mainly an I/O task, not a CPU task. The server receives compressed streams and writes them to disk โ it does not decode the video. CPU demand is moderate. High disk write throughput and network throughput are more important than raw CPU speed.
- Viewing/playback is CPU-intensive. If the same server serves live viewing clients, it must decode multiple streams simultaneously. This is where GPU acceleration (Intel Quick Sync or dedicated GPU) helps significantly.
- Use surveillance-grade hard drives (WD Purple, Seagate SkyHawk) designed for continuous 24/7 write operations. Standard desktop drives fail prematurely under CCTV workloads.
- Two 10GbE NICs for systems above 64 cameras โ one for camera traffic, one for client viewing and management.
- UPS is mandatory. An unclean shutdown during recording can corrupt the video database. Size UPS for at least 15 minutes of runtime to allow graceful shutdown.
Failover Server
For mission-critical installations (banks, PSU headquarters, data centres), a failover recording server provides automatic takeover when the primary server fails. The failover server monitors the primary server's heartbeat and, upon detecting a failure, immediately begins recording from the same cameras. When the primary is restored, recordings are automatically merged. Major VMS platforms (Milestone, Genetec, NUUO) support this natively.
10. Complete Design Example โ 8-Storey Office Building
To bring all the calculations together, here is a complete worked example for a typical 8-storey commercial office building with a basement car park, ground floor reception, and perimeter security.
Requirement Summary
| Parameter | Value |
|---|---|
| Building type | 8-storey PSU/corporate office + basement parking |
| Total cameras | 96 (12 per floor avg ร 8 floors + 16 basement + 16 perimeter/gate) |
| Camera mix | 80 ร 4MP fixed (H.265), 8 ร 4K entrance face-capture, 4 ร PTZ, 4 ร ANPR |
| Frame rate | 15 fps (all cameras) |
| Retention | 60 days continuous |
| Monitoring | 24/7 control room + remote mobile access |
Bandwidth Calculation
- 80 ร 4MP H.265 @ 4 Mbps = 320 Mbps
- 8 ร 4K H.265 @ 10 Mbps = 80 Mbps
- 4 ร PTZ 4MP H.265 @ 6 Mbps = 24 Mbps
- 4 ร ANPR 2MP H.265 @ 3 Mbps = 12 Mbps
- Total: 436 Mbps + 25% margin = 545 Mbps design bandwidth
Switch Sizing
- Edge switches: 6 ร 24-port PoE+ managed switches (one per two floors + one for basement + one for perimeter) โ each with 2 ร 10GbE SFP+ uplinks
- Core switch: 1 ร 24-port Layer 3 managed switch with 10GbE SFP+ ports โ provides VLAN segmentation, QoS, and connects to all edge switches and servers
- Total PoE budget: (88 fixed ร 15W) + (4 PTZ ร 60W) + (4 ANPR ร 15W) = 1,320 + 240 + 60 = 1,620W across all edge switches
Storage Calculation
- Total daily: (80 ร 4 + 8 ร 10 + 4 ร 6 + 4 ร 3) ร 10.8 = (320 + 80 + 24 + 12) ร 10.8 = 436 ร 10.8 = 4,709 GB/day (4.71 TB/day)
- 60-day raw: 4.71 ร 60 = 282.5 TB
- RAID 6 + 10% overhead: 282.5 รท 0.67 ร 1.1 = ~464 TB physical capacity
- Equivalent: approximately 29 ร 16TB surveillance-grade HDDs (in RAID 6 across 2 storage shelves) or 24 ร 20TB HDDs
Server Specification
- 2 ร Recording Servers (48 cameras each): Intel Xeon Silver 4310 (12-core), 32GB DDR4, 2 ร 10GbE SFP+ NIC, 2U rackmount
- 1 ร Failover Server: Same specification as recording servers โ activates automatically if either primary fails
- 1 ร VMS Management Server: Intel Xeon E-2388G, 32GB DDR4, 1 ร 10GbE โ handles VMS licensing, system health, user management
- SAN Storage: 2 ร 24-bay storage shelves with 16TB surveillance HDDs, RAID 6 configuration, iSCSI or Fibre Channel connectivity to recording servers
- UPS: 6 kVA online UPS with 15-minute battery runtime for all servers and core switch
Estimated Bill of Quantities (BOQ) Summary
| Item | Quantity | Purpose |
|---|---|---|
| 4MP Turret/Dome cameras (H.265, IR, PoE) | 80 | Indoor corridors, lobbies, offices, parking |
| 4K Face-capture cameras (WDR, starlight) | 8 | Building entrances, main gate pedestrian |
| 4MP PTZ cameras (30ร zoom, PoE+) | 4 | Perimeter corners, large parking area |
| ANPR cameras | 4 | Vehicle entry/exit gates |
| 24-port PoE+ managed switches | 6 | Edge / floor switches |
| Layer 3 core switch (10GbE) | 1 | Core aggregation |
| Recording servers (2U rackmount) | 2 + 1 failover | Video recording |
| VMS management server | 1 | System management |
| SAN storage shelves (24-bay) | 2 | Video archive |
| 16TB surveillance HDDs | 30 | RAID 6 storage |
| 6 kVA Online UPS | 1 | Server/core switch power backup |
| Cat6A cable (305m boxes) | Estimated 40 | Camera-to-switch cabling |
| Fibre patch cables (LC-LC) | 24 | Switch uplinks |
| Control room workstations | 2 | Live monitoring, playback |
| 55" monitors | 4 | Video wall display |
11. Documentation, Installation & Commissioning
Design Documentation Package
A complete CCTV design should include the following documents before procurement:
- Camera Schedule: Tabulated list of every camera โ location name, camera type/model, resolution, lens, mounting type, PoE requirement, and zone/purpose.
- Floor Layout Drawings: Architectural floor plans with camera positions marked, showing fields of view (coverage cones), cable routes, and switch/cabinet locations.
- Network Single-Line Diagram: Complete network topology showing cameras, edge switches, core switch, servers, storage, and workstations with port assignments, VLAN configuration, and IP address allocation.
- Storage Calculation Sheet: Detailed calculation showing bitrate assumptions, daily storage, retention period, RAID configuration, and total disk capacity required.
- Bill of Quantities (BOQ): Complete list of all equipment, cabling, accessories, and installation materials with quantities.
- Technical Specifications: Detailed specifications for each equipment category for inclusion in the tender document.
Commissioning Checklist
After installation, systematic commissioning ensures every component functions correctly:
- Every camera image verified: correct coverage, focus, day and night quality
- Every recording channel confirmed: continuous recording, correct retention
- PoE delivery verified on every switch port
- Network performance tested: no packet loss, acceptable latency
- Analytics (if configured) validated under real conditions
- Remote access tested from outside the building network
- UPS tested: simulate power failure, verify graceful shutdown/switchover
- Failover server tested: simulate primary failure, verify automatic takeover
- Operator training delivered and documented
- As-built drawings and documentation handed over
Need Help Designing Your CCTV System?
Whether you need a complete system design from scratch, an independent review of a vendor's proposal, or help with tender specifications and procurement governance โ BuildingInfra brings 34 years of experience managing security across 35 RBI buildings.
Request a Free Consultation