Government and defense facilities are the one setting where the choice of camera can invalidate a contract. Everything else about surveillance here is familiar; that part is not, and it changes the order in which decisions get made.
The problem in this industry
Equipment eligibility comes before capability. FAR 52.204-25 prohibits covered telecommunications equipment, which expressly includes, "for the purpose of public safety, security of Government facilities, physical security surveillance of critical infrastructure, and other national security purposes," video surveillance equipment produced by Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company or Dahua Technology Company, or any subsidiary or affiliate. A camera that outperforms the alternatives is irrelevant if it is on that list.
The rule reaches your own buildings. The prohibition under section 889(a)(1)(B) applies to an entity that uses such equipment "regardless of whether that use is in performance of work under a Federal contract." Contractors and agencies alike therefore have to know what is installed everywhere, not only where federal work happens.
Controls are prescribed rather than chosen. Facilities operating under a federal control baseline are working from NIST SP 800-53, where physical access monitoring is control PE-6: monitor physical access to detect and respond to physical security incidents, review physical access logs at an organization-defined frequency, and coordinate the results with incident response. Surveillance is an implementation of a stated control, and it has to be evidenced as one.
Mixed tenancy and legacy estates. Buildings are inherited, shared and refitted. Cameras arrive with the lease, and nobody has a record of who made them.
How the capability applies
- Start from an equipment inventory, not a coverage map. Manufacturer, brand, model and firmware for every device, including anything installed by a landlord or a predecessor. Until that exists, no other question can be answered confidently.
- Design to the control, not to the room. PE-6 asks for monitoring, log review and coordination with incident response. That means retention long enough for a review cycle, searchable footage, and a defined person who performs the review. Cameras alone satisfy none of it.
- Pair video with access control at controlled doors. The access system produces the physical access log; video is what makes reviewing that log meaningful. See video surveillance and access control.
- Segment the cameras. Devices on their own network segment, no direct exposure to the internet, unique credentials, firmware you can actually update. On a federal estate these are baseline expectations rather than refinements.
- Keep the evidence current. Manufacturer attestations dated, inventory maintained, and the reporting path ready. The clause requires a contractor who identifies covered equipment during performance to report to the contracting officer within one business day, with further mitigation information within 10 business days.
What changes
Procurement gets a veto, and uses it earlier. The manufacturer question moves to requisition, where it costs nothing, instead of to installation, where it costs a replacement.
Bid responses get faster. When a bid asks what you use, the answer comes from a maintained inventory the same day rather than from a scramble across sites.
Surveillance becomes auditable. A stated purpose per camera, a retention period someone decided, logs that are reviewed on a schedule, and a named owner. That is the difference between a system that satisfies an auditor and one that merely exists.
Replacement becomes planned rather than urgent. Organizations that discover prohibited equipment during a bid replace it at speed and at a premium. Organizations that inventory first replace it in sequence, which is what a roadmap is for.
LABUSA works with government and defense facilities on exactly this sequence. See our government and defense industry page, or request a free site security assessment and we will inventory what is installed and document the manufacturer position for each device. The full compliance picture is in video surveillance and federal procurement rules, the technical risk position in video surveillance security and risk, and what we install on our video surveillance solutions page.
Sources
- General Services Administration, FAR 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. Establishes the quoted definition of covered telecommunications equipment, the named manufacturers, the reach of the section 889(a)(1)(B) prohibition to use outside federal work, and the one business day and 10 business day reporting requirements. acquisition.gov. Accessed 18 August 2026.
- National Institute of Standards and Technology, SP 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations. Establishes control PE-6 and its requirements to monitor physical access, review physical access logs at an organization-defined frequency and coordinate results with incident response. nvlpubs.nist.gov. Accessed 18 August 2026.