Workstation security protects the computer an operator uses to view video or administer access control. It covers unique accounts, automatic screen locking, current patching, restricted local administrator rights and a physically secure location, since a logged-in workstation grants everything the operator can do.
A hardened recorder on a segmented network still hands over its data to an unlocked desktop. The workstation is where access decisions become visible on a screen anyone can read.
Accounts and sessions
Give each operator an account, lock the screen after inactivity and log off rather than leaving a live view running. Shared logins destroy the audit trail the rest of the system depends on.
The machine itself
Patch the operating system and viewing client, block unnecessary browsing and removable media, and keep the workstation in a controlled space. A monitor facing a public counter leaks footage continuously.