The shape of this failure is familiar from privileged access work. A commissioned camera is an administrable device on a corporate network whose only credential is held by a contractor rather than an employee, and the interview is explicitly about what happens when that contractor is gone and the commissioning paperwork with them [1].
Requiring a new password at activation is better than shipping equipment with a universal default, as Janssens argues [10]. It closes the worse hole, which was a secret anyone could look up. It does not touch custody. The replacement secret exists only where the installer wrote it down, and the premise of the year-six question is that this record is lost [1]. So the control that removes a fleet-wide default converts the problem into a per-device records failure [2], and that failure is quieter: video still appears on the wall, so nothing prompts anyone to check who can authenticate.
The arithmetic is the part nobody puts in a tender document. On Janssens' own figures, a camera runs ten years while the installer may not exist in the same form after five [2], which means at least half a device's service life can run with no party holding its configuration knowledge [1]. The year-six case he is asked about still has four years of operational life left in a device that nobody in the organisation can administer [3].
Mandatory password creation, login-failure monitoring, IP filtering and controlled SSH access are all real controls [4], and all of them assume someone is reading the output and applying firmware. Janssens concedes the point himself: the controls work properly only while the device stays under the customer's ownership and is maintained [5], and no manufacturer can compensate for a camera put on the public Internet with its controls off and no patching [13]. That is the boundary. Device defaults reach as far as the device; they cannot produce an asset register or name the person entitled to reset the thing.
Which is why his position on AI is worth taking at face value even though it comes from a manufacturer's cyber security director whose interview also covers source code escrow and country-of-origin rules [14]. He says discovery and configuration checking will benefit, but declines to make AI the answer to a governance problem, putting ownership, governance and a documented recovery process first [6]. A scanner that finds an unmanaged camera has told you the easy half. It cannot tell you who is entitled to its admin account, and it will not hand you the password.
His prescription is that manufacturers should design products so customers can recover control without returning to the original installer [7]. That is a should, not a shipped feature, and the channel the interviewer describes buys on price and never returns to the kit [8].
