Noel Bradford challenges the persistent misconception that CCTV sits outside the cyber security estate. Many small businesses still treat cameras, recorders, door access systems and similar connected devices as facilities kit rather than networked computer systems requiring proper ownership, patching, segmentation and access controls. Modern CCTV often ships with audio capability, adding privacy and governance questions that many organisations have never considered. This Hot Take walks through the practical steps UK small businesses should take to inventory connected devices, control remote access, segment networks, disable unnecessary features like audio recording, and assign clear ownership. The episode references UK guidance from NCSC, ICO and DSIT, with parallel observations for US listeners drawing on CISA and FCC frameworks. If a device has an IP address or a microphone, it counts. Bolted to a wall doesn’t mean exempt from reality.