Look around the building and check for ways to gain
information. Try to look through Windows,
etc.
It is often possible to gain mobile numbers or passwords
for systems written on whiteboards, for example,
that could come in handy for social engineering later on. You may even find
the odd window or door left open or not secured properly.
CCTV is generally a passive system.
Unless you are dealing with a very large organization that can afford 24/7
CCTV watchman or sophisticated motion alarm systems,
you can generally ignore CCTV as a prevention mechanism.
CCTV is also often misplaced, misaligned, and often old and dirty.
Remember that your job is to provide security
advice, not to disrupt their security.
Do not damage CCTV prior to your engagement, and if you move it or disable it
during, ensure that it is working again once you pass it.