CCTV compromise investigation

[hypothetical] How would you go about investigating a cctv compromise in a large Enterprise environment? Consider you’ve been alerted by your building security that they suspect some one else having control over the cameras of a particular location.

// note: this is only for discussion purpose from an investigative perspective

cameras cctv compromise computerforensics control enterprise environment investigation large location perspective security