It is absolutely critical that appropriate due diligence is undertaken, prior to engaging a TSCM consulting firm. If a trusted referral is not the initial point of contact, then the following information should be clarified or inquiries made, prior to engagement:
- Confirm that they own their own equipment (not borrowed or rented) and ask to see a demonstration prior to engaging them. An operator who claims to have the latest and greatest spectrum analysers that go to ’30 or 40 Gigahertz’, is misleading clients into the false belief that these high frequency capabilities are necessary, without advising of radio frequency propagation in a corporate environment and the impracticality of transmitting at that level. Likewise, an operative who only uses a near-field / broadband detector (such as a CPM-700) and little else, cannot conceivably undertake a genuine technical assessment. A full and regularly maintained suite of appropriate equipment is critical to ensuring an effective sweep service. And if someone advises that their equipment is only available to defence or government staff, ask why they have it. Commercial TSCM operators, have commercially available equipment. Simple!
- Ask about their professional background and work history. Have they always been involved in the security sector and in what capacity? Do they have Police or Military experience? Ask for a copy of their CV or BIO.
- Determine how many staff they have on-deck and their related skill-sets. In today’s world, it is foolish to try and undertake an extensive TSCM inspection single-handedly. Whilst possible, a single room could take several hours to inspect, without a team of professionals to assist. Multiple operatives enables each of them to specialise and therefore focus on their area of expertise. This is the most effective means by which to operate.
- Ask what training they’ve had and how often they update their skills. Don’t expect rocket scientists, but any professional TSCM operator will have undertaken specific TSCM training at an internationally recognised training facility, of which there are only two or three globally. Ask to see their certificates and verify them accordingly.
- Request information on their research techniques – that is, how do they keep abreast of the technological advancements in the eavesdropping world? How much international research does this entail?
- Ask to see evidence of their professional memberships. Not just those of their company, but the individual operators themselves. A dedicated TSCM practitioner will be a member of several craft-specific institutes, such as London’s TSCMi (www.tscmi.org). Several such groups have comprehensive membership criteria requiring proof of experience. They usually also have a relevant ‘Code of Practice’ – click here for an example. Beware of those who claim to be a part of a local (Australian) TSCM association – there are no such approved or widely regarded associations in Australia. You’ll likely find that their claimed membership is made up of them and them and perhaps a few of their mates!
- Verify that they operate from a real office premises and not a serviced office or an office occupied by unrelated businesses. Confidentiality is paramount, as is the protection of client information. A permanent dedicated address also shows a commercial commitment and assists clients by way of a stable office to meet and communicate concerns.
- Seek up-to-date copies of all insurances and security consulting licences. Ensure you get copies of Workers Compensation, Public Liability and Professional Indemnity insurance certificates. Furthermore, make sure you sight the practitioner’s security consulting licence from at least one Australian state. If they are providing any form of security advice, they are usually required by law to hold a security consulting or adviser licence (in most Australian States and Territories). Holding just a company Master Licence is not sufficient enough. Support teams do not necessarily need a licence, but whoever is providing you with advice, typically does. Holding a security licence in Australia will generally require a full criminal history check with local Police. If not, ask whether they’d be happy to consent to a background check.
- How long have they been in business? Ask your colleagues and industry peers whether they have heard of the consulting firm you plan to engage. It is important to find a firm with a strong track history and more than two or three years in the business. Too many TSCM charlatans are claiming to have been operating for years with extensive experience and yet their company didn’t exist prior to a few years ago. TSCM services should be undertaken by dedicated and genuinely professional counter-surveillance specialists who contribute the majority of their efforts to the craft or similar enterprises. Offering too many different services is often a sign of an opportunist, rather than a true practitioner of the TSCM craft.
- Ensure that the person boasting the technical experience is in fact the one performing the work. Too often, the head of the company will attend to sell their wares, however, a couple of young and inexperienced operatives turn up to undertake the sweep. If the person you meet with is not the one doing the work, then ask to meet the one who will be.
- Make sure they provide you with a professional written quotation outlining their technical experience, equipment and processes. Verify their claims.
- Go with your first impression. Generally, experienced businesspeople get a sense of who is right or wrong for their business. As long as the above information has been established, the final decision rests with the individual hiring the service provider and whether they are comfortable having that person or their representatives roaming freely throughout their offices. Don’t hire someone you are not comfortable with, just to ‘tick a box’. The provision of a TSCM service provider should be considered in the same manner you’d hire a lawyer or other professional in whom you are going to confide.
Whilst the above list is by no means definitive, it will assist you to choose a suitable counter-surveillance team. Technical surveillance countermeasures are extremely difficult services to provide and literally take years and years to refine. It is just not possible to open a company and decide to offer these services, without extensive and comprehensive training and research.
A Genuine TSCM Consultant
A genuine TSCM consultant will personally know his or her peers both locally and abroad and will regularly attend international security conferences and craft-specific training with those peers. They will travel extensively to seek new products both for offensive and defensive solutions. It is no good offering TSCM services if you are not familiar with the devices you are up against!
Their equipment will cost in excess of six figures and they will turn up with numerous cases of equipment, to match the threats against your organisation. Rarely will they work one-up – a team is required and will comprise a number of physical search specialists as well as a lead technical resource (usually the principal). Those same professionals will be appropriately licensed and will be members of and regular contributors to industry-specific associations and/or institutions.
Technical surveillance countermeasures will be a passion of theirs and will be their primary business interest. It will form the core of their corporate revenue. Typically, they will be the preferred provider (as a sub-contractor or by referral) to the majority of the larger security service providers.
They will be fully licensed and insured and will be proud to produce evidence accordingly. Furthermore, they will encourage you to meet in person and will offer a demonstration of their equipment’s capabilities. In some instances and with client permission, they will offer referees who can vouch for their integrity and professionalism.
Being a TSCM professional requires dedication, commitment and vast resources. It should not be considered as a revenue source, rather a career requiring constant improvement and research. Counter-surveillance is an evolving craft within which there are very few genuine TSCM professionals.
Jayde Consulting Offers Professional TSCM Support
Jayde Consulting’s team comprises genuine, dedicated professionals, led by the firm’s Principal Julian Claxton. Julian is a proactive security professional and is extensively involved in numerous industry associations and institutes, several of which he has Chair’d. He also advises corporate boards and Government departments on security controls, legislation and counter-surveillance solutions.
Jayde Consulting is able to provide answers to any and all of the items listed above and welcome clients to our offices in Sydney’s CBD. We are often called-upon to give presentations on the services we provide and would be happy to meet with potential clients to discuss your requirements and provide an overview of the services we offer and the passion with which we deliver. To read more about us, please click here.
For a definition of technical surveillance countermeasures, please use this link.
Please do not hesitate to contact our team for additional information or a confidential discussion seeking counter-espionage advice or information on the services we offer.
Our email is 2016 [at] jaydeconsulting [dot] com or we can be telephoned on (02) 8006-0635. Additional contact information can be found on this page.