Technical Surveillance Countermeasures Equipment for TSCM Operations
TSCM operations (or as it is commonly referred to a bug sweep) requires measurement equipment AND an experienced TSCM professional. The TSCM professional analyses and interprets the measurements gathered, in order to detect, identify and pinpoint locate surveillance attacks (and vulnerabilities).
What Do I Need?
Clients ask us “what TSCM equipment do I need?” Well it’s not a tiny handheld device as depicted in Hollywood movies! Before any TSCM team should consider purchasing ANY equipment it is essential that they understand the threat domains. Once they have an understanding of threat domains and methods of technical surveillance, they can then begin to assess TSCM equipment that will accurately measure aspects of the domain and which meets their own organisational risk appetite.
Purchasing TSCM equipment because an equipment sales person or manufacturer tells you it’s what you need is wrong! Don’t fall for it!
A TSCM equipment sales person will rarely provide you with honest and accurate comparisons between their piece of equipment and the others on the market. They will rarely list limitations of the equipment. They will usually fail to mention any negative feedback they’ve received. They are unlikely to mention any problems with transporting or operating the equipment in different environments. It’s unlikely too that they will tell you where the equipment or components within the equipment were manufactured (obviously a concern for any TSCM operator – does the equipment or components within it have back doors accessible by a FIS?). They certainly won’t tell you if there is FREE software or other available inexpensive tools that provide the measurements you require to conduct an aspect of a TSCM survey.
Don’t get caught out with the sales patter.
A sales team need to meet their sales targets, they need the commission!
A demo from a TSCM equipment sales team or manufacturer is likely to show you every function that equipment can do, rather than the specific measurement requirement you need. Are all of the functions that piece of equipment can do relevant or necessary in relation to your specific TSCM TTPs? Is it over complicated? Does it gather irrelevant measurement information?
Seek independent assessments and evaluations of TSCM equipment you may be interested in purchasing. Trial the equipment before purchasing. Have a demo provided by end users, not the manufacturer, not the sales team, but people whom actually need to perform the task daily. People who have actually used the piece of equipment in a variety of settings, on live operations and can tell you everything good and bad about that item. You can then make an informed decision regarding what will work best for YOUR TTPs and the scenarios you are required to operate in.
For assistance evaluating TSCM equipment, contact info@verrimus.com