Scope of Services

Our service is designed to provide the highest possible risk overview of a facility in terms of its communication threat environment.​

To facilitate this, we place emphasis on the visual component of the review as it allows us to identify current breaches, risks and possible mitigation actions and/or strategies. 

​​

We inspect all cavities and crawl spaces with the aim of identifying potential threats. Our team also considers the efficiency of primary security controls and protocols as a first layer of prevention.​​​​​

RF vulnerabilities are more complex, the legitimate deployment of company owned infrastructure such as Wi-Fi routers, access points and Bluetooth devises means that a somewhat more rigorous assessment must be conducted.

​

For the less sophisticated deployment of RF devices, we conduct a nearfield RF “sweep” which adheres to, as does all our tests, to a very specific standard operating procedure.​

As cables represent a significant vulnerability in terms of communication interception, we verify each cable for its integrity and purpose. Cables are traced end-to-end throughout the building in line with the client scope. Scalability of our service means that we frequently test, and in the process, map the entire cable infrastructure, often developing the first comprehensive cable map for a facility. An output that is suitable for use, not only by the security department but also, the organisation’s IT and Facilities Management teams.​​​​​

To respond to the more complex RF challenges we deploy a combination of Software Defined Radios and RF Spectrum Analysers. This allows us to consider the RF vulnerabilities with more depth across a frequency range up to 12GHz as standard, but with the option of expanding this up to 50GHz where the risk dictates such expansion. Again, this speaks back to the scalability of our service.  

​

Spectrum Analysis used during the RF assessment, and Time Domain Reflectometry used during our cable assessments provides a highly accurate and scientifically validated approach to the technical risk assessment. 

Boardrooms, meeting rooms and breakaway rooms are intended to be areas within which confidential conversations can take place with a high degree of privacy. Determining the level of audio that "leaks" from such areas are essential in ascertaining the threat level associated with confidential and private information reaching an unintended audience. The cause is often the result of poorly designed, constructed or placed safe areas and our measurement greatly aids in identifying the risk, its cause and allows us to tender possible solutions.    

In response to the evolution of the communication data risk, our service has evolved and has been adapted to fulfil both pro-active and reactive functions. It is also no longer limited to conventional surveillance “sweeping” but has been designed to be a comprehensive and scalable data security assurance review or audit. 

​

Adhering to the ISO31000 risk management framework allows us to consider the communication security and its related data protection as part of the larger organisational risk. It also structures our risk assessment and response, aligning it to a preventative and mitigating control assessments. This results in a more holistic and integrated approach and is aimed at highlighting security deficiencies with focused mitigation recommendations.