Corporate periodic TSCM programme

Why one sweep isn’t enough

A sweep verifies a space at the moment of the sweep. The next day a new object can arrive, a refurbishment can start, a contractor can get into the boardroom. For organizations whose information has lasting value, the real question isn’t “are we clean today?” but “how do we keep verifying it?” A periodic programme answers that with a plan.

It is more than a series of one-off sweeps. Comparing each sweep with the last makes change visible: a new wireless transmission, a ceiling tile refitted, a device added to a room. A change that means nothing on its own can become a finding when set beside the previous measurement.

How the programme is built

Risk assessment. We start with what needs protecting: the boardroom, the CEO’s office, legal and finance meeting rooms, R&D areas, executive homes and vehicles. Then we look at who accesses them, how often, and which sensitive processes lie ahead.

Baseline sweep. Critical spaces are swept with every method: RF spectrum analysis, NLJD, thermal and optical checks, physical inspection, line analysis and, where relevant, a network check. We record an RF baseline for each space, against which later sweeps are compared.

Planned schedule. Frequency follows risk; some spaces are swept more often than others. Dates don’t follow a fixed pattern and are known only to the programme owner and whoever handles access. A predictable schedule makes it easy to remove a device before sweep day and put it back afterwards.

Event-driven sweeps. Outside the schedule, we recommend extra sweeps after refurbishment or relocation, a new meeting room, a critical negotiation or board meeting, the departure of someone in a sensitive role, or suspicious access or a leak.

Policy recommendations

Technical sweeps are most effective alongside administrative measures. The programme includes practical advice on:

• Visitor, contractor and cleaning access to critical rooms
• Checking gifts and promotional items sent to executives
• Phone and smart device policy for sensitive meetings
• Recording refurbishment and cabling changes
• The internal procedure to follow if a device is found

Confidentiality

The programme itself is sensitive information. Dates, reports and findings are shared only with the people you designate. We sign NDAs on request and deliver reports by a secure method you choose.

• Don’t discuss the programme in the spaces to be swept or on phones in them.
• Agree a contact channel outside the corporate network and any suspected devices.
• If you think you’ve found a device, don’t touch or move it.

Nationwide

We’re based in Ankara and work on site anywhere in Turkey. For organizations in several cities, all locations can share one schedule and reporting format. Scope, frequency and content are quoted after the assessment.