What is Bug Sweep Training?
Gavin Saul, Government and Technical Director at Verrimus, makes it clear that ‘bug sweep’ or TSCM (Technical Surveillance Counter Measures) training is far more sophisticated than what many might imagine when they hear the term “bug sweeps.” “It has nothing to do with chimney sweeps,” Saul quips, emphasizing that the term covers a broad range of activities.
Different Terms, Same Goal
Whether you use terms like bug sweep, sweeping, TSCM survey, spy device check, de-bugging, technical surveillance checks, or eavesdropping denial, they all point to the same critical task: checking an Area of Concern (AoC) for technical surveillance attacks and vulnerabilities. “A technical surveillance attack is a method of compromising privacy,” Saul explains.
The Reality of Technical Surveillance
Saul dispels a common myth: “Typically, many people believe that the use of technical surveillance to compromise the privacy of an individual or organization is limited to Hollywood movies. Sadly, that’s not the case.” With the availability of sophisticated and inexpensive devices, technical surveillance attacks have become a real concern in our society. Trackers, audio recorders, and covert cameras are all examples of simple technical surveillance attacks. Saul invites those interested to learn more by booking a TSCM Awareness Course from Verrimus.
Specialized Training for Government, Police, and Military
Verrimus specializes in providing ‘bug sweep training,’ or operational TSCM training, exclusively to military, government, and police teams. “If you are part of a military, government, or police team required to perform TSCM services and would like to know more about our training, please contact us for further details,” Saul advises. Their training ensures that these teams are equipped with the skills and knowledge needed to counter technical surveillance threats effectively.
Support for Commercial Organizations
For commercial organizations, understanding how TSCM fits into the overall security landscape is crucial. Verrimus offers TSCM Awareness and Procurement training specifically tailored for these needs. This course covers what a technical surveillance attack is—and what it is not. It also assists participants in comparing procurement submissions from external TSCM service providers.
Saul points out, “Many commercial organizations are seeking to establish and maintain an internal TSCM capability.” Verrimus provides a range of modules and support to help these organizations develop an effective TSCM capability that matches their corporate risk appetite. Saul urges any commercial organization to undertake TSCM training before purchasing TSCM equipment. “To use an analogy, it’s not advisable to buy a vehicle before you’ve learned to drive!” he says.
The Importance of Training Before Procurement
Undertaking TSCM training to understand threats and threat domains before selecting equipment is the most sensible strategy. Saul elaborates, “Until you know how TSCM attacks are deployed, operate, and what they gather, you can’t design your TTPs (Tactics, Techniques, and Procedures). Until you have designed your TTPs, you won’t know what equipment will match your requirements and risk appetite.”
Effective TSCM requires a combination of relevant threat domain measurement tools and an operator with the knowledge and skills to understand, analyze, and interpret those measurements. “Learning what an uncompromised threat domain looks like makes it easier to identify anomalies for investigation,” Saul explains.
Choosing the Right Equipment
Saul warns against approaching TSCM equipment manufacturers without adequate training. “What you will be advised to purchase may not be suitable for your skill set, threat landscape, or risk appetite,” he cautions. He questions whether equipment suppliers discuss your team’s level of experience, your set of TTPs, threat domains and measurements, or your typical scenarios. “Some equipment required for TSCM has specific parameters that need to be met—not all thermal imaging cameras, for example, are suitable,” Saul notes. He also raises a crucial point: “Will the equipment sales team tell you how their equipment compares to other similar equipment?”
Remember: Sales Targets
“Remember,” Saul advises, “equipment sales teams have sales targets to meet.” This underscores the importance of being well-informed through proper training before making any purchasing decisions.
Conclusion
At Verrimus, the focus is on ensuring clients have the necessary training to make informed decisions about TSCM equipment. As Gavin Saul highlights, understanding the threats and the operational environment is essential before investing in tools. This approach ensures that the equipment selected will effectively support the organization’s specific TSCM needs.