Procedures for Conducting Technical Surveillance Countermeasures Surveys

1. Pre-survey Phase
   1. The pre-survey phase consists of all activities required prior to the beginning of the survey.
   2. Preparations will consist of the review of all information available regarding the area to be serviced. This will include the study and review of the following:
      1. Previous survey reports, to include floor plans.
      2. Information gathered during all pre-survey and initial contact interviews, such as type of operation, type threat suspected, area(s) to be surveyed, etc.
   3. Notification letters sent to the point of contact in the organization, stating who will be performing the services and their anticipated arrival times at the location, as well as a warning letter to be typed on THEIR company letterhead and to be held until such time as the TSCM Team Chief deems appropriate for it to be passed among the employees. Emphasis should be placed on the requirement for confidentiality regarding the pending TSCM survey as any reference to the survey may negate the efforts of the survey team. Further, the letter will request that the normal work routine be maintained in the area to be serviced and that the TSCM personnel have an escort and necessary accesses during the period of their stay.
   
   
2. Non-Alerting Phase
   1. The non-alerting phase is the most important aspect of the entire survey process if proper security has been maintained during the pre-survey phase. It has the dual objective of (1) providing maximum probability of the detection and location of a device and/or the listening post and (2) the opportunity for exploitation of a device if one should be discovered. An electromagnetic energy search shall be the first step of the survey; specifically, the Radio Frequency (RF) spectrum examination. During this portion of the non-alerting phase, all RF signals are to be evaluated for the purpose of determining whether they contain intelligence of a suspicious nature; specifically, audio, video or data emanating from the area being surveyed. No other form of evaluations should be attempted or initiated until the conclusion of the RF examination.
   2. A visual examination should be performed in and about the area being surveyed, after completion of the RF examination. This examination is for the purposes of determining where the most likely listening post locations might be and to determine whether there are any unusual or unexplainable items present. These may include, but are not limited to, antennas, lines or cables, underground connecting tunnels, and obvious physical weaknesses.
   
   
3. Alerting Phase
   1. A telephone analysis and physical examination of the telephone instruments and system will be performed to detect evidence of audio surveillance devices.
   2. Intercommunications systems (wireless intercoms, internal or emergency speaker systems, etc.) will be examined to determine their potential/capability for passing audio.
   3. Wiring will be evaluated for the presence of intelligence being generated through the use of wireless (carrier current) devices, microphones or other types of intelligence generating devices.
   4. An interior and exterior search for optical devices or potential for optical mounted attacks. Such attacks may include the use of video or still cameras equipped with high magnification lenses, binoculars or installations within the surveyed area using light modulation techniques.
   5. A detailed physical examination of all surfaces within the surveyed area will be performed. Areas behind removable panels and covers will be examined, as will sub floor and false ceiling areas. Office furniture and furnishings will be examined for the presence of covert surveillance devices.
   
   
4. Post Survey Activity
   1. Upon completion of the TSCM survey, the team chief will compile all information and findings and provide the responsible person(s) with an out briefing. Discussed will be all pertinent information relating to the survey; extent and results of the survey, identification of any hazards or weaknesses encountered and recommendations for corrective action. Also, all questions the client may have regarding what transpired during the course of the survey will be answered as thoroughly as possible. Any significant activities which were noted during the course of the survey, but which were not related to the survey activity will be addressed at this time. This could include evidence of theft, drug use, improper conduct, etc.
   2. Upon return to the normal business location, the TSCM team chief will prepare, or cause to be prepared, a detailed Report of Survey, to be completed and delivered to the client within 10 (ten) working days. In addition, any information which may prove useful on later surveys or visits to the same location should be noted and filed with the file copy of the Report of Survey.