6. PHYSICAL SECURITY

6.1 General Procedures

Historically, the physical examination has probably been the most productive phase of all in locating clandestine listening devices with probably more devices having been located during the physical exam than during all other phases combined. The primary reason for this is that many of the devices found were found accidentaly by untrained personnel or were found during routine searches, examinations, or office moves. They were found with dead batteries or capable of being remotely turned off. They were found in areas in which electronic equipment may not be capable of effectively examining, such as behind cast iron radiators or in conduit or pipes accessible from unsecured areas. The list of known finds goes on and on and the undocumented cases (those performed for organizations not wishing publicity) could reach staggering proportions.

On the other hand, many devices found during a physical examination were first detected during other phases of the TSCM survey. They were either known to exist, through the interception of RF or audio signals, or were strongly suspected, but their actual location was unknown.

When performing a physical security evaluation of a surveyed area, a starting point must be established. It might be the door or a corner of the room. No mater where it is, a SYSTEMATIC examination must be performed of everything on or against the walls, progressing in either a clockwise or counterclockwise direction until a complete 360 degree circuit of the room has been completed. When checking items, they should be compared with like items whenever possible for weight and composition. If an item doesn't seem correct, perform a critical examination, to include X-Ray if necessary. Checking for pin holes, patches, hollow sounding areas, improper balance and new glue joints. Remove all cover plates and panels, whenever possible, to insure there are no devices or "extra" wires hidden inside.

Pat down curtains for possible devices in the seams, or in the curtain bars. Check for newly painted areas on and around the windows as well as the walls. (These could indicate areas where unauthorized maintenance was performed in hiding wiring or devices, or to cover conductive paint.

Check the door areas for similar indications. In addition, insure that doors have the proper hardware installed where required. Hinges should be spot welded or "pinned" to prevent removal. Doors should be of solid construction instead of hollow core construction. They should fit snugly into the door jamb. Felt should be installed on the inside edges of the door jamb so that the door fits snugly when closed. A door sweep may be required on the bottom of the door, as well. (These measures are to insure that conversations cannot be overheard in areas beyond the door.

Examine the floors, again establishing a starting and finishing point, examining the edges and working across the room. Carefully examine the area of all baseboards; remove cable run covers, whenever necessary; Check under and around rugs whenever possible.

Furniture should be examined to insure there has been no tampering or replacement. Check table lamp and floor lamp bases to insure the felt covers have not been removed and reglued. Look under and behind chairs to insure that dust panels have not been disturbed. Look for rips and tears and/or indications of removed and replaced staples or tacks. Tug on all wooden blocks to insure they are permanently attached and not some type of woodblock transmitter.

Obtain permission, especially in offices containing wooden desks and furniture, to open doors and drawers in order to check drawer partitions and under and behind drawers. The same type of thorough examination should be performed on other furniture as well as plants, curtains, books, ornaments, etc.

If the area is built over a sub floor, examine the area between the sub and true floors. Look for devices, extra wiring, holes in the walls, etc.

Examine the ceiling, to include those areas above false ceilings, for excess or extra wiring, unusual or unexplained devices, holes, etc. If alarms are installed, determine whether they are operating properly. (Determine this through the cooperation of the security representative with whom you are interfacing. It is not your responsibility to set off an alarm to check guard response unless done with security's authorization.

Check all rooms within the surveyed area to insure there are no hidden or little used service panels or unsecured service doors allowing access from adjacent unsecured areas, or from above or below.

Evaluate the acoustics of the surveyed area by performing a "talk test". (Normal conversations should not be understandable when the doors are closed, but will be muffled or unintelligible when monitored with the unaided ear.

During the course of a TSCM survey and during the outbriefing, it should be stressed that all unused and unnecessary electronic devices such as televisions, audio or video recorder/ playback units, radios, receivers, transmitters, beepers, etc., should be removed if not essential. If it is impossible to remove them, they should be unplugged and stored when not in use. During sensitive meeting or discussions, they should be completely removed from the area.

Public address systems, including loudspeakers should be evaluated. If the wiring to these units passes through ANY unsecured area, the speakers should be removed. (Speakers are nothing more than very large and efficient microphones capable of passing audio.) Check the speakers to insure that there are no additional wires attached. Check the wiring to insure there are no taps.

Intercom systems pose a very similar problem. In many instances, the "slave" units are hot wired at all times or can be bypassed by simple rewiring. Wireless intercoms pose much the same hazard, but additionally, a receiver connected to the AC wiring can monitor the conversations taking place over these units.

Don't attempt to commit anything to memory; write down all information pertaining to the area as it's easier to write down the information than it is to travel back to the area again to check it out.

In performing a physical security evaluation of a surveyed area, you must decide on a starting point. It might be the door, or a corner of the room. No matter where you begin, you must perform a SYSTEMATIC check of everything on or against the wall, progressing in either a clockwise or counter-clockwise direction until you have completed a 360 degree circuit. When checking items, compare them with like items whenever possible for weight or composition. If an item doesn't seem correct, perform a critical examination, to include X-ray if necessary. You will be checking for pin holes, patches, hollow sounding areas, improper balance and new glue joints. Remove all cover plates and panels, when possible, to insure there are no devices or "extra" wires hidden inside.

6. 2 Physical Examinations



Examine all surfaces

6.2.1 Walls

 6.2.1.1 Plugs
 6.2.1.2 Switches
 6.2.1.3 Pictures
 6.2.1.4 Windows
 6.2.1.5 Curtains
 6.2.1.6 Decorations
 6.2.1.7 Baseboards and ceiling molding
 6.2.1.8 Alarms
 6.2.1.9 Anything else not listed


6.2.2 Doors

 6.2.2.1 Facings and jambs
 6.2.2.2 Door construction
 6.2.2.2.1 Solid core
 6.2.2.2.2 Hollow core
 6.2.2.2.3 Partial door
 6.2.2.2.4 Vault door


6.2.2.3 Locks

6.2.2.4 Alignment

6.2.2.5 Sound attenuation characteristics

6.2.2.6 Hinges

6.2.2.7 Alarms

6.2.3 Floors

 6.2.3.1 True Floor
 6.2.3.1.1 Rugs and other coverings
 6.2.3.1.2 Edges
 6.2.3.1.3 Wiring trays and openings
 6.2.3.1.4 Holes
 6.2.3.1.5 Type construction
 6.2.3.1.6 Sound attenuation


6.2.3.2 Sub Floor

 6.2.3.2.1 Area between the true floor and the sub floor
 6.2.3.2.2 Wiring
 6.2.3.2.3 Holes or openings in walls between true floor and sub floor
 6.2.3.2.4 Alarms

6.2.4 Ceilings

 6.2.4.1 True ceiling  6.2.4.1.1 Type construction
 6.2.4.1.2 Holes or openings
 6.2.4.1.3 Molding
 6.2.4.1.4 Wiring
 6.2.4.1.5 Alarms


6.2.4.2 False (suspended) ceiling

 6.2.4.2.1 Construction
 6.2.4.2.2 Openings in true ceiling or walls above false ceiling
 6.2.4.2.3 Holes in false ceiling
 6.2.4.2.4 Wiring
 6.2.4.2.5 Unusual or inexplicable devices
 6.2.4.2.6 Alarms


6.2.5 Furniture

 6.2.5.1 Type construction and location
 6.2.5.2 Drawers-in and behind
 6.2.5.3 Drawer dividers
 6.2.5.4 Underneath furniture
 6.2.5.5 Accessories and devices located on desks or tables
 6.2.5.6 Chairs-in, under or behind
 6.2.5.7 Tables
 6.2.5.8 Lamps
 6.2.5.9 Plants
 6.2.5.10 Stands and miscellaneous
 6.2.5.11 Book shelves
 6.2.5.12 Miscellaneous items-models, displays, etc.

6.2.6 Outside areas

 6.2.6.1 All adjoining inner areas
 6.2.6.2 Outside areas
 6.2.6.2.1 Immediately adjacent to the surveyed area, walls and ledges
 6.2.6.2.2 Grounds
 6.2.6.2.3 Roofs
 6.2.6.2.4 Surrounding areas
| BACK |  | NEXT |