- The missing business school courses. -
by Kevin D. Murray - CPP, CISM
Also available as a printable booklet with graphics.
Adobe Acrobat file
Intro. to Countering Industrial Espionage
Aside from the obvious fact that eavesdropping and espionage cancer will eventually desiccate a bottom line, wipe out a competitive advantage, and leave a company a shell of its former self, there are three more facts you need to know:
Spy Maxim #3 - Espionage is Preventable.
Information is like any other corporate asset. Management has a responsibility to protect it. Stockholders can claim negligence and hold company executives responsible if this asset lost due to improper protection efforts. Simple LAG (locks, alarms & guards) will not appear to be proper protection.
Spy Maxim #4 - The Law Only Protects Those Who Protect Themselves.
You can't just wander into the court room crying "They stole my business secrets" and expect help. You have to show the extraordinary steps you took (and maintained) to elevate your business information to secret status. Simple LAG will not appear to be extraordinary.
Spy Maxim #5 - Counterespionage is Not a D-I-Y Project.
- Don't buy eavesdropping detection gadgets.
- Don't play detective.
- Don't hire a private detective and let them play debugging expert.
This is serious business. Counterespionage work is a full-time specialty within the security field. Professional help is available.
How to Find Reputable Eavesdropping Auditors & Espionage Prevention Consultants...
Contact an independent security consultant who specializes in electronic eavesdropping auditing and espionage prevention. Recognizing this person may not always be easy. There are too few of them, and too many pretenders. Contact several corporate security directors. See who they are using. Contact the International Association of Professional Security Consultants via their web site.
What to expect from your Consultant.
Once you have a few names, take your time, make the right choice. Your relationship will be a long term one, encompassing:
- Periodic inspections of sensitive areas for electronic eavesdropping.
- Information security surveys.
- Information security policy reviews.
- Employee security awareness development.
- Vulnerability testing and security audits.
- General security resource assistance. Do not hire someone who only checks rooms and phones. This is like locking only one door in the building. Information theft occurs in many ways.
When interviewing potential consultants be sure to ask for a detailed resume, and check it for accuracy. You should see a pattern develop:
- True counterespionage consultants devote their careers to their craft.
- Counterespionage will not be supplementary to some other income source.
- 10+ years of security / electronic countermeasures experience is normal.
- A license and bond is required in most states.
Also, expect satisfactory answers on, at least, the following points:
- Formal security / electronics related education.
- The type of instrumentation used.
- Proof of insurance.
- Professional affiliations.
- Security industry professional certifications (Certified Protection Professional - CPP, CISM, etc.).
- Fees based solely on knowledge and service. A policy of not accepting remuneration from security product recommendations.
There are additional subjective criteria you'll want to consider also. Personal rapport. Appropriate dress and demeanor. Resist the temptation to bypass Mr. Right for Mr. Almostasgood just because there are some travel expenses involved or the fee quoted was not the lowest. This is false economy. Use the very best person you can find. You may only get one chance to "do it right." Remember, fees and expenses are minor compared to the value of what you are protecting.
About the author...
Kevin D. Murray - CPP, CISM has been solving electronic eavesdropping, security and counterespionage matters for business and government since 1973.
His many written works include:
Electronic Eavesdropping Detection and Industrial Espionage - The Missing Business School Courses formed the basis for his college course: Electronic Eavesdropping Detection & Industrial Espionage. Created for the John Jay College of Criminal Justice in New York City.
Mr. Murray is a Board Certified Forensic Examiner; a Board Member of the International Association of Professional Security Consultants; and a member of the American Society for Industrial Security.
The Murray Associates corporate client family keeps Kevin and his technical staff quite busy. However, there is always time to make a new friend, and room for one more family member.
Murray Associates services are available to corporations and government agencies only, throughout North America, and is classified for government procurement as a small business.