The Boardroom Assurance Program

The Program

A scheduled TSCM program for Australian organisations

Most organisations call for a bug sweep after something has leaked. By then the damage is done. The Boardroom Assurance Program builds TSCM into your security protocol as a scheduled control, reducing the window of opportunity for a device to be deployed in your boardroom and executive spaces, with extra checks before the moments that matter most.

The Window

Why a program, not a call-out

A program closes that gap. Regular sweeps reduce the window of opportunity for a perpetrator to deploy a threat device, and find one quickly if they do. Trigger sweeps put an extra check in place before the meetings someone is most likely to target: the acquisition, the tender, the litigation strategy, the restructure.

It also changes how TSCM sits in your organisation. Instead of an emergency purchase, it becomes a budgeted control with a written record, like your penetration testing or your fire safety audit.

The Components

What a TSCM program can include

Scheduled sweeps of your boardroom, executive offices and key meeting rooms, at a frequency set to your risk.
Trigger sweeps before high-value events: mergers and acquisitions, major tenders, litigation, executive changes and sensitive negotiations.
Executive vehicle inspections for GPS trackers, Apple AirTags and other BLE (Bluetooth Low Energy) devices.
Mobile phone inspections for the executives whose phones carry your most sensitive conversations.
Offsite, event and travel sweeps of hotel meeting rooms, conference venues and temporary offices.
Executive residence sweeps, because sensitive conversations don’t stop at the office door.
Sweeps after any change to your space: a fit-out, renovation, move, new furniture or a difficult staff departure.
A written report after every sweep, suitable for your risk or audit committee.

The Process

How it works

Confidential floor plan review. You send us your floor plan and tell us about your organisation and its sensitive activities. Nothing is shared, and we are happy to sign your NDA first.
We design the program with you. Together we agree which spaces are covered, how often they are swept, which events trigger an extra sweep, and whether vehicles, phones and offsite venues are included. You receive a quote for the program.
Baseline sweep. The first sweep establishes the radio frequency environment of your premises, so later sweeps can spot anything new.
Scheduled and trigger sweeps. We attend on the agreed calendar and whenever a trigger event comes up, within an agreed notice period. Sweeps are carried out outside business hours, when the spaces are empty and the visit draws no attention.
Reporting and review. You receive a written report after every sweep, and we review the program with you each year as your premises, people and risks change.

The Outcome

What your board receives

A written report after every sweep, recording what was inspected, how, and what was found.
A documented record that TSCM is performed as a regular control, for your risk register, your auditors and your board.
A single specialist who knows your premises, rather than a different provider each time.
Certainty. Many sweeps find no technical threat, and that is a good outcome: it means your board can speak freely.

Who the program is for

Listed and private companies with active boards
Organisations involved in mergers, acquisitions, major tenders or litigation
Law firms, financial services and professional services firms holding client confidences
Government departments and agencies
Family offices and high-net-worth individuals with business interests

The Specialist

Who delivers it

Every sweep is led by our director, an internationally trained technical specialist, alongside his team. Your program is never subcontracted to another provider, so you always know who has been in your boardroom.
Layered methodology: radio frequency spectrum analysis with an OSCOR Green 24 GHz analyser and Kestrel TSCM software, non-linear junction detection, FLIR thermal imaging, lens detection, Wi-Fi analysis and physical inspection.
Operating since 2014 for corporate, government and residential clients.
100% Australian owned and operated, based in Melbourne and operating across Australia.
Victorian Security Licence and $20 million public liability and professional indemnity insurance.
Strict confidentiality. We never discuss our clients or their work.

Questions

Frequently asked questions

How often should our boardroom be swept?

It depends on what is discussed there and who has access to the room. We recommend a frequency during the floor plan review, and most programs combine regular sweeps with extra sweeps before high-risk events. The more often you sweep, the smaller the window of opportunity for a device to be deployed and go unnoticed.

What does a program cost?

Every site is different, so every program is quoted individually. Depending on the size of the site, a single sweep takes from about four hours to a couple of weeks. Send us your floor plan for a confidential quote.

Can we start with a single sweep?

Yes. Many organisations start with one sweep, which then serves as the baseline for a program.

Do our staff need to know?

No, and ideally they shouldn’t. Our work runs on a need-to-know basis: if someone inside your organisation planted a device, advance notice gives them the chance to remove it. We work outside business hours, and only the people you choose are told.

What happens if you find a device?

We stop, document it and advise you on your options before anything is disturbed, including preserving evidence for a police or legal response.

Do you work outside Melbourne?

Yes. We operate across Australia.

Next Step

Start with a confidential floor plan review

Send through your floor plan and we will recommend a program that fits your organisation, with a confidential quote. Call 0410 092 207 or get in touch through our contact page.