Skip to main content

Expertly updated

Protection against eavesdropping

Defense technical inspection against eavesdropping (TSCM)

Defensive technical inspection for wiretapping and hidden devices — before a sensitive meeting and after information has been leaked from a narrow circle.

A plainclothes technician checks a conference table with a handheld detector in a neutral meeting room before a meeting
defense technical inspectionfinding report with spectrum recordingmode of action

He is responsible for this service

Head of the operational department

GBH Group Operational Command

People in a typical office put down their phone and close their laptop — habits that determine the risk of eavesdropping

Risk does not arise from one box

The risk of eavesdropping does not come from a single hidden device. It arises from a combination of the space, the technology used, people's habits and a poorly set meeting schedule. Those who deal with acquisitions, disputes, personnel or family matters in the room tend to be at risk — and this is discussed in advance. A typical signal: the counterparty knows details of the negotiations that have never been made public. And one thing must be said in advance — the tour is a snapshot in time. The space is only clean until someone enters it without supervision. First we will find out the real situation. Only then will we propose measures.

  • Risk arises from a combination of space, technology, habits and mode of action — not a single box.
  • Warning signal: the other party knows non-public details, information has leaked from a narrow circle, objects in the room have changed position.
  • A tour is a snapshot in time — it must be followed by an access regime, otherwise the cleanliness of the space will not last.
  • A predictable schedule of checks bodes well for the attacker; we repeat them at irregular intervals.

Scope

What the product is — and what it isn't.

Includes

  • Meeting rooms and management offices
  • Vehicles — GPS locators, onboard connectors, service windows
  • Residence and private premises of the client
  • Conference technology, cabling and wiring in the space
  • Live spectrum monitoring during a sensitive meeting

Does not include

  • We do not monitor third parties or their premises
  • We don't eavesdrop — we execute only detection
  • We do not access private or police records
  • We do not guarantee zero risk; we will describe the residual risk
A technician with a flashlight inspects the wiring and the socket under the conference table — the scope of the technical inspection
Before entering, the technician studies the space plan on the tablet — the preliminary profile phase
A technician inspects the soffit and furniture in the meeting room — the physical layer of control
The technician watches the spectrum analyzer display in the room — electronic detection of transmissions
The technician at the desk writes the findings into a report in the meeting room — exit and safe mode

Procedure

First the reality. Then measures.

  1. 01

    Preliminary profile

    Preliminary profile

    We map out leak scenarios, who had access to the information, access to the space and service windows — even before arrival.

  2. 02

    Physical control

    Physical and thermal inspection

    We go through walls, ceilings, furniture and wiring; thermal imaging reveals heat traces of powered electronics, optical detection of hidden cameras.

  3. 03

    Electronic detection

    Electronic and network detection

    We analyze the RF spectrum including encrypted and GSM/LTE transmissions, with a non-linear detector (NLJD) we also search for switched-off devices, we check the wiring and Wi-Fi.

  4. 04

    Message and mode

    Message and mode

    We will pass on the finding report with spectrum recording and photo documentation and set a mode that will keep the space clean.

Coverage

We do not base the control on one device. We layer spectrum analysis, non-linear detection, thermal imaging, line inspection and physical inspection — and record every finding.

The technician runs the detector along the wall and ceiling of the meeting room — checking the space

Space and construction

Walls, ceilings, furniture and decorations — a physical inspection with thermal imaging and a non-linear detector (NLJD), which can find even a switched-off mini-recorder.

Technician's hands hold spectrum analyzer with spectrum chart — radio spectrum check

Radio spectrum

Analysis of the RF spectrum: active transmissions, anomalies, encrypted broadcasts and bugs abusing GSM/LTE networks with virtually unlimited range.

The technician checks the conference phone and the socket on the desk — checking the equipment and wiring

Equipment and management

Telephones, conference technology, cabling, sockets and power supplies — including wiretapping detection on telephone and data lines.

A technician checks the network switchboard and connected devices in the meeting room — connectivity check

Network and connectivity

Wi-Fi, Bluetooth, and connected devices that can leak audio or data outside — leak control via wireless and IoT elements (Cyber TSCM).

A technician with a headlamp inspects the interior and door panels of a car without a license plate — vehicle inspection

Vehicles

GPS locators, on-board connectors and interior — sensitive calls while driving and service or parking windows are opportunities for installation.

The background check manager sets up a sensitive meeting mode with the client at an empty conference table

Mode and habits

How things are done in the space, who has access, how meetings are arranged — and what will keep the space clean even after our inspection.

Hands over open printed discovery report on table — technical inspection output

Output for management

Discovery report

A written document for management, delivered personally and securely.

What the document contains

  1. What was checked, by what methods and in what layers
  2. Findings with degree of certainty, photo documentation and context
  3. RF spectrum recording as the default state for the next check
  4. Recommendations sorted by priority and a draft regime for future negotiations
  5. What we deliberately did not address and why

We describe detected status and recommendations, not threats. We only forward the message to authorized persons.

Role and mode

Who decides and how we cooperate.

  1. 01

    Head of background checks

    Single point of contact for the client, manages the team and is responsible for the output.

  2. 02

    Detection technician

    Performs physical, spectral, non-linear and network inspection according to the agreed scope.

  3. 03

    Guarantee of discretion

    It monitors the handling of information and the safe transmission of messages.

The inspection manager discusses the schedule and interval of inspections at the table with the client — roles and cadence

Operational log

  • A one-time inspection, or repeated inspections at irregular intervals — regularity indicates an attacker.
  • On-demand activation — typically right before a key meeting, with the possibility of live monitoring of the spectrum during it.
  • The finding is followed by verification of the effectiveness of the measure; in case of permanent risk, the design of a regime room or shielding.
  • We always send messages in writing and in person, only to authorized persons.
Form
One-time inspection before the meeting, continuous mode with checks at irregular intervals, or live monitoring of the spectrum during the meeting itself.
Timing
We plan the tour just before a sensitive meeting; until it starts, we keep the area under access control.
Scope
We define according to the scenarios and real risks of the area, not a flat rate. We will also say what you don't need.
Connection
We work with a minimum of insiders on the client side; there is no one to learn about the cooperation.

Discretion

There is no one to learn about cooperation with us. We work on the principle need-to-know — information is known only to those who absolutely need it for their role. Dates, outputs i the very existence of the background check we keep a low profile. We deliver the discovery report personally and store it securely. Discretion has its legal limits and we respect them — we do not promise absolute coverage.

  • Nondisclosure Agreement (NDA) as standard
  • Need-to-know: a minimum of insiders
  • Secure storage and personal message delivery
  • Low-profile arrival and control process

Standards and the law

Trusted capacity, within the limits of the law.

  • Proven and permanent team with a proven professional background
  • Competence in RF spectrum analysis, non-linear detection, thermal imaging and network control
  • Calibrated detection technique controlled by an experienced technician
  • Each conclusion can be substantiated by spectrum recording and photo documentation
  • Work within the framework of the relevant authorizations and the law
We work exclusively defensively and within the limits of the law. We perform intercept detection and protection — we never intercept or acquire third-party data ourselves. We do not install or sell wiretapping equipment. We do not monitor third parties, do not access non-public registers and handle data according to GDPR. Active wiretapping is reserved for law enforcement authorities.
The technician checks off the procedure items in the documentation at the desk — a verifiable and legal procedure

Proof system

Specifically, but discreetly.

A service detail should not end with a promise. It shows an anonymized scenario, methodology and output that management will really use.

We do not show the client. We show the decision.

  • 01 A find. Which is really weak.
  • 02 Procedure. Who decides and when.
  • 03 Output. Discovery report

Deliverable preview

Discovery report

  • What was checked, by what methods and in what layers
  • Findings with degree of certainty, photo documentation and context
  • RF spectrum recording as the default state for the next check
The client and the review manager during a calm consultation over the space plan — a decision-making conversation

Questions for decision

Is technical monitoring for wiretapping legal?

Yes. We perform defensive detection in our own or client premises, within the framework of the relevant authorizations and the law. We never eavesdrop ourselves — active eavesdropping is reserved for law enforcement. We do not track third parties.

Will anyone find out that you checked with us?

We work in a low profile and on a need-to-know basis. Only a necessary circle of people knows the date and the outcome, we deliver the message personally. Discretion has legal limits that we respect — we don't promise absolute coverage, but we keep cooperation quiet.

Can you find a device that is not currently broadcasting?

The tour is layered for that. Switched off and passive devices — typically mini voice recorders — will not be picked up by spectrum analysis; we look for them with a non-linear transition detector (NLJD) that reacts to semiconductors, thermal imaging and physical inspection. Devices activated only during the meeting deal with live surveillance of the spectrum during its course.

When does it make sense to contact us?

Before a key meeting, acquisition, dispute or personnel change. After suspicion arises — when the other party knows non-public details or information has leaked from a narrow circle. And as a precaution: regular inspections of sensitive areas belong to the care of trade secrets and information security management in the logic of ISO/IEC 27001.

How is the scope and price determined?

We build the scope on scenarios and real risks of the area, not on a flat rate basis. First we find out the real situation, then we only recommend what makes sense — and we'll tell you what you don't need. The price depends on the agreed range.

What happens when you find something?

We will describe the find in writing, with a degree of certainty, with photo documentation and context, and discuss with you the next step — from securing evidence to possibly handing the matter over to the authorities. In the event of repeated findings, we will propose permanent measures, for example a regime room. We don't decide for you; we will give you the basis for your decision.

Tomáš Šlesinger

The first interview is non-binding and discreet

"Describe the situation in a secure channel. Together we will determine whether and to what extent technical control makes sense. We will not scaremonger — we will describe the likely scenarios and their impact."

Tomáš Šlesinger · GBH Group Security Advisor

+420 605 460 824 slesinger@gbhdefence.com

Contact us

The first step doesn't have to be big. It must be correct.

We arrange a discreet orientation call, name the type of risk and recommend the next safe step.

15 minutes

by phone

CZK 0

orientation

24 h

reaction

GBH Defence office in Prague

First contact protocol

First we understand the situation. Then we suggest the next step.

Briefly write what you are dealing with. We will contact you discreetly and arrange a safe call format.

Call safely

Leave your contact information and we'll get back to you