The threat of industrial and commercial espionage

April 2003 Security Services & Risk Management

Industrial and commercial espionage has been in existence for thousands of years, long before the advent of the industrial revolution. However, its importance has increased considerably in the past 50 years or so. This is due to the continuous advancement that has taken place in all fields of technology.

Nowadays, industrial and commercial espionage is heavily dependent on electronics. However, it cannot take place without the involvement of the human element. The reality is that, by having their information overheard, monitored and recorded, companies, organisations and private individuals may sustain serious damage to their economy, presence in the market place and private life.

Understanding the threat

Industrial and commercial espionage can be defined as a predetermined and unauthorised attempt to obtain information, from individuals, companies and organisations that would normally be withheld. Once captured, the information may be used for various purposes, eg, to achieve a competitive advantage, to tender for important contracts, the ultimate goal being to obtain financial gain. However, it is also possible that the individuals in possession of sensitive information resort to blackmail and extortion tactics, which in turn could lead to even more serious types of crime such as kidnapping and murder.

Electronic surveillance 'eavesdropping' implies the use of electronic methods, eg, radio transmitters, video and laser systems and photography, to gain access to various sources of information. This can be done in real or recorded time, directly from the source, be it a business or management meeting, computer hard disk, documentation or telephone conversation.

With modern, low priced and easily available electronic equipment, it is possible, with various degrees of effort, to monitor, listen, record and photograph the inside of companies, offices and boardrooms. The threat to an organisation's information system comes mainly from personnel but also sub-contractors, maintenance staff (eg, dishonest IT, telephone, PABX technical staff and office cleaners) and sales people.

The above individuals can act as paid agents for local or international organisations which may be interested in obtaining information either for their own purposes, or to forward it to other interested parties at a price. Electronic, cyber surveillance and photography are the most common methods of intrusion.

Identifying the targets

The targets of illegal surveillance can be not only companies and organisations, but also individuals who are believed to be in possession of important information.

The information being targeted can adversely affect many vital aspects of a company or organisation's activities including, amongst others:

* Labour union disputes with management.

* New product development and plans.

* Trade secrets.

* Corporate legal problems.

* Negotiating strategies.

* Mergers and/or acquisitions.

* Financial information.

Some foreign governments' agencies are also known to actively target business-related visitors as part of their overall intelligence collection activities.

Information capturing techniques

There are many information-capturing techniques, depending on the type of target being selected. Examples of known techniques are:

* Room monitoring (remotely).

* Tapping (phone, fax lines and data communication).

* Silent break-ins (eg, photography, tampering with computers and copying data).

* Recruiting inside personnel.

* Bribery of individuals/employees.

Electronic surveillance is one of the most common methods of obtaining information. Different devices, from simple to complex ones, can be utilised by agents to penetrate an information system such as, amongst others:

* Listening devices or 'bugs' consisting of transmitters and receivers. The transmitter can be concealed inside plugs, telephones, circuitries and lines, under chairs and tables, whilst the receiver can be placed up to a considerable distance away from the monitored site.

* Some transmitters are also able to transform any telephone into a sensitive 'bug' that will actually pick up all sounds and conversations within a large room, with the telephone remaining on the hook.

* Amplifiers with a parabolic aerial to capture conversations from a considerable distance.

* Cellular phone monitoring.

* Micro-cameras connected via fibre-optic or microwave link.

Eavesdropping transmitters are designed to operate on various frequencies, some of which may be very difficult to detect without the use of sophisticated equipment.

Protecting sensitive information

A basic rule of defence begins with the individuals who happen to be in possession of sensitive information, and can be summed up as follows: 'speak about sensitive issues: (a) only if necessary; (b) only to those people who need to know; (c) in a place where only people who are authorised to listen are present'. Other steps that individuals can take to protect proprietary information are as follows:

* Do not wear clothing with company logos. Avoid using business cards or other items with the organisation's name/logo on the luggage.

* Avoid leaving laptops and briefcases in hotel rooms. Always arrange to have them locked in a safe.

* Avoid using the laptop to access confidential information in a public area.

* Do not use foreign computers, fax machines or telephone to transmit confidential information.

The reality is that the protection of sensitive information is a complex task which implies the implementation of security systems and procedures such as physical and electronic security for the protection of sensitive areas, equipment and documentation, eg, burglar proofing, safes, strong rooms and document lockers, access control systems, biometric identification, intruder detection systems, paper shredders, computer and system passwords and encryption techniques.

An important preventative aspect, which tends to be overlooked by businesses and organisations, is the choice of suitable interior design as a method of counter-surveillance. The layout of office furniture in sensitive areas, eg, executive management and directors' offices and boardrooms should be kept neat and spacious; desks, chairs and cabinets should be simple with smooth surfaces; large plants, pictures and carpets should be avoided. If these recommendations were followed, on the one side, industrial and commercial espionage agents would find it more difficult to hide listening devices and, on the other, counter-surveillance specialists easier to spot them.

In this regard, through the intelligent and expert utilisation of electronic counter surveillance systems, it is possible to counter serious threats to a company's information system, and in such a way, protect information which if captured, could cause very serious damage to many organisational areas such as, amongst others, finance, trade, patents and innovations, personnel and labour matters.

It is therefore important for organisations in need of information protection to rely on the professional assistance of reputable companies involved in the field of counter-surveillance.

Counter-surveillance implies a thorough electronic and physical examination of a sensitive area with the aid of electronic scanning receivers and transmitter locators which are able to identify various frequencies emitted by different bugs.

An in depth physical search of sensitive areas is also necessary in order to localise electronic devices which may have run out of battery life or been remotely switched off.

Elio Zannoni
Elio Zannoni

About the author

Elio Zannoni is a criminologist and specialist in crime risk factors and prevention strategies. For further information on how to manage the threat of industrial and commercial espionage effectively, he can be contacted at International Threat Analysis - a division of Corporate Confidential Solutions - on 011 792 3739, fax: 011 791 6352, e-mail: [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Partnership addresses fire hazard mitigation
Brigit Fire (a Division of Hudaco Trading) Elvey Security Technologies Fire & Safety Security Services & Risk Management
Brigit Fire has partnered with the Elvey Group. The collaboration will see Brigit Fire distributing both the advanced C-TEC addressable fire detection systems (CAST Technology) and GreenMist lithium extinguishers.

Read more...
Fire protection for a solvent extraction plant in Africa
FS Systems Fire & Safety Security Services & Risk Management Mining (Industry)
A prominent mining site operates a state-of-the-art solvent extraction (SX) plant, integral to separating and purifying metals from ores, which pose significant fire risks, as SX processes involve highly flammable organic solvents and elevated operating temperatures.

Read more...
Taking fire safety seriously
G2 Fire Editor's Choice Fire & Safety Security Services & Risk Management
To gain insights into how fire systems must be designed, installed and maintained, SMART Security Solutions asked Nichola Allan, MD of G2 Fire, for some insights into the local fire market.

Read more...
SMARTpod talks to The Risk Management Forum
SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Videos Training & Education
SMART Security Solutions recently released its first SMARTpod podcast, discussing the upcoming Risk Management Forum Conference 2024, which will be held on 26 September 2024 at the Indaba Conference Centre in Fourways, Johannesburg.

Read more...
There is a SaaS for everything, but at what cost, especially to SMEs?
Editor's Choice Information Security Security Services & Risk Management
Relying on SaaS platforms presents significant cybersecurity risks as the number of providers in your landscape increases, expanding your attack surface. It is important to assess the strength of the SaaS providers in your chain.

Read more...
Unlocking new efficiencies in private security
Security Services & Risk Management Transport (Industry) Smart Home Automation Logistics (Industry)
Justin Manson, Sales Director at Webfleet, discusses how the urgent need to protect life, and to do so more efficiently, is driving continuous innovation in holistic home and residential security services in South Africa.

Read more...
Innovation and security go hand in hand
Technews Publishing Facilities & Building Management Security Services & Risk Management
In a world where the demand for tech innovation is matched only by the acceleration of cybersecurity threats, businesses face the challenge of balancing new product development and robust security measures.

Read more...
Bomb threat landscape in South Africa
Editor's Choice Security Services & Risk Management
Over the past 25 years, South Africa has faced thousands of bomb threats and explosive incidents annually, imposing a significant economic burden on the nation, costing billions of rand.

Read more...
Natural catastrophes and fire risks top concerns
Security Services & Risk Management Asset Management Residential Estate (Industry)
Natural disasters are the highest risk in the real estate industry, followed by fire and explosions, and then business interruption. Estates must prioritise risk management and take proactive measures to safeguard their assets, employees, and reputation.

Read more...
Building a solid foundation
Alwinco Security Services & Risk Management Asset Management Residential Estate (Industry)
Understanding the roles of a Risk Assessor and a Risk Manager is like building a solid and secure foundation in the security world. Andre Mundell makes it easy to understand.

Read more...