WHITEROCK
Whiterock WHITE Papers
Sharing Experience.
Advancing Assurance.
Whiterock publishes independent WHITE Papers examining Physical Information Security Assurance (PISA), Technical Surveillance Countermeasures (TSCM) and the protection of confidential and valuable information.
Drawing upon professional experience, the series explores information risk, surveillance threats, physical and technical vulnerabilities, operational responsibility and the practical meaning of assurance.
The publications are intended to support informed discussion and decision-making among security, risk and information management professionals.
WHITE Papers Index
WP001 — PISA: Assuring Confidentiality Beyond the Network
WP002 — Authorised Surveillance
WP003 — What Does a TSCM Sweep Actually Prove?
WP004 — Out-of-Hours Exposure
WP005 — Unpredictability
WP006 — Follow the Information and the Person
WP007 — The Value of What You Know
WP008 — Chess, Fair Play and Information Security
WP001
PISA - Assuring Confidentiality Beyond the Network
An introduction to Physical Information Security Assurance (PISA) and the protection of information as it moves beyond digital systems and into the physical environment.
WP002
When Confidential Information Becomes Physical
Examining how confidential information moves into the physical world through people, conversations, documents, displays and technology, and how the conditions affecting its protection change as it moves.
WP003
What Does a TSCM Sweep Actually Prove?
Examining what a Technical Surveillance Countermeasures examination can establish, the limits of point-in-time evidence, and the assurance value of a clear result.
WP004
The Absence of Evidence
Examining the distinction between finding no evidence of compromise and establishing that compromise has not occurred, and why understanding uncertainty is fundamental to meaningful security assurance.
WP005
Not Simply a Search
Explains the wider purpose of a TSCM examination: understanding the risks, assessing findings and providing evidence to support confidentiality.
WP006
The Boardroom as an Information System
Examines how people, premises and technology handle confidential information, and why responsibility for its protection must follow the information.
WP007
The Instinct to Dismiss
Explores why confidentiality risks can be overlooked, and how proportionate assessment helps distinguish assumptions, concerns and evidence.
WP008
Chess Fair Play and Physical Assurance
Considers how physical, technical and procedural safeguards can protect over-the-board competition, honest players and confidence in the result.