WHITEROCK
WHITEROCK WHITE PAPERS
Sharing Experience. Advancing Assurance.
Whiterock White Papers
Whiterock publishes a series of White Papers examining Physical Information Security Assurance (PISA), Technical Surveillance Countermeasures (TSCM) and the protection of information of value within the physical environment.
The series draws upon practical experience to examine information risk, physical and technical vulnerabilities, assurance and related areas of professional practice.
WP001
PISA - Assuring Confidentiality Beyond the Network
An introduction to Physical Information Security Assurance (PISA) and the protection of information as it moves beyond digital systems and into the physical environment.
WP002
When Confidential Information Becomes Physical
Examining how confidential information moves into the physical world through people, conversations, documents, displays and technology, and how the conditions affecting its protection change as it moves.
WP003
What Does a TSCM Sweep Actually Prove?
Examining what a Technical Surveillance Countermeasures examination can establish, the limits of point-in-time evidence, and the assurance value of a clear result.
WP004
The Absence of Evidence
Examining the distinction between finding no evidence of compromise and establishing that compromise has not occurred, and why understanding uncertainty is fundamental to meaningful security assurance.
WP005
Not Simply a Search
Explains the wider purpose of a TSCM examination: understanding the risks, assessing findings and providing evidence to support confidentiality.
WP006
The Boardroom as an Information System
Examines how people, premises and technology handle confidential information, and why responsibility for its protection must follow the information.
WP006
The Instinct to Dismiss
Explores why confidentiality risks can be overlooked, and how proportionate assessment helps distinguish assumptions, concerns and evidence.
WP008
Chess Fair Play and Physical Assurance
Considers how physical, technical and procedural safeguards can protect over-the-board competition, honest players and confidence in the result.