The Whiterock White Papers have been created to share knowledge, experience and perspective gained from more than three decades working in counter-espionage, technical surveillance countermeasures and the protection of confidential information.

Their purpose is not to disclose sensitive techniques or operational methodologies, but to encourage a broader understanding of how confidential information can become vulnerable beyond the network — through people, places and the physical environment.

By sharing this knowledge, Whiterock aims to contribute to the continuing development of Physical Information Security Assurance (PISA) and to help organisations think differently about how confidentiality is protected.
 

An Ongoing Series 

After more than half a lifetime working within counter-espionage and information protection, Crispin Sturrock, founder of Whiterock, is documenting some of the principles, observations and lessons that have emerged from that experience.

The Whiterock White Papers form an ongoing series exploring Physical Information Security Assurance (PISA), TSCM, surveillance risk, confidentiality and the convergence of physical and information security.

Some papers examine established principles. Some papers examine established principles. Others explore changing risks, consider different perspectives or develop ideas that have emerged through years of practical experience.

Together, the series is intended to create a growing body of knowledge — sharing what can responsibly be shared, encouraging professional discussion and contributing to the future development of physical information security.
 

COMING SOON

The Whiterock White Papers are an ongoing publication series, with new papers released regularly.

Future papers will continue to explore Physical Information Security Assurance (PISA), TSCM, counter-espionage, surveillance risk, speech privacy, executive and boardroom security, and the protection of confidential information within the physical environment.

New perspectives will be added as the series develops — drawing upon decades of experience while examining the changing risks facing organisations today.

Experience shared. Knowledge developed. Assurance advanced.