Search This Blog

Sunday, 25 October 2009

Spies in the boardroom

Not a week goes by without our offices receiving one or more telephone calls from around the world asking if something is technically possible.

Almost anything is technically possible in espionage when you are dealing with multi-billion pound litigation cases, mergers and accusations or intellectual property rights. A budget of £100k will buy a package of email interception and telephone tapping for a month; while this amount sounds quite high, when involved in a hostile takeover or litigation worth hundreds of Millions of pounds it makes good financial sense to some when they are involved in takeover or litigation worth hundreds of millions of pounds.

Many working within the public security sector or defence industry understand little about espionage or the little that they do know is well out of date. Espionage is a very fast moving sector. Each innovation in communications leads to another way of interception, every time microprocessors get smaller and faster covert eavesdropping devices get smaller and smarter.

Almost every day, we at International Intelligence Limited asked how people can communicate safely and our answer always remains the same – “you are far safer talking over your fence to your neighbour than you are making a telephone call, sending an email or fax. All forms of electronic communication can be intercepted at some level or another”.

This may sound a little over the top or scare mongering, but the fact is that a low cost covert transmitter placed within a company’s boardroom can cost the target company millions in lost deals, legal cases or intellectual property theft.

Understanding the basic principles of espionage and human nature is a good start for secure working practices and a basis of an organisations housekeeping policy.

Corporate responsibility
Many organisations and companies fall at the very first hurdle and lack basic internal and external security. For example, can you be certain how many members of your staff would challenge a stranger walking around the office with a clip board under arm or wearing a hard hat and workman’s vest?

It is a good start therefore to have a basic policy of staff identity cards worn at all time is a good start, it is the duty of all staff to make this policy work. What’s the use of having a security policy that is costly, difficult to implement and impractical?

One firm that we recently visited had a sound security policy, CCTV and static security guards checking everyone at reception. Great, you may think, yet we gained access to the offices and boardroom via the fire escape that was propped open by a chair that gave workers access to a place to have a quick smoke.

At the end of the day a security policy is only as good as the staff within the building – it is everyone’s responsibility, from Cleaner and Typist to the CEO.

Espionage is on the increase in the UK and is on the increase, over the past five years, there have been a number of public cases that have involved accusations of bugging, email interception, telephone tapping or waste theft.

Espionage and the Law
In the UK there are no specific laws that cover espionage and therefore any prosecutions have to be carried out under other laws. For example if you were caught tapping a telephone line you could be arrested under a number of acts, you could be arrested under Article 8 of the Convention on Human Rights, Interception of Communication Act 1995/ Regulation of Investigatory Powers Act 2000 or the Protection from Harassment Act 1997. You might be prosecuted for theft of electricity from the telephone provider and trespass.

Company’s which employ investigators in support of litigation cases may run into problems over how intelligence gained is going to be used in court. As all evidence has to be disclosed to the opposition in the case, any which has been obtained unlawfully may be discounted by a judge and action taken against the party submitting it. This happened in the Dubai Aluminium case, when an investigator was employed to obtain bank details in breach of the Data Protection Act 1984 which was then in force.

A recent case where telephone tapping/interception took place was St Merryn Meats Ltd and others vs. Hawkins and Others ([2001 ALL ER (D) 355) where evidence was gained by bugging a person’s home telephone. The court held that this was unlawful, as it constituted an offence under the Interception of Communications Act 1995 which has been replaced by the Investigatory Powers Act 2000.

It is, therefore, probably more sensible and less stressful to avoid the need for litigation in the first place and there are ten basic steps that any organisation can take to secure its operations. These are easy to follow and, far more importantly, easy to implement.

Steps to counter espionage
The first step to counter espionage is to identify the strengths and weaknesses within your organisation or company in order to help develop a sound security policy, based on findings.
  • All departments’ should have cross shredding type shredders because the waste from strip shredders can be placed back together with a little work.
  • All documents should be locked away in secure cabinets prior to the end of each day.
  • Programmes for encryption of email and files to government standards can be downloaded free from the Internet.
  • Documentation concerning sensitive issues, mergers or takeovers should never leave the workplace unless signed out and secured.
  • A CCTV system giving internal and external coverage will put off any illegal activities and deter the opportunist.
Never open email attachments from unknown sources as these may contain Trojan viruses that can be used to attach your computer from within. Always update your anti virus software and make sure all staff are aware of this risk as viruses can spread on networked systems at speed.
  1. Changing from analogue to digital or normal copper pair to fibre-optic telecommunications will foil attempts to intercept telephone or fax lines.
  2. The wearing of Staff and Visitor ID will enable all workers to identify persons that do not belong in a given sector or are unaccompanied.
  3. A Technical Surveillance Counter Measures (TSCM) Sweep of offices should always form part of a good housekeeping policy as it is designed to find any devices placed within communications systems or offices.
During the course of a year, we hear the same excuses from people who are convinced that their companies’ security policies are adequate and that they need to take no action to update their systems. These include the old myths such as their company not being a target, phone tapping being too expensive to worry about and the belief that they are safe because they work from home.

They ignore the fact that no organisation is too large or too small to be targeted. The very nature of business competitiveness means that people will want to know your secrets, what your new product is, who your clients are and what you charge them.

They ignore the fact that directors who work from home are softer targets for telephone and email interception.

What they should be doing is working out what their last contract was worth and what it would mean to them if they lost it to Joe Bloggs up the road.

Don’t arm terrorist

Alex Bomberg and John Bradridge reveal how UK security manufactures should guard against their equipment falling into the wrong hands.

In the defence industry today more then any other, due diligence must play a vital roll in the war against terror and, as part of any company’s housekeeping policy, it should be employed at the initial stages of any joint venture and agent selection.

While the task of carrying out due diligence can involve complex networks of ownership, directors and links to government officials, in some ways common sense is the first indicator.
It is a fact that people do more to carry out checks on potential partners in relationships than they do when it comes to financial deals and business partnerships, but what could once have been sealed with a handshake now requires a series of checklists, meetings, decisions and the added cost of peace of mind.

So what is due diligence? It is best described as: “The process of systematically evaluating information, to identify risks and issues relating to a proposed transaction, i.e. to verify that information is what it is proposed to be”.

Due diligence definition
Due diligence must in every case be measured, reasonable investigation into a company, group of companies or individuals to obtain intelligence which allows you to make an informed decision based on what you have discovered, without being totally reliant on it.

The definition of due diligence is simple. What is not simple is how to carry it out, when to carry it out or even how much should be built into the budget to pay for carrying it out.

But what link does this all have with terror, you might ask? The answer is that in 2004/5, there were two cases where separate companies both sold defence products to companies in the Middle East. Items from both companies have since been found on dead Taliban fighters and an investigation is underway by the authorities.

Due diligence checklist
Due diligence can be split down in to sections:
  • Company information - director's names, formation and ownership details
  • Financial information - current turnover and past returns
  • Legal history - judgements past, present or pending
  • Political risk indication - country and region
While the above can be broken down further into complex discussions and argument, it represents the fundamental basics of what needs to be investigated to help with decision-making. Every company can undertake a level of due diligence at no cost whatsoever just by having a set standard in place and a check list for every supplier, agent or end-user. This information must, of course, be verified, but just asking for it will in itself add to a company's security.

Prior to any business relationship, basic information should be requested in a formal document drawn up as part of either a non-disclosure agreement (NDA) or as a stand-alone document. Gathering copies of documentation and basic information will act as basis, the start of a lengthy process that will culminate in founded decision.

A formal request should be made for the following
  • Names, addresses and dates and places of birth of all company directors
  • Past employment of directors
Names, addresses and dates and places of birth of all company shareholders (non-listed companies)
  • Company formation documentation
  • Company structure
  • Company insurance documentation
  • Office locations and registered head office
Any company being asked to submit the above information will, if intending to commit any fraud or unlawful act, think twice before proceeding with any transaction.

Available today on the internet is a vast arsenal of information which is easy to use and can save a company thousands of pounds on the cost of due diligence. Understanding how search engines work can be daunting, but the basics for finding out information are quite simple and rudimentary facts can be obtained via this method.

However, corporate investigation or intelligence gathering is only a part of due diligence because financial data needs to be examined just as filly for abnormal, unexplained rises or falls in turnover or profit. Whilst Companies House in the UK can be a great source of information on a UK-registered company, many other countries do not have what can be described as reasonable company registration procedures.

International due diligence
Where a country does not have an easily accessible database of listed companies, and financial or tax returns listings, the process of due diligence becomes more complex and expert help is required.

Many UK companies call on the service of business intelligence providers to carry out due diligence on their behalf and, while a report may be forthcoming, the report in all its glory cannot in itself be relied upon when making a final financial decision; this can only be up to the instructing party.

Unovering legal history can also be a headache even in most economically developed countries; it’s a case of knowing where to look for the information. Many companies are not going to quickly volunteer any legal complication they may have had in the past, yet this area is key to the success of any possible relationship.

Since the internet has evolved, the task of uncovering legal history has in some cases become easier and misdemeanours, case history and legal judgements are also reported on within the national, local and business press. However, this may not be the case in some jurisdictions and, in the age of jet travel, it is perfectly possible that some individual or groups of individuals may have committed and/or been charged with a crime in another part of the world. The possibility of this happening should not be overlooked or underestimated.

Political risk?
Political risk indicators about whether a particular country or region is stable should also be examined. Always ask yourself whether a sudden change of government, government policy or law in the country concerned would put an end to any deal you may have been planning?

This area is far from uncomplicated. Our own government often fails to read or judge what is happening and little foresight is a poor excuse and is no defence for not trying to address this issue or, at the very least, to consider the implications. History is often not that good an indicator of possible upheaval; so keeping abreast of changes in the laws of a country is more a matter of having your finger on the pulse, investigation and monitoring situations as they develop.

But remember – any due diligence report is only a snapshot in time, so fresh investigations should be carried out at regular intervals to identify changes in company directors, ownership and company direction.

Alex Bomberg is a member of the Royal United Services Institute and an expert in intelligence gathering and counter espionage.
John Bradridge is a former senior Police Officer. They both work for Cotswold-based International Intelligence Limited which acts for corporate and govenment clients.

Oakley SI Half Jacket XLJ Polarized Sunglasses

Oakley SI Half Jacket XLJ Polarized Sunglasses, hi-def optics with an expanded field of view

Oakley SI Half Jacket XLJ Polarized Sunglasses are high grade sunglasses, offering both 100% UV protection and impact protection. Lenses are interchangable (standard or polarised available) and the sunglasses are ideal for Police, SWAT, Military or Close Protection teams.

Oakley SI Half Jacket XLJ Polarized Sunglasses, Performance

Sporting top-half frames coverage, these open-edge design Oakley SI Half Jacket XLJ Polarized Sunglasses are a combination of enhanced style and performance - extending your vertical field of vision. Peripheral clarity of XYZ OPTICS® retained. That's just one of the patented innovations that give HIGH DEFINITION OPTICS® (HDO®) its unbeatable performance.

Defensive Driving Course

The Defensive Driving Course will benefit the overall service, that you are able to give your Client. Our course is aimed at reducing not only the loss of personnel and vehicle by road traffic incidents, hi-jack or ambush, but will also go a long way to educate the workforce as to the real dangers of terrorist and criminal activities and help them to recognise a potential situation before it develops.


The course content will be delivered by former members of the British Army and Police Officers using tried and tested Police Advanced Driving and Special Forces techniques. The course is aimed at professional drivers and individuals who face a certain level of threat. Whilst defensive driving takes time to master, the course will teach safe and progressive driving skills with further education into areas of risk and threat assessment.

As drivers you are responsible for your vehicle and those travelling within. The threat of hijack or kidnap is real. The tried and tested techniques learnt will give you the confidence and awareness to make quick and effective decisions in crisis situations.
 
The ability to execute:
  • Safe driving standards to RoSPA Level
  • System of car control
  • Anti ambush/hijack drills
  • Counter surveillance
  • Personal security awareness
  • Hazards and observations
  • Route planning
Certification:
  • RoSPA Advanced Drivers Test Certificate
  • BTEC Level 2 in Driver Development
  • Intelligent Training International Limited Certificate in Security Driving competence

Magnum Elite Force 8.0 WPi Boots

Magnum Elite Force 8.0 WPi Boots with Ion-mask technology, Winner of the Footwear Innovation 2009 Award!


The Magnum Elite Force 8.0 WPi Boots are a great value tactical assault, police or SWAT boot as an assault boot or as a general purpose patrol boot.

Magnum’s New Elite Force 8.0 WPi features their ion-mask technology, which was originally developed to keep chemical agents off soldiers. Magnum is now bringing this technology to the law enforcement market with the introduction of the Magnum Elite Force 8.0 WPi boot.

With the Elite Force 8.0 WPi boot, Magnum were voted winners of the Company Clothing Awards 2009 for Footwear Innovation, One of the most highly competitive and coveted awards in the worldwide clothing industry.

Ion-mask technology
Ion-mask is a breakthrough in surface enhancement. it works at a molecular level, binding invisbily to the surfaces of products, giving them an extroardinary ability to repel most liquids, including blood borne pathogens and chemicals.

Vibram® outsoles
Magnum Elite II 8.0 WP Leather Insulated Boots feature Vibram outsole, marking them Slip resistant, strong and heard wearing.

Magnum Elite Series
The Magnum Elite Series is designed for the user that demands the most from themselves and their gear in situations that do not allow for mistakes or equipment failure.

Features:

  • Ion-Mask technology
  • Full grain/action leather upper with highly breathable aero mesh
  • Durable non-metallic composite hardware
  • Lightweight vertical build system
  • Running shoe last
  • Unique UNI-form molding footbed
  • Dual density Polyurethane midsole
  • Exclusive Vibram® outsole
  • Airport friendly

Intelligent Armour Limited

Recently we updated our old website and our new body armour website address is:

Intelligent Armour Limited

We are now stockists of:
Our company
Intelligent Armour Limited
Company Registration Number: 6579484
Incorporation Date: 29th April 2008
VAT Registration Number: 936 1511 35
D&B® D-U-N-S® Number: 211183283

Our origins
In 2008 Intelligent Armour Limited was formed out of its sister company International Intelligence Limited and both companies are now part of Intelligent (UK Holdings) Limited.
Intelligent (UK Holdings) Limited group of companies consists of:

We also provide state of the art tactical & covert body armour, plates and helmets for both military, police and civilian usage.

We offer our clients a choice of the latest fabrics, Goldflex and Dyneema, or traditional Kevlar. All vests meet the certified test requirements of NIJ or STANAG 2920. Stab resistant vests providing the necessary certified protection levels are also available on request.
Procurement & bulk order

Our procurement section deals with all orders over 10 units, for which trade or discounts apply. Please contact us providing the relevant details to enable us to negotiate discounts, delivery terms etc.

Over the past few years we have supplied equipment to both security and non-governmental organisations working in hostile environments. These includes the likes of the Middle East and Africa.


Our online store and your payment card security
Our online store transactions are dealt with via Paypal. This card payment service is secure and we do not hold any card information on any of our systems. Our online store is secured further via the use of McAfee.

McAfee Secure Sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams.

Thursday, 28 May 2009

Who is watching you?

Who is watching you?
Senior jobs in finance are highly paid and high profile - which helps explain why employers are becoming more aggressive in their vetting processes of potential recruits. But how far can they go?

In bars in the financial districts, the talk is about the jobs market and who is going where. It's a perennial theme but one which recently has been given a new twist. Now much of the chat over the premium beers and pinot grigio comes back to the lengths to which recruiting employers will go to ensure that preferred candidates - both individuals and teams - are all they promise to be.
Gone are the days when a CV was accepted on trust. Gone are the days when a quick check of references was the norm. Increasingly, specialist corporate investigators are becoming a common feature of the recruitment landscape in financial services - and not just for the £1m+ jobs. These people dig into candidate CVs and backgrounds and run checks for their client companies.

For the person on the receiving end it can be an intrusive experience, particularly as the law in this area is grey, to say the least.

There is some protection in place, in the form of the Data Protection Act. The employment practices code of the Information Commissioner the Act's enforcer says firms should only use vetting services when there are "particular and significant risks involved to the employer clients customers or others and where there is no less intrusive and reasonably practical alternative". The code adds: "Wherever practical, firms should obtain the relevant information directly from the applicant, rather than undertake pre-employment vetting."

Given the sensitivity of financial services work, that still leaves a lot of room for digging. As Alan Beazley, of Risk Advisory Group's employee screening service, puts it: "Most of our work is for regulated financial services clients, so we are aiming to protect their reputations and ensure proper vetting of people who are going to become approved persons by the Financial Services Authority (FSA)." It is not uncommon nowadays for potential recruits to be asked to volunteer key personal and financial information. But you have the comfort of knowing that without your consent the information cannot be accessed. Corporate investigators have no power to obtain financial records like bank credit card or loan accounts. The same applies to medical records, and some universities refuse to verify qualifications. But a refusal to play ball can be considered telling in itself.

Alex Bomberg, managing director of International Intelligence, another investigations agency working in this area, says: "We often ask the client to get the applicant to perform a police national computer check on themselves. If someone has got something in their past, they will normally refuse to do it."

The higher the profile of the job and the bigger the salary bill, the more aggressive the vetting can be. Some firms even use surveillance of potentials recruits - and particularly when taking on teams of people, at great cost, from rival institutions. The ethics on this are unclear. A spokesman for the Information Commissioner says: "Surveillance would be frowned upon by us, unless it was made clear to the employee that he was going to be followed home when he left the office. It would be seen as a major intrusion."

Under surveillance even given that surveillance does happen. Bomberg says: "Sometimes, when employing people abroad, potential employers like to know what someone's lifestyle is like. The last thing any big company wants is to employ someone who is out snorting cocaine every night or visiting houses of ill repute."

For people in the industry, the message is clear - get used to the new high-level vetting procedures. Corporate investigations is an "expanding field of work", according to Bomberg. His business now has a staff of 30 and offices in New York, London and Paris. But it is also possible to make life easier for yourself by understanding what recruiting companies are looking for.

Patrick Grayson, one of three founding partners of London investigations firm GPW, says: "Our job is to look for the hair cracks in the CV." Such "cracks" can include gaps in employment history, which can sometimes indicates an unsuccessful short period in a post the potential recruit would rather forget. Grayson likes to ask ex-colleagues what they think of their former associate. "I have seen mindblowingly fictitious CVs which you can drive a coach and horses through," he says. "They range from straight carelessness and modest embellishment to evasion, serious embellishment and downright lies."

Information about past bankruptcies and county court judgments are in the public domain and investigators make regular use of credit checking agencies. The electoral roll is also used to verify addresses, though one-third of people nowadays ask for their details not to be made publicly available. Some people try to evade credit reference checks on property by having second addresses that they do not declare. Standard internet checks can also falter, because some job applicants have been known to write false articles about themselves and post them on websites.

Careful vetting Methods of checking such information are meant to conform to strict legal and ethical codes - although the reality is that in some instances you may not even be aware that you have been investigated. Hopefully these cases are the exceptions - the stuff of gossip in City bars.

Hedley Clark, managing director of the global background screening business of Kroll, the world's largest corporate investigations firm, says: "We do not ask about personal lives. You have to be careful in terms of data protection when you are getting into personal sensitive data like race, religion, sexual preference and union membership. "The majority of the work that we do is verification. There is a fairly detailed review that is required for FSA- approved persons. In 99 out of 100 cases, it is going to pick up any irregularities through references and other checks we make.

"The recruitment market has moved on from the days when it was not very open to wanting people to know that you are going to do a simple screen on them. Often they will not then lie in the first place if they have got something to hide and will tell you upfront. It is less of a cloak and dagger type of thing."

So why do companies pry?
The Chartered Institute of Personnel Development found in a recent survey that one in four British bosses had withdrawn a job offer after finding that the prospective employee had lied on their application form or CV. A similar proportion had fired someone after discovering they had lied to get their job.

Hedley Clark of Kroll recalls: "There was one chap who was trying to find a job in the UK, but the company he had worked for in Switzerland had changed names. It turned out that he had stolen SFr1m (£460,000) from the company and was wanted by the police."

Alex Bomberg of International Intelligence says: "There have been quite a few instances in the last few years of people lying on their CVs. We have uncovered a couple of real Walter Mitty characters who had lied ten years or so ago to bluff themselves into top positions. Once people are in senior management positions, they can quite easily get other jobs at the same level."

Alan Beazley of Risk Advisory Group: "It is not that common that we get blatant fraud, but it does happen. We get a number of cases where people produce bogus academic certificates with fraudulent employer references."

What does it cost companies to screen?
Prices for corporate investigations obviously vary on a case-by-case basis. At the most routine end, a screening service may charge between £120 and £350 to screen a potential employee's CV.Some firms position themselves at the top end of the market, checking out senior executives and board appointments at an advanced stage in the recruitment process.

Patrick Grayson, a founding partner of London firm GPW, says: "To hire us, clients have to be thinking that they might spend not less than £3,000 on our work, so you would expect to get a very thorough job." He adds that a typical assignment might involve someone earning at least £150,000 a year.Surveillance of a candidate obviously costs a lot more.

Alex Bomberg, managing director of International Intelligence, advises that ordering surveillance is still rare - some firms refuse to do it for this sort of recruitment work - and most likely to happen with potential hires from overseas. "You are talking about an extra £350 a day to get someone to do surveillance." His firm uses former SAS and MI6 personnel, and is careful to comply with privacy laws so that following someone around does not become stalking. "It is not normally within the budget."