Saturday, February 24, 2007

On jamming cell phones...

"A client has asked me for information on blocking or jamming cellular phone and R/F signals from his corporate office." (from a well-respected security colleague)

Hi Sir,

Can't blame clients for asking. This is a fairly common request.
In the U.S. jamming is illegal, but (more importantly) clients need to consider the civil and criminal lawsuit possibilities.

"I couldn't call 911 from the bathroom where Charlie had his heart attack. I was doing CPR and couldn't leave him to use a regular phone. He died!!!"

Who had this illegal jammer installed?
[enter client's name here]

Who installed it?
[enter electrician's name here]

Who advised them to do it?
[enter security specialist's name here]

Lotz-o-deep-pockets to pick.

Everyone wants a simple, cheap solution. Jamming and shielding are security sirens. They only look attractive, in a Ms. Smith sort of way.

Alternate client solutions...
- Establish a clearly defined 'no cell phone at work' policy.
- Establish consequences for non-compliance.

- Enforce it consistently and equally.
- Install cell phone detectors to alert when a cell phone is in use.
- Forget about shielding out other RF (bug) transmissions.
- Establish a regular TSCM audit schedule to search for bugs.
- Improve perimeter and general information security.
- Periodically, test for leaks.

I am sure all this just echos what you have already told them in different words. This rant, however, may help you to show them that your colleagues back you up.

If the client insists, send him the T-shirt and say "Good-bye."

~Kevin