Why boardrooms are the primary eavesdropping target
The paradox of boardroom security is that the most sensitive conversations happen in the room with the least controlled access. Meeting rooms are entered by guests before meetings, by AV technicians when systems need attention, by cleaners overnight, and by facilities teams during refurbishments. Each of those access events is an opportunity to place a device. Unlike a server room, a boardroom is not treated as a restricted zone by default.
The devices that pose the greatest risk in a boardroom context are not the crude spy-shop items sold online. They are purpose-built, mains-powered devices placed in furniture, fittings, or AV infrastructure; modified stationery or accessories; and GSM-enabled transmitters that require no local receiver. A sweep covering only the obvious surfaces — under chairs and behind pictures — misses the majority of professional-grade devices.
What a professional boardroom TSCM sweep involves
A professional sweep of a boardroom or meeting room includes RF spectrum analysis across the full frequency range to detect active transmissions; non-linear junction detection (NLJD) to identify electronic components hidden in walls, furniture, and fittings regardless of whether they are transmitting; physical disassembly and inspection of furniture, AV equipment, power sockets, light fittings, and room fixtures; and a thermal anomaly check for mains-powered devices that generate heat.
The sweep is conducted with the room cleared of occupants to prevent interference with RF detection. Duration is typically two to four hours for a standard meeting room, longer for rooms with complex AV or built-in infrastructure. The sweep concludes with a written report documenting the areas checked, the equipment used, and the findings.
Before a sensitive meeting — the pre-meeting sweep protocol
For meetings of exceptional sensitivity — M&A negotiations, board deliberations on a contested transaction, legal strategy sessions, or presentations to a counterparty — a pre-meeting sweep is the standard precaution in organisations with a functioning security posture. The sweep should be conducted as close to the meeting as practicable, with the room then locked and access restricted to the meeting participants only.
Between the sweep completion and the meeting start, no service personnel, caterers, or AV technicians should enter the room. If catering must be set up in advance, it should be done before the sweep, not after. The sweep is invalidated the moment the room is re-accessed by anyone outside the meeting group.
How often should boardrooms be swept?
For organisations that conduct sensitive commercial or strategic discussions regularly, a quarterly sweep programme for key boardrooms and executive suites is the minimum baseline. High-exposure environments — law firms, investment banks, M&A advisers, pharmaceutical R&D, governmental and diplomatic missions — typically operate on monthly or event-triggered programmes.
Trigger events that should prompt an unscheduled sweep include: a refurbishment or deep-clean of the space; a visit by an unknown or unvetted counterparty; any period where the room was uncontrolled during an event or site visit; or a suspected leak of information discussed in that room. Mission Support offers both scheduled sweep programmes and reactive single sweeps across the Netherlands.
Frequently asked
Can I sweep my boardroom myself with consumer equipment?
Consumer RF detectors sold online detect only unsophisticated active transmitters operating on common frequencies. They cannot detect NLJD-detectable passive devices, mains-powered devices not currently transmitting, physical modifications to fittings, or devices operating on non-standard frequencies. A consumer sweep gives false confidence; a professional sweep uses calibrated instruments and a trained methodology.
How long does a boardroom TSCM sweep take?
A standard meeting room of 25–50 square metres typically takes two to four hours for a professional sweep. Larger executive boardrooms or rooms with complex AV infrastructure, built-in furniture, or multiple access points take longer. The sweep must be uninterrupted — the room cannot be in use during the sweep.
Should I tell my team that a sweep is happening?
Limiting advance notice of a sweep is standard practice. The sweep is more meaningful if the room has not been pre-cleared by anyone who knows it is being swept. Communicate the sweep only to the decision-maker commissioning it and the security officer receiving the report.