The three scheduling models
Event-driven sweeps are triggered by a specific high-stakes event: an M&A meeting, a board decision session, a legal deposition, a bilateral negotiation. The sweep happens in the 24-48 hours before the event and is confined to the specific environment being used. This model is appropriate for organisations that do not host sensitive conversations routinely but have occasional high-exposure moments.
Periodic sweeps run on a defined calendar — quarterly, biannually, or annually — regardless of whether a specific event is scheduled. This model is appropriate for environments in permanent operational use for sensitive conversations: law firm meeting rooms, boardrooms, executive offices, and diplomatic facilities. The cadence should be frequent enough that a device placed after the last sweep has limited operational life before the next one.
Post-renovation and access-event sweeps
Every renovation, refurbishment, or construction project affecting a sensitive space is a device-placement opportunity. Contractors, subcontractors, and their supply chains represent an access population that is difficult to vet thoroughly and may have been deliberately targeted to gain entry. A TSCM sweep should be scheduled on completion of any works that gave third-party access to sensitive spaces — regardless of when the last periodic sweep occurred.
Similarly, any event that brings an unknown or newly known access population into a sensitive environment — a major client visit, a due-diligence inspection by an acquisition counterparty, a property viewing — should trigger a post-event sweep. These events are precisely the access scenarios that sophisticated adversaries engineer deliberately to gain placement opportunity.
Vehicles, residences, and high-movement environments
Vehicles present a distinct scheduling challenge. Unlike a fixed office, a vehicle changes its access population with every journey — valet parking, service workshops, car washes, and unattended periods in public car parks all represent placement opportunities. For principals with a known threat profile, vehicles should be swept after any uncontrolled access event and before any journey during which a sensitive conversation will occur.
Residences are swept on the same logic as offices but with a different access inventory: domestic staff, maintenance contractors, visitors, and (for rented or recently purchased properties) the previous tenant and their tradespeople. A sweep of a new principal residence before occupation is baseline practice. For principals with elevated threat profiles, periodic sweeps should continue for the life of the tenancy or occupancy.
Building a sweep schedule for your organisation
A practical sweep schedule starts with an environment audit: which spaces are used for sensitive conversations, how frequently access changes, and what the consequence of interception would be. From that baseline, Mission Support designs a schedule that matches the actual exposure — not a generic annual sweep applied uniformly to all environments regardless of risk.
The schedule is reviewed after any significant access event and recalibrated annually. Organisations with changing threat profiles — a major acquisition, a high-profile lawsuit, a regulatory investigation — should trigger an out-of-cycle sweep of all sensitive environments immediately. The cost of an unscheduled sweep is small compared to the cost of the event that made the sweep necessary.
Frequently asked
How often should a boardroom be swept?
For a boardroom in regular use for sensitive decisions, a minimum of quarterly sweeps plus event-driven sweeps before major meetings is the standard. Higher-exposure environments — M&A, litigation, diplomatic — warrant more frequent scheduled sweeps and mandatory pre-event sweeps for any meeting with an external counterparty.
Do we need to sweep our office every time a contractor visits?
Not every contractor visit warrants an immediate sweep, but any contractor who had unsupervised access to a sensitive space — particularly after-hours — should trigger a sweep of that space before the next sensitive meeting. Supervised contractor access with a security escort reduces (but does not eliminate) placement risk.
How long does a TSCM sweep take?
A standard boardroom or executive office sweep takes 2–4 hours depending on size and complexity. A full floor sweep of a law firm or financial office takes a day or more. Vehicles can typically be swept in 60–90 minutes. Mission Support provides timing estimates after reviewing the floor plan and access requirements for the specific environment.