Espionage Incident Management

Incident Management Guidelines

Espionage can be conducted by individuals, groups, or governments in order to gain commercially sensitive information. Espionage can take many forms, either covert or overt, and can have significant impacts on a company, especially during a tendering phase of a business pursuit. Espionage can be conducted within the parameters of the law, or may be illegal. It can be geared to commercial activities, as well as operational functions.

In the event of an espionage incident occurring, the following points should be addressed:

 Action Points

1. Stand up the Incident Management and Crisis Response Teams using the SAD CHALETS system.
2. Determine what has occurred:
   • When did it happen?
   • Where did it happen?
   • Who was involved?
   • What information or materials were stolen or divulged?
   • What implications does this have to the company?
3. Secure facilities or sensitive materials to prevent further losses.
4. Take a statement from the individual reporting the event.
5. Determine whether any laws have been broken.
6. Determine who might be or is responsible:
   • Group or organization.
   • Individuals involved.
7. Determine whether persons are at physical risk following the event; stop any activity that might be compromised if persons are at risk.
8. Alert police or federal agencies if urgent in nature.
9. Provide an IMP Risk Assessment Report as soon as possible.