- Training
- TEMPEST/RÖS and the secure workplace
Training
TEMPEST/RÖS and the secure workplace
Session 1 is written for decision-makers with no technical background; sessions 2 and 3 carry practical exercises with a rigged equipment list and a floor plan.
The sessions
The level describes the environment, not the information
Who it is for: Security protection managers, buyers, business owners. No technical background required.
After the session you will be able to:
- Formulate the three questions that decide the level — proximity, dwell time, risk of discovery — and apply them to your own premises
- Explain why security classification and approval level are two independent quantities
- Identify at least two places in your own organisation where the current choice of level is unjustified in one direction or the other
- Write a level justification that can be reused in a requirement specification
Content and exercise: 10 min mechanism · 15 min environments from our environment catalogue as a case bank · 15 min participants assess their own premises in pairs · 5 min review.
The chain and the weakest device
Who it is for: IT operations, purchasing, system managers.
After the session you will be able to:
- Explain why the level applies to the chain and not to the individual device
- Read an equipment list and find the devices that are not approved at the stated level
- Explain what an accessory approved through an adapter means for the equipment list
- Ask the three questions that reveal an unapproved device in a tender
Content and exercise: 10 min the principle · 20 min walk-through of an actual equipment list with certification marking · 10 min a "find the faults" exercise on an equipment list with planted errors · 5 min summary.
Power, cable and what the installation decides
Who it is for: Installers, facility engineers, project managers, security protection managers.
After the session you will be able to:
- Explain why the mains supply is the one conductor that always crosses the zone boundary
- Calculate power draw and heat dissipation for a workplace from actual specification rows
- Draw red and black cable routing on a floor plan and mark where filtering belongs
- Name the three most common installation faults and what each one costs
Content and exercise: 10 min the principle · 15 min power and heat budget calculated on actual specification rows · 15 min drawing exercise on a floor plan · 5 min the three most common installation faults.
What breaks an approval, and how it survives ten years
Who it is for: Security protection managers, system managers, service engineers.
After the session you will be able to:
- Explain what a configuration is, and what a change to it does to the approval
- Decide which component replacements require a renewed assessment and which do not
- Run a sealing check against a register and document the result
- Write the configuration control clauses for your own specification
Content and exercise: 10 min the concept of configuration · 15 min sealing exercise with real equipment · 15 min a ten-year scenario in which participants take the decisions and see the result · 5 min the requirement clauses.
Before the session
Background reading and equipment
Training
Four tracks, seventeen sessions, built from real installations.
Next step
A track that is not here?
These four grew out of the questions we are asked most. If your question is a different one, it is probably worth a session of its own — tell us what it is.
