Training

TEMPEST/RÖS and the secure workplace

Session 1 is written for decision-makers with no technical background; sessions 2 and 3 carry practical exercises with a rigged equipment list and a floor plan.

The sessions

  1. The level describes the environment, not the information

    Who it is for: Security protection managers, buyers, business owners. No technical background required.

    After the session you will be able to:

    • Formulate the three questions that decide the level — proximity, dwell time, risk of discovery — and apply them to your own premises
    • Explain why security classification and approval level are two independent quantities
    • Identify at least two places in your own organisation where the current choice of level is unjustified in one direction or the other
    • Write a level justification that can be reused in a requirement specification

    Content and exercise: 10 min mechanism · 15 min environments from our environment catalogue as a case bank · 15 min participants assess their own premises in pairs · 5 min review.

  2. The chain and the weakest device

    Who it is for: IT operations, purchasing, system managers.

    After the session you will be able to:

    • Explain why the level applies to the chain and not to the individual device
    • Read an equipment list and find the devices that are not approved at the stated level
    • Explain what an accessory approved through an adapter means for the equipment list
    • Ask the three questions that reveal an unapproved device in a tender

    Content and exercise: 10 min the principle · 20 min walk-through of an actual equipment list with certification marking · 10 min a "find the faults" exercise on an equipment list with planted errors · 5 min summary.

  3. Power, cable and what the installation decides

    Who it is for: Installers, facility engineers, project managers, security protection managers.

    After the session you will be able to:

    • Explain why the mains supply is the one conductor that always crosses the zone boundary
    • Calculate power draw and heat dissipation for a workplace from actual specification rows
    • Draw red and black cable routing on a floor plan and mark where filtering belongs
    • Name the three most common installation faults and what each one costs

    Content and exercise: 10 min the principle · 15 min power and heat budget calculated on actual specification rows · 15 min drawing exercise on a floor plan · 5 min the three most common installation faults.

  4. What breaks an approval, and how it survives ten years

    Who it is for: Security protection managers, system managers, service engineers.

    After the session you will be able to:

    • Explain what a configuration is, and what a change to it does to the approval
    • Decide which component replacements require a renewed assessment and which do not
    • Run a sealing check against a register and document the result
    • Write the configuration control clauses for your own specification

    Content and exercise: 10 min the concept of configuration · 15 min sealing exercise with real equipment · 15 min a ten-year scenario in which participants take the decisions and see the result · 5 min the requirement clauses.

Before the session

Background reading and equipment

Training

Four tracks, seventeen sessions, built from real installations.

Next step

A track that is not here?

These four grew out of the questions we are asked most. If your question is a different one, it is probably worth a session of its own — tell us what it is.