Capability: method and equipment, not war stories
A professional provider can explain their methodology in plain language before you sign: how they assess threat, what the physical search covers, what the electronic inspection covers, and what the report will let you decide. Vague invocations of classified techniques are a red flag; a described, staged method is the mark of a practice rather than a performance.
Ask specifically what equipment classes deploy on your job. Professional work combines RF spectrum analysis across a wide frequency range, non-linear junction detection to find dormant and switched-off devices, thermal and optical inspection, and — decisively — systematic physical search by trained hands. Any provider whose answer is a single handheld detector is selling reassurance, not detection.
Consolidate fragmented TSCM spend under centralised oversight
Large groups often discover they are buying site-level sweeps from multiple local providers: inconsistent method, weak evidence packs, duplicated onboarding, and no single owner who can answer Risk or Audit. Fragmented spend looks cheap per invoice and expensive as a control — quality variance, no shared baseline, and no programme cadence the board can rely on.
Centralised vendor oversight replaces that pattern with one methodology, clear ownership, onboarding and ongoing monitoring, multi-site scheduling, and dated records internal audit can reuse. Procurement and shared services gain fewer contracts and clearer SLAs; security gains a group-wide technical surveillance risk programme instead of a patchwork of one-offs. Ask any shortlisted provider how they run multi-site programmes, not only single-room day rates.
Discretion, independence and the awkward questions
Confidentiality is a capability, not a promise. Ask how scheduling is disguised, whether operators arrive unbadged, how findings are communicated and to whom, and whether the provider will sign your NDA before scoping. Ask who actually turns up: subcontracting is common, and you are entitled to know whose background you are trusting.
Independence matters too. A provider that also sells surveillance services, or that monetises fear with per-device bounties and dramatic find rates, has incentives you do not want inside your boardroom. Straightforward per-engagement or programme pricing keeps the incentive aligned with thoroughness.
Finally, pressure-test the find protocol. What happens if a device is discovered — evidence handling, legal escalation, your notification duties, re-inspection? A provider without a rehearsed answer has never handled one, or has handled it badly.
Red flags that end the conversation
Guaranteed detection — no honest practitioner guarantees a negative. Prices too low to cover the equipment supposedly deployed. Refusal to describe methodology even under NDA. High-pressure fear marketing and inflated find statistics. No insurance, no verifiable trading history, no named individuals. And any suggestion of intercepting or monitoring on your behalf: a provider casual about the law on one side of the microphone will be casual on yours.