Espionage refers to attacks that aim to collect, evaluate, and process information about organisations, people, products, or other target objects. Particularly when travelling abroad, there are unknown sources of risk which an organisation's efforts at information security management cannot influence. As a general rule, foreign spaces and IT environments present many risks stemming from targeted eavesdropping on in-person discussions, communication lines, phone conversations and data transmissions. Particularly when abroad, this can be problematic and difficult to assess for travellers with regard to the legal options available in such cases.
Threats can affect both public spaces and rooms and circumstances in other organisations, as well as the offices of an organisation's own representatives abroad. Devices such as mobile phones can also be used to record or listen to conversations unnoticed. In addition, many IT systems come equipped with a microphone and camera, which can be accessed and then exploited.
Furthermore, there may be restrictions when entering or leaving certain countries which override or contradict the regulatory provisions of an employee's country of origin and the security requirements of the corresponding organisation. Access to data stored on notebooks and other portable IT systems can be requested, for example. This can allow confidential and personal data to be viewed and even copied and saved to some extent. Since this information may include things like strategy papers or strictly confidential drafts from an organisation, potential misuse must always be anticipated in the event of inspection (industrial espionage).
When travelling abroad, there are risks beyond information being intercepted in a technically complex manner. Sensitive data can often simply be spied on using optical, acoustic, or electronic methods since the standards one is used to with regard to information security regulations can not be expected in many cases. Among other factors, this relates to the general security level in a country and the local circumstances that a traveller cannot avoid.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)