Defensive Counterintelligence Security Consultation Advisory Services Training

Objectives:
• Define defensive counterintelligence and its role in security consultation.
• Understand the legal and ethical framework within South Africa.
• Identify key stakeholders in security advisory services.
• Differentiate between offensive and defensive counterintelligence.
• Recognise the importance of confidentiality and integrity in advisory roles.

Topics:
• Overview of counterintelligence concepts
• Legal basis: South African legislation and SAQA standards
• Ethical considerations in security consultation
• The advisory services landscape in South Africa
• Roles and responsibilities of a security consultant
• Introduction to unit standard 117363

Objectives:
• Analyse the current South African security environment.
• Identify various threat actors and their motivations.
• Understand the impact of espionage and insider threats.
• Evaluate the role of state and non-state actors.
• Apply a threat assessment framework.

Topics:
• South African security context
• Types of threats: espionage, sabotage, subversion
• Insider threat indicators
• State-sponsored vs. criminal entities
• Threat assessment methodologies
• Case studies: recent incidents in South Africa

Objectives:
• Define risk management in a counterintelligence context.
• Apply risk assessment methodologies (qualitative and quantitative).
• Develop risk mitigation strategies.
• Understand the risk management cycle.
• Integrate risk management into advisory services.

Topics:
• Risk management frameworks
• Risk identification and analysis
• Risk evaluation and prioritisation
• Mitigation strategies and controls
• Residual risk and acceptance
• Practical exercise: risk assessment scenario

Objectives:
• Understand information classification systems.
• Implement protective marking and handling procedures.
• Identify critical information and assets.
• Apply need-to-know and least privilege principles.
• Recognise vulnerabilities in information sharing.

Topics:
• Classification levels: TOP SECRET, SECRET, CONFIDENTIAL, RESTRICTED
• Handling and storage requirements
• Information lifecycle management
• Access control mechanisms
• Insider threat and information leakage
• Practical: classifying sample documents

Objectives:
• Evaluate physical security measures in sensitive environments.
• Design layered security perimeters.
• Understand the role of access control and surveillance.
• Identify vulnerabilities in physical security.
• Recommend countermeasures for physical threats.

Topics:
• Physical security principles
• Perimeter security: fencing, barriers, lighting
• Access control systems: biometrics, card readers
• CCTV and intrusion detection
• Security operations centres (SOCs)
• Practical: physical security audit checklist

Objectives:
• Understand the personnel security clearance process.
• Identify indicators of insider threat behaviour.
• Implement vetting and background checks.
• Develop security awareness training programmes.
• Manage security breaches involving personnel.

Topics:
• Security clearance levels and processes
• Background investigation techniques
• Insider threat indicators and red flags
• Continuous evaluation and periodic reinvestigation
• Security education and awareness
• Case studies: insider threat incidents

Objectives:
• Understand cyber threats to national security.
• Identify common cyber attack vectors.
• Implement basic cyber hygiene practices.
• Recognise digital espionage techniques.
• Apply countermeasures against cyber threats.

Topics:
• Cyber threat landscape
• Phishing, malware, and social engineering
• Network security fundamentals
• Endpoint protection and encryption
• Incident response basics
• Practical: identifying phishing emails

Objectives:
• Understand the investigation process in counterintelligence.
• Apply analytical techniques to intelligence data.
• Develop investigative plans.
• Use link analysis and pattern recognition.
• Maintain chain of custody and evidence handling.

Topics:
• Investigation lifecycle
• Intelligence analysis techniques
• Link analysis and charting
• Source handling and debriefing
• Evidence management and legal requirements
• Practical: analysing a case scenario

Objectives:
• Recognise verbal and non-verbal deception cues.
• Understand elicitation techniques used by adversaries.
• Apply counter-elicitation strategies.
• Develop questioning techniques for interviews.
• Identify and mitigate social engineering attacks.

Topics:
• Deception indicators
• Elicitation methods: flattery, feigned ignorance, etc.
• Counter-elicitation training
• Interview and interrogation basics
• Social engineering defence
• Practical: role-play elicitation scenarios

Objectives:
• Understand TSCM principles and methodologies.
• Identify common eavesdropping devices.
• Conduct a basic TSCM sweep.
• Implement technical security controls.
• Advise clients on TSCM best practices.

Topics:
• Types of technical surveillance devices
• RF detection and spectrum analysis
• Physical inspection techniques
• TSCM equipment overview
• Sweep planning and reporting
• Practical: simulated TSCM sweep

Objectives:
• Define OPSEC and its five-step process.
• Identify critical information and indicators.
• Apply OPSEC measures to operations.
• Assess OPSEC vulnerabilities.
• Develop OPSEC plans for clients.

Topics:
• OPSEC fundamentals
• The OPSEC cycle: identify, analyse, assess, apply, measure
• Indicators and vulnerabilities
• OPSEC in planning and execution
• Practical: OPSEC planning exercise
• Case studies: OPSEC failures

Objectives:
• Understand the consultant-client relationship.
• Develop security consultation proposals.
• Conduct security needs assessments.
• Present findings and recommendations effectively.
• Manage client expectations and deliverables.

Topics:
• Consultation methodologies
• Needs assessment techniques
• Proposal writing and scoping
• Reporting and presentation skills
• Client management and communication
• Practical: mock consultation pitch

Objectives:
• Understand key South African laws relevant to security.
• Apply POPIA and other privacy regulations.
• Navigate the National Strategic Intelligence Act.
• Ensure compliance in advisory recommendations.
• Advise clients on legal obligations.

Topics:
• POPIA (Protection of Personal Information Act)
• National Strategic Intelligence Act
• Regulation of Interception of Communications Act
• Minimum Information Security Standards (MISS)
• Legal liabilities for consultants
• Practical: compliance checklist

Objectives:
• Develop crisis management plans.
• Understand business continuity principles.
• Integrate counterintelligence into crisis response.
• Conduct crisis simulations.
• Advise clients on resilience strategies.

Topics:
• Crisis management frameworks
• Business continuity planning
• Incident command systems
• Communication during crises
• Post-incident analysis
• Practical: crisis simulation exercise

Objectives:
• Apply counterintelligence principles to corporate environments.
• Protect trade secrets and intellectual property.
• Conduct competitor intelligence gathering ethically.
• Advise on corporate security policies.
• Manage insider threats in businesses.

Topics:
• Corporate espionage threats
• Intellectual property protection
• Competitive intelligence vs. espionage
• Corporate security programme development
• Insider threat programmes
• Case studies: corporate espionage incidents

Objectives:
• Understand international counterintelligence frameworks.
• Collaborate with foreign security services ethically.
• Navigate cross-border legal issues.
• Apply best practices from global partners.
• Advise clients on international operations.

Topics:
• International security agreements
• Information sharing protocols
• Legal considerations in cross-border operations
• Case studies: international cooperation
• Cultural awareness in international security
• Practical: multinational scenario

Objectives:
• Conduct advanced threat analysis using structured techniques.
• Produce actionable intelligence reports.
• Apply analytical tools and software.
• Validate and corroborate intelligence sources.
• Brief decision-makers effectively.

Topics:
• Structured analytic techniques
• Intelligence report writing
• Analytical software tools
• Source validation and credibility assessment
• Briefing skills and executive summaries
• Practical: producing an intelligence report

Objectives:
• Design comprehensive counterintelligence policies.
• Develop implementation plans for programmes.
• Establish performance metrics and evaluation.
• Ensure policy alignment with organisational goals.
• Advise on policy maintenance and updates.

Topics:
• Policy development frameworks
• Programme design and implementation
• Performance metrics and KPIs
• Auditing and compliance
• Policy communication and training
• Practical: drafting a counterintelligence policy

Objectives:
• Identify emerging threats in the digital age.
• Understand the impact of AI and quantum computing.
• Anticipate future espionage techniques.
• Adapt advisory services to evolving risks.
• Recommend proactive countermeasures.

Topics:
• AI and machine learning threats
• Quantum computing implications
• IoT and smart device vulnerabilities
• Biometric and genetic data risks
• Future trends in espionage
• Group discussion: preparing for the future

Objectives:
• Integrate all course knowledge into a comprehensive advisory project.
• Present a security consultation plan to a panel.
• Demonstrate analytical and advisory skills.
• Receive feedback and reflect on learning.
• Prepare for SAQA assessment and certification.

Topics:
• Capstone project brief
• Project development and consultation
• Presentation and defence
• Peer and instructor feedback
• Final assessment preparation
• Course wrap-up and certification pathway