Vetting a counterespionage or TSCM provider means independently verifying their experience, credentials, integrity and standing before granting access, rather than relying on what they tell you.
Few suppliers are given the access a counterespionage practitioner receives. A TSCM team inspects your most sensitive rooms, often unsupervised, with the tools to examine everything in them. A behavioural or insider engagement involves candid access to your people and confidential information. Engage the wrong person and you have not reduced your risk; you have handed it to a stranger.
This is precisely why the field attracts a share of charlatans. The work is discreet, the clients are discreet, and claims are rarely challenged. That combination lets some operators overstate their experience for years without consequence, and the damage they can do, to your information, your people and your trust in the process, is real.
Treat the following as reasons to slow down and verify. They are not proof of bad faith, but they are signals that warrant scrutiny.
Most of the verification a client needs is straightforward, and a provider's willingness to support it tells you a great deal.
The strongest validation is a referral from a client comparable to you in sector and sensitivity. Ask to speak to one, and actually make the call. A credible provider will arrange it within the bounds of their own confidentiality obligations.
Providers who claim to service government can usually be checked. In Australia, government contracts and tenders are commonly published, through gazetted notices and tender records, so significant government work tends to leave a public trail. Look for it rather than taking the claim on trust.
Australian company and business-name records are public. Confirm the entity you are dealing with, how long it has genuinely operated, and whether it relates to other entities the provider has not mentioned.
For behavioural and credibility work, look for genuine postgraduate qualifications in fields such as behavioural science, credibility analysis or forensic linguistics. For TSCM, ask where the practitioner trained, and whether that facility is selective about who it admits.
Credible practitioners tend to be active in the professional community at home and internationally: members of legitimate associations and, more tellingly, active contributors who attend conferences and networking events and often speak as subject-matter experts. Passive membership means little; active, verifiable contribution means more.
Given the access involved, a background check on the provider and the individuals who will attend is reasonable and proportionate. A professional will expect it, and will not be offended.
A credible practitioner can show and explain what they find, and how. It is fair to ask how any result would be documented, and to be wary of anyone whose findings cannot be substantiated, or whose method you are not allowed to understand.
Integrity is the whole of this work. A practitioner who is loose with the truth about their own background is not someone to have inside your sensitive spaces or your confidential matters. The questions above are not about distrust; they are the ordinary diligence you would apply to any supplier granted extraordinary access, and a genuine professional will welcome them. The practices behind this site are happy to be held to all of it; you will find them on the find a specialist page.