Facilitator Notes & Model Answers — Lesson 07
For instructors and self-study · Reference travel SOP and rationale
Reference travel SOP (higher-risk trip)
| Phase | Reference actions |
|---|---|
| Before | Decide need-to-carry; use a clean/loaner device with trip-only data; confirm encryption, patches, remote wipe; back up; plan a trusted connection; pre-decide the unlock-request response |
| During | Keep custody at all times; treat local Wi-Fi as hostile and use own connection for sensitive work; power-only cables; no found media; Bluetooth off when unused; privacy screen; assume screens watched |
| After | Return quarantine — don't reconnect to core environment; inspect or re-image; rotate credentials used on the road; report any loss-of-custody as an incident |
Why the poll answer is C (unattended fully-loaded laptop)
- A, B, D, E are all sound practices (airplane mode, power-only cable, powering down at borders, privacy screen).
- C hands the adversary time alone with a device holding everything you can reach — the exact precondition for tamper, implant, or copy. The fixes are data minimisation and custody.
Teaching point: the biggest travel risks are self-inflicted by carrying too much and surrendering custody, not by exotic attacks.
Homework — what good looks like
Task 1
A strong SOP is one page, makes an explicit minimisation decision (clean device or stripped device), and includes a return-quarantine step — the most commonly omitted control.
Task 2
The best lists assign each item a decision (remove / offload / accept-with-reason) rather than a vague intention.
Task 3
Good plans are lawful and pre-decided, e.g. comply where legally required but travel with a clean device so compliance reveals little. Improvising under pressure is the failure mode.