Lab Guide — Build a Travel Security Checklist

Facilitated exercise · 40 minutes · Fictional high-sensitivity trip

What this lab is

In small groups you will build a practical pre / during / post travel checklist for a fictional high-sensitivity trip to a higher-risk jurisdiction. The output is a checklist you can adapt for real travel. No systems are touched; the value is the discipline.

The brief

Trip profile

A principal must travel for four days to a jurisdiction assessed as higher-risk, attending meetings on contested matters, staying in a hotel, and relying on local connectivity. They normally carry a fully-loaded work laptop and phone.

Part A — Before (15 min)

Pre-travel

Decide what data and access the trip genuinely needs; what gets stripped or left home?
Clean device or full device? Justify the choice.
List the device checks (encryption, patch, remote wipe, backup) and the connectivity plan.

Part B — During (15 min)

On the ground

Write the custody rules (where the device is at all times).
Set the network, charging, and screen-privacy rules.
Agree what to do if asked to unlock the device.

Part C — After (10 min)

Return

Define the return-quarantine steps and which credentials get rotated. State the trigger that escalates a "device left my sight" moment into an incident report.

✓ Self-check: your checklist minimises data before departure, keeps custody throughout, and treats the returning device as suspect until inspected — and every item is specific enough to actually follow.