Certified Site Surveillance Technician (CCST) Certification Program by Tonex
The Certified Site Surveillance Technician (CST) is a 2-day intensive program designed for technicians who support high-security construction projects, including government facilities, Sensitive Compartmented Information Facilities (SCIFs), Special Access Program Facilities (SAPFs), and critical infrastructure sites.
Participants learn to:
- Monitor construction and renovation projects for security compliance
- Inspect materials, equipment, and personnel entering controlled areas
- Guard against eavesdropping, sabotage, foreign object infiltration (FOI), and technical penetration attempts
- Document activities in accordance with ICD 705, DSS, DoD, and Intelligence Community requirements
- Employ basic Technical Surveillance Countermeasures (TSCM) awareness
- Operate and configure surveillance systems (CCTV/IP), NVR/VMS, and sensors
- Manage escort personnel and enforce secure construction protocols
This course integrates physical + technical surveillance, giving participants the dual skills required for CST roles in government and defense programs.
Learning Objectives
Participants will learn to:
- Define the CST role and responsibilities, especially in SCIF/SAPF-related construction.
- Monitor construction sites and perform continuous security oversight.
- Conduct material and access inspections, including x-ray & visual checks.
- Identify unauthorized modifications, hidden compartments, or tampering risks.
- Apply ICD 705 construction and compliance principles.
- Manage escort personnel and communicate expectations for secure construction.
- Detect suspicious activity and initiate reporting procedures.
- Understand TSCM fundamentals for detecting unauthorized surveillance devices.
- Configure and troubleshoot site surveillance camera systems (IP cameras, NVRs/VMS).
- Produce detailed logs, incident reports, and briefings for government agencies.
- Work in high-security environments requiring TS/SCI-level discipline, integrity, and documentation accuracy.
Target Audience
- Construction Surveillance Technicians (new or developing)
- Site security technicians in government or defense construction
- Physical security specialists supporting SCIF/SAPF programs
- IT/security integrators supporting secure construction
- Escort personnel supervisors
- Security forces / contract guards transitioning to CST work
Prerequisites
- Basic knowledge of surveillance or physical security
- Ability to pass government background checks (for real job roles)
- No clearance required to attend this commercial course, but TS/SCI is typically required for employment
- Recommended: familiarity with construction terminology
- Certifications: CSCST or similar preferred by some agencies
Program Modules:
Day 1 – Secure Construction Surveillance Foundations
Module 1: The CST Role in Secure Construction
- What a Construction Surveillance Technician does
- Relationship to FSO, CSSO, SSM, GC, subcontractors
- CST responsibilities during secure construction phases
- Threat landscape: tampering, unauthorized access, foreign intelligence services
- Role importance in SCIF/SAPF and controlled government construction
Module 2: ICD 705 & Secure Construction Requirements
- Overview of ICD 705
- Physical & technical security requirements for SCIF/SAPF construction
- TEMPEST considerations (awareness level)
- Red/black separation basics
- Continuous monitoring requirements
- Handling non-cleared construction personnel
Module 3: Security Monitoring & Personnel Oversight
- Monitoring construction workers’ activities
- Identifying suspicious behavior
- Escorting and supervising non-cleared personnel
- Managing uniformed escort personnel
- Daily security briefings and roll-call procedures
Module 4: Material & Access Inspection Techniques
- Visual inspections
- X-ray inspection basics and usage
- Checking for hidden spaces, voids, modifications
- Delivery vehicle inspection
- Verifying chain of custody for secure materials
- Identifying anomalies, foreign objects, or potential eavesdropping devices
Hands-On Lab A:
Material inspection demonstration (using mock materials, packages, or images).
Students practice:
- Documenting findings
- Identifying tampering indicators
- Verifying shipping labels & manifests
Module 5: Documentation & Reporting Requirements
- Daily logs
- Incident reporting format
- Material inspection records
- Photographing and documenting changes
- Proper terminology for SCIF/SAPF documentation
- Briefing civilian & government representatives
Exercise: Write a simulated CST daily log & incident report.
Day 2 – Technical Surveillance, TSCM Awareness, & Site Systems
Module 6: Technical Surveillance Countermeasures (TSCM) – CST-Level Awareness
(Not a TSCM certification — focused on CST support role)
- Types of eavesdropping threats
- Covert devices: audio transmitters, micro-cameras, wired taps
- Construction-phase vulnerabilities
- TSCM sweep basics (what CSTs assist with)
- Recognizing signs of tampering or technical penetration
- Reporting suspected illicit devices
Module 7: Surveillance Systems for Controlled Construction Sites
- CCTV/IP cameras
- NVR/VMS configuration
- Camera placement for construction oversight
- Retention compliance
- Using surveillance footage for incident analysis
- Integrating access control alarms
Module 8: Detecting Site Threats & Vulnerabilities
- Suspicious materials
- Unauthorized electronics
- Hidden compartments or tool modifications
- Insider risks
- Social engineering attempts
- Construction tampering scenarios
- Escalation pathways
Scenario exercise: “Unknown Device Found Behind Wall Panel.”
Module 9: Troubleshooting & Risk Mitigation in Secure Construction
- Responding to alarms or anomalies
- Verifying workmanship integrity
- Checking ductwork, conduits, raised floors, ceilings
- Ensuring no unapproved materials are installed
- Understanding which findings require immediate stop-work actions
Module 10: Final Practical & Certification
Written Exam: 40–50 questions
Practical Assessment:
- Conduct mock material inspection
- Complete incident report
- Configure camera feed & export evidence
- Identify at least 5 vulnerabilities in a provided construction scenario
- CST Certification Criteria
To earn certification, participants must:
- Score ≥70% on written exam
- Complete all practical tasks successfully
- Demonstrate proper documentation/reporting techniques
A Certificate of Completion is provided for those who attend but do not pass all evaluations.
Deliverables Included
- Instructor-Led PowerPoint Slide Deck
- Student Workbook
- Daily Logs & Incident Report Templates
- Material Inspection Checklist
- Surveillance System Setup Checklist
- ICD-705 Awareness Cheat Sheet
- Indicators Quick Guide
Exam Domains
Domain 1 — Secure Construction Surveillance Fundamentals
Focus: Core CST duties, secure construction environments, threat awareness, worker oversight.
Knowledge Areas:
- Role of CST in secure construction & government projects
- Threat identification (tampering, sabotage, insider risks)
- Escorting non-cleared personnel
- Access control and restricted area rules
- Worker behavior monitoring and reporting expectations
- SCIF/SAPF construction phases and vulnerabilities
Domain 2 — ICD 705 Compliance, Regulations, & Security Protocols
Focus: Understanding and enforcing secure construction requirements.
Knowledge Areas:
- ICD 705 physical & technical security standards
- Construction methods, approved materials
- TEMPEST & Red/Black separation fundamentals (awareness level)
- Chain of custody for secure materials
- Stop-work authority and escalation procedures
- Proper coordination with SSM, CSSO, FSO, and government representatives
Domain 3 — Material, Equipment & Access Inspection
Focus: Detection, inspection tools, and screening procedures.
Knowledge Areas:
- Material screening (visual, x-ray, delivery inspection)
- Identifying hidden voids, modifications, unauthorized items
- Package inspection, vehicle inspection, storage handling
- Detecting tampering or unauthorized materials
- Documentation requirements for inspections
- Safe handling and reporting of suspected threats
Domain 4 — Technical Surveillance Countermeasures (TSCM) Awareness
Focus: Identifying signs of technical penetration and cooperating with TSCM teams.
Knowledge Areas:
- Types of illicit surveillance devices (audio, video, RF)
- Basic RF/electronic threat indicators
- Construction-phase vulnerabilities to implants
- CST responsibilities during TSCM sweeps
- Environmental conditions that increase TSCM risk
- Reporting protocols for suspected technical devices
Domain 5 — Surveillance Systems, CCTV/IP Technologies & Monitoring Tools
Focus: Technical skills needed to support site surveillance operations.
Knowledge Areas:
- Camera types (fixed, PTZ, thermal, multisensor)
- Fields of view, lens selection, lighting considerations
- NVR/VMS setup, recording, retention & user management
- IP networking basics (PoE, addressing, bandwidth, connectivity)
- Alarm integration and automated event recording
- Troubleshooting video, network, and power issues
Domain 6 — Reporting, Documentation & Communication
Focus: Proper logging, incident reporting, and cross-agency communication.
Knowledge Areas:
- Writing daily logs, activity summaries, and incident reports
- Required terminology for SCIF/SAPF documentation
- Maintaining audit trails and evidence integrity
- Briefing government and contractor personnel
- Communication protocols during security incidents
- Interaction with law enforcement or security stakeholders
Domain 7 — Safety, Physical Requirements & Professional Conduct
Focus: Field readiness, safe work practices, and integrity in secure environments.
Knowledge Areas:
- Personal safety in active construction zones
- Physical requirements (lifting, standing, outdoor work)
- Handling adverse weather conditions
- Ethics, confidentiality, and professionalism
- Expectations when working under TS/SCI clearance conditions
- Stress management and situational awareness