Traveling with Information

Exclusions

This page now excludes…

  • …justifications for entries to the threat country list

  • …recommended hardware lists

  • …Australia Group definitions

  • …Wassenaar Agreement information

Commercial Practices

  • Travel in true name only and do not register using aliases, nicknames, or alternate names.

  • Implement organizational personal security plans

    • Executive protection

    • Family notification plan

    • Overseas medical considerations

  • Travel equipment

    • Request a single-use multi-country mobile phone.

      • Do not associate it with the VPN or any 2FA.

      • Register the number with partner contact.

      • Expire the contact with the end date for travel.

    • Request an encrypted loaner laptop.

      • Do not store personal information.

      • Do not log into internal resources from this laptop.

Note

No encrypted equipment may travel to Cuba, Iran, DPRK, Sudan, or Syria

Training for security personnel

Current collection risk

These countries will exploit academics, security researchers, military personnel, diplomatic staff, and senior officers of major firms. Any travel to these destinations, including stop-overs requires a travel kit.

  • Afghanistan

  • Algeria

  • Belarus

  • Burundi

  • Camaroon

  • Central African Republic

  • Chad

  • China (PRC)

  • Colombia

  • Congo (DRC)

  • Crimea

  • Cuba

  • Egypt

  • El Salvador

  • Eritrea

  • Haiti

  • Honduras

  • Hong Kong

  • Iran

  • Iraq

  • Israel

  • Kenya

  • Korea (DPRK)

  • Lebanon

  • Libya

  • Mali

  • Mauritania

  • Mexico

  • Myanmar

  • Niger

  • Nigeria

  • Pakistan

  • Palestinian Territories

  • Philippines

  • Russia

  • Saudi Arabia

  • Somalia

  • South Sudan

  • Sudan

  • Syria

  • Taiwan

  • Thailand

  • Ukraine

  • Venezuela

  • Yemen

  • Zimbabwe