Frequently asked questions and the answers:

Question: What is a POB number?
Question: Can BSM verify a POB number?
Question: What does a detective need, to be allowed to carry out an investigation?
Question: what is the yellow pass?
Question: Are businesses allowed to carry out their own investigations?
Question: Have all BSM’s employees been screened?
Question: do you have a confidentiality policy?
Question: do you ever work with the police?
Question: BSM is executing an investigation. Do I also need to press charges?
Question: When are you allowed to place video equipment?
Question: I want to have computer fraud investigated, how do I go about this?
Question: I want BSM to execute a penetration test for me, how do I go about this?
Question: How do I send you IP headers?
Question: What can an ICCM scan or other audit do for me?
Question: What will an audit cost me?

Question: What is a POB number?

The POB number is a number which is issued to every qualified criminal investigation bureau by the Dutch Ministry of Justice. The POB number allows you to check whether a company is qualified to carry out criminal investigations. Investigations and reports are not legally valid unless the investigation has been carried out by a licensed detective agency. Our POB number is 1104.

Question: Can BSM verify a POB number?

Yes we can. As a criminal investigation bureau, we may request the official, current list of criminal investigation bureau’s. We can verify whether you are dealing with a licensed bureau for you, free of charge.

Question: What does a detective need, to be allowed to carry out an investigation?

Every detective needs a yellow pass. This pass has to be renewed every three years and is issued to applicants who:
- are employed by a company with a valid POB number
- have passed the PO exam (they are competent)
- have been screened by the police

Question: what is the yellow pass?

A yellow pass is a pass issued to a detective who works for a legitimate criminal investigation bureau. There are also other passes: The grey pass is for security staff and the blue pass is for doormen and porters.

Question: Are businesses allowed to carry out their own investigations?

Detective work is only allowed to be executed if you have authority to do so. Police officers (article 141), exceptional tracing officers (article 142) and detectives who have a yellow pass and are employed by a detective bureau with a valid POB number are the only persons authorized to carry out criminal investigation. Other people are never allowed to place video equipment, tail people or execute observations.

Question: Have all BSM’s employees been screened?

All our employees have undergone a thorough screening process, whether they are pass holders or not. If somebody would have a criminal record they would not get a personal license for detective work.

Question: do you have a confidentiality policy?

All our detectives and employees are bound by lifelong confidentiality- whether they still work for BSM or not.

Question: do you ever work with the police?

Traditionally, the relationship between the police force and the private detective branch wasn’t great. This was partially because there were no strict rules for detectives. This led to a lot of mucking about. This all changed in 2004: Schooling, professional knowledge, a company license and a personal license were made compulsory for detectives. These rules have had a very positive effect on the detective branch, especially on the cybercrime and digital investigation segments. Although a criminal case always has to be investigated by the police, our reports often function as input for the case. We also always inform the local police when we are carrying out large scale observations. The other way round, BSM’s s actions are supervised by laws and the local police authorities.

Question: BSM is executing an investigation. Do I also need to press charges?

BSM will advise you in this matter. We know which laws are applicable under which circumstances. When the investigation regards a wrongful act or a business dispute, there is no point in pressing charges. When BSM uncovers a criminal act during an investigation, we are legally required to press charges if the client hasn’t already done so. Under certain circumstances, we may have to reassign the investigation to the police. It is also possible to let BSM prepare the charges for you- many companies don’t have the experience and the time.

Question: When are you allowed to place video equipment?

You are never allowed to place a video camera in a public place or aimed at a public place. There are strict rules for the placement of video equipment. BSM, as a licensed criminal investigation bureau, is allowed to place video cameras temporarily, if we take into account the legal principles.

Question: I want to have computer fraud investigated, how do I go about this?

On every laptop, desktop computer or emptied USB stick, there are many digital traces. We have equipment to read these traces. In practice, this usually means that clients bring their equipment to our lab to be tested. Every situation is unique and some files can disappear within hours: It is of utmost importance that you contact us immediately to discuss the situation if you suspect cybercrime. We will explain the steps which you have to go take in order to keep the information safe.

Question: I want BSM to execute a penetration test for me, how do I go about this?

When we scan your system or website for you, you will receive a disclaimer document you will have to fill out and sign prior to executing the scan. You have to sign this document and record the names/IP addresses of the systems and/or networks which we are going to scan. By signing the document, you declare that you are, and remain, responsible for the systems/networks which we are scanning. This means that you are responsible for making backups of the systems and networks before we commence.

Question: How do I send you IP headers?

This depends on the e-mail program which you use. We have a list of most programs and how they work which we can send you.

Question: What can an ICCM scan or other audit do for me?

The results of these investigations will determine what your system’s security flaws are and what the hazards are regarding responsibilities and procedures. We will also advise you and give you tips on how to solve these problems and how to make your websites and information more secure in the future, in contrast to many other consultancy firms who will only send you a report with a list of the problems

Question: What will an audit cost me?

A normal scan of a company’s environment or website will usually cost anywhere between €1500-€6000. When we are dealing with very complex infrastructures or if you have very specific wishes, this figure may be different. This may seem like a lot of money but it is marginal compared to what cybercrime may be costing your company.


Do you have any other questions or would you like to know more? Please don´t hesitate to contact us.