Technical Surveillance Countermeasures: A Risk-Based Approach to Protecting Sensitive Information