Cyber Patrol: Beware of What You Post
February 9, 2007
WASHINGTON (Army News Service, Feb. 9, 2007) - Every day a dedicated group of Army experts search the Internet looking at official and unofficial Army Web sites and blogs.
They look for potential operational security violations that enemies can use to cause physical harm to Soldiers and their families, and personal information that could help criminals conduct identity theft. Each day they discover OPSEC violations and instances of personal data being posted in a public space. They immediately contact the owner of the information, explain why it should not be posted on a public site, and work with the owner to correct the problem.
These experts belong to the Army's Web Risk Assessment Cell and their work has been very effective. In 2006, AWRAC reviewed more than 1,200 known Army Web sites, plus 500 blogs and unofficial sites. AWRAC officials worked with Soldiers who did not realize the security ramifications of the data they posted, resulting in the removal of such sensitive information as biological, chemical and missile weapon systems on public sites. They also worked to remove information that would have enabled the theft of Soldiers Social Security numbers, dates of birth and home addresses.
The Internet is an incredible forum that allows worldwide exchange of news, opinion and information. It gives people around the world the opportunity to take advantage of the freedom of speech that is so important here in the States and in other free nations. Yet even with the right to free speech, people normally would not tell the world the combination to the family's safe, where the extra house key is hidden or the route a child takes home from school. Following that same logic, talk of troop movements, weapon systems, upcoming deployments and tactical operations are best kept secret. The same is true for personal information that could result in identity theft. We must discipline ourselves to think before we post information.
Like most information assurance activities, keeping useful information out of the hands of criminals and enemies requires nothing more than common sense. With the sophisticated search capabilities now available, any unsecured site - no matter how small and obscure - is available to the entire world. Thinking twice before posting potentially harmful information is all it takes to help keep Army personnel and their families a little more secure.
(William J. Buzinski works for the Office of the Army Chief Information Officer, G-6.)