It's also not just what you put out, but what your family and friends say. Make sure they understand that just because you share a certain amount of information with them does NOT mean it's safe to continue sharing. My captain told us explicitly that he wants us to be able to share our underway schedule with our families, but he also made it clear that it is sensitive info and must be handled as such (i.e., shared quietly in person, not posted on Facebook).
And our secret folks are dead right: most of us are not trained for this. Don't come out the other end of your first OPSEC brief convinced you know everything. First, you probably already have a massive digital footprint, and you can only do so much damage control. Second, if your job doesn't deal with the security of information, you're going to forget the standards, because you don't think it'll happen to you. Odds are it won't, but just like any thief, hackers will go for the target of opportunity before anyone that looks like they'd take an effort. Start your over-share detox now and stick to it.
__________________
If you're not happy with it, fix it, because ain't nobody gonna fix it for you.
|