The Badger tried to suppress a giggle when the accidental inclusion of a journalist in the US administration’s Signal group chat hit the media. He failed. On watching the US President on television call the journalist in question a ‘sleazebag’, the Badger laughed aloud as the proverbial idiom ‘pot calling the kettle black’ came to mind. The administration’s subsequent bluster about the journalist’s inclusion and the group’s messages has not been its finest hour. Asserting that the military attack information shared was unclassified is, for most independent observers, just ludicrous. Indeed, the whole episode raises many questions, not least being whether the administration’s senior echelons actually respect and adhere to standard security policies and protocols.
Signature of the UK Official Secrets Act and being thoroughly vetted for a high level of security clearance were pre-requisites for the Badger’s first IT projects. Security has thus been an embedded ethos throughout his working life. Sometimes the constraints imposed by security policy and associated processes were frustrating, but the Badger has learned that a cavalier approach to compliance is never a good idea. Rightly, clients and his employer had zero-tolerance for any kind of security misdemeanour. Indeed, on the rare occasions over the years when a security mishap occurred, the situation was quickly rectified and the culprit dealt with swiftly and definitively. Something similar may be happening behind the scenes following the Signal incident, but the US administration’s public messaging doesn’t imply this to be the case.
Later in his career, the Badger was asked to oversee the operations of his employer’s security department. The head of the department expanded the Badger’s appreciation of security matters pertinent to premises, personal safety, vetting, and cyber threats. The department head emphasised the need to keep in mind just one phrase, namely ‘people are always the weakest link‘, when it came to security doctrine. This has proved to be wise advice over the years, and the recent Signal incident simply reinforces the point.
Today, the use of Signal, WhatsApp, X, and social media platforms is rife in the general public and in political and governmental circles. The Signal incident is a reminder for us all that it takes just one participant to leak the substance of a group chat for there to be a problem, and that there’s a greater chance that someone will spill the beans beyond the group when it has a large number of participants. The incident is also a reminder to think carefully about what you write in a group chat. If you don’t then you only have yourself to blame if something you have written comes back to bite you in the future. Think before you write, always, but most of all remember that technology is not normally the weakest link, people are. That’s right…you and me!