{"id":4550,"date":"2024-05-03T10:44:57","date_gmt":"2024-05-03T00:44:57","guid":{"rendered":"https:\/\/syn01bd.syd6.hostyourservices.net\/~anchoram\/?p=4550"},"modified":"2024-05-06T11:06:43","modified_gmt":"2024-05-06T01:06:43","slug":"mirror-selfies-and-trusted-insiders","status":"publish","type":"post","link":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/","title":{"rendered":"Mirror Selfies And Trusted Insiders"},"content":{"rendered":"

Usually, they are persons of interest to police, footballers who have behaved badly, or in this case of this US Air Force member whose leaks revealed information about the Russia-Ukraine war<\/a>,\u00a0China\u2019s development of hypersonic spy drones<\/a>,\u00a0North Korea\u2019s nuclear weapons development<\/a>, conflicts in the Middle East and the sabotage of the Nord Stream natural gas pipeline. But more on Jack Teixeira later. Is it their narcissism or are they so lonely they don\u2019t have a friend to take their photo or don\u2019t trust anyone to take a photo good enough? I wonder if vetting agencies should set a higher security clearance bar for people who take mirror selfies.<\/p>\n

As I considered the recent examples of insider threat, and there have been some great examples, I reviewed some of my earlier blogs on the subject. On 11 April 2021, I spoke of the relationship between security and organisational culture.<\/p>\n

\u201cWhen thinking about security in these times of heightened cyber threats we are often drawn to technical solutions. However, our investment in cybersecurity technology can be circumvented if we do not have a good security culture. And good security culture is an extension of organisational culture<\/em>.\u201d<\/p>\n

And then;<\/p>\n

\u201cThe perpetrator of\u00a0<\/em>the alleged rape of Brittany Higgins is said to have previous form with respect to his attitude toward security<\/em><\/a>. If someone places their own priorities over their organisation\u2019s, their personal preference over the security of their colleagues, then they will probably have lower thresholds of regard for other values-based requirements such as fraud and anti-corruption or respectful workplaces<\/em>.\u201d<\/p>\n

\"Bruce<\/p>\n

Interesting how that has borne out. What if Bruce Lehrmann\u2019s security behaviour was called out and addressed, could it have been a trigger for a review of his behaviour, even some self-reflection (with or without a mirror)?<\/p>\n

Now back to Jack Teixeira, the Air Force IT Technician. I highly recommend \u201cThe Discord Leaks\u201d a story of one of America’s biggest national security leaks via his circle of associates in an online chat platform (https:\/\/iview.abc.net.au\/video\/NC2403H009S00<\/a>).<\/p>\n

He was detected as being responsible for security breaches by his supervisors on a few occasions. The incidents were recorded, and he was counselled. But there was no apparent sanction, and obviously no action that dissuaded him from his behaviour. In fact, an absence of sanction may have emboldened him. It is also a shame that these incidents, each one a red flag, were not a trigger for not just sanction of the individual but also ongoing monitoring as well as review of how the system failed. In summary, the first part of an insider program seemed to be there, the detection, but the response was flawed, and the detected threat remained in place with appalling consequences.<\/p>\n

Another key issue with Teixeira is that as an IT technician, he may not have been accessing documentation directly for his work; collecting, collating and conducting analysis and authoring reports; but he did manage the systems that held this information and that provided him significant access. And potentially the knowledge to cover his tracks, but not well enough in his case. The wider lesson here is that it is not just the classification of the information that a person accesses that may determine their security clearance level but also the likelihood and consequences of their position if they were to be a malicious actor.<\/p>\n

And not to leave our UK partners of the AUKUS arrangement out, there is another recent insider example provided by the arrest of Christopher Berry and Christopher Cash. Maybe Christophers who take selfies could be another indicator for vetting agencies.<\/p>\n

\"Christopher

Christopher Cash, a parliamentary researcher, was charged under the Official Secrets Act.<\/p><\/div>\n

They are accused of giving “articles, notes, documents or information” to a foreign state, the Met Police said.<\/p>\n

China has called the allegations “malicious slander”.<\/p>\n

The full article is available at\u00a0Two men charged with spying for China under Official Secrets Act (bbc.com)<\/a>.<\/p>\n

Christopher Cash is a parliamentary researcher. Another example of a potential insider with access to information, and in this case, people in positions of influence.<\/p>\n

So, four young men who have either behaved badly or in the case of the UK example, are alleged to have behaved badly. All had access to information. Three with privileged access to people in power. Three are known to have access to sensitive sites. Whilst we are still to hear about the behaviours of those in the UK, we know there was a poor attitude toward security by two of them.<\/p>\n

What I said in 2021 still applies;\u00a0\u201cSo, if security is sorted, it’s likely other things are as well. And conversely, if people are behaving in accordance with their organisational values then it is likely that security behaviours will be practised as well.\u201d<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

What is it about the mirror selfie?<\/p>\n","protected":false},"author":7,"featured_media":4558,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[45,20],"tags":[],"class_list":["post-4550","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defence","category-security"],"acf":[],"yoast_head":"\nMirror Selfies And Trusted Insiders - Anchoram Australia<\/title>\n<meta name=\"description\" content=\"I wonder if vetting agencies should set a higher security clearance bar for people who take mirror selfies.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mirror Selfies And Trusted Insiders - Anchoram Australia\" \/>\n<meta property=\"og:description\" content=\"I wonder if vetting agencies should set a higher security clearance bar for people who take mirror selfies.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/\" \/>\n<meta property=\"og:site_name\" content=\"Anchoram Australia\" \/>\n<meta property=\"article:published_time\" content=\"2024-05-03T00:44:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-06T01:06:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/05\/mirror-selfie-min.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"915\" \/>\n\t<meta property=\"og:image:height\" content=\"480\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Anchoram Consulting\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anchoram Consulting\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/\"},\"author\":{\"name\":\"Anchoram Consulting\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#\\\/schema\\\/person\\\/1a3072848bd1a696ca298dacd5e4a148\"},\"headline\":\"Mirror Selfies And Trusted Insiders\",\"datePublished\":\"2024-05-03T00:44:57+00:00\",\"dateModified\":\"2024-05-06T01:06:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/\"},\"wordCount\":814,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/05\\\/mirror-selfie-min.jpg\",\"articleSection\":[\"Defence\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/\",\"url\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/\",\"name\":\"Mirror Selfies And Trusted Insiders - Anchoram Australia\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/05\\\/mirror-selfie-min.jpg\",\"datePublished\":\"2024-05-03T00:44:57+00:00\",\"dateModified\":\"2024-05-06T01:06:43+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#\\\/schema\\\/person\\\/1a3072848bd1a696ca298dacd5e4a148\"},\"description\":\"I wonder if vetting agencies should set a higher security clearance bar for people who take mirror selfies.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/#primaryimage\",\"url\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/05\\\/mirror-selfie-min.jpg\",\"contentUrl\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/05\\\/mirror-selfie-min.jpg\",\"width\":915,\"height\":480,\"caption\":\"Jack Teixeira, US Air Force IT Technician\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2024\\\/05\\\/03\\\/mirror-selfies-and-trusted-insiders\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mirror Selfies And Trusted Insiders\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#website\",\"url\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/\",\"name\":\"Anchoram Australia\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#\\\/schema\\\/person\\\/1a3072848bd1a696ca298dacd5e4a148\",\"name\":\"Anchoram Consulting\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g\",\"caption\":\"Anchoram Consulting\"},\"url\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/profiles\\\/anchoram-consulting\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mirror Selfies And Trusted Insiders - Anchoram Australia","description":"I wonder if vetting agencies should set a higher security clearance bar for people who take mirror selfies.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/","og_locale":"en_US","og_type":"article","og_title":"Mirror Selfies And Trusted Insiders - Anchoram Australia","og_description":"I wonder if vetting agencies should set a higher security clearance bar for people who take mirror selfies.","og_url":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/","og_site_name":"Anchoram Australia","article_published_time":"2024-05-03T00:44:57+00:00","article_modified_time":"2024-05-06T01:06:43+00:00","og_image":[{"width":915,"height":480,"url":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/05\/mirror-selfie-min.jpg","type":"image\/jpeg"}],"author":"Anchoram Consulting","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anchoram Consulting","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/#article","isPartOf":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/"},"author":{"name":"Anchoram Consulting","@id":"https:\/\/anchoramconsulting.com\/au\/#\/schema\/person\/1a3072848bd1a696ca298dacd5e4a148"},"headline":"Mirror Selfies And Trusted Insiders","datePublished":"2024-05-03T00:44:57+00:00","dateModified":"2024-05-06T01:06:43+00:00","mainEntityOfPage":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/"},"wordCount":814,"commentCount":0,"image":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/#primaryimage"},"thumbnailUrl":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/05\/mirror-selfie-min.jpg","articleSection":["Defence","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/","url":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/","name":"Mirror Selfies And Trusted Insiders - Anchoram Australia","isPartOf":{"@id":"https:\/\/anchoramconsulting.com\/au\/#website"},"primaryImageOfPage":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/#primaryimage"},"image":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/#primaryimage"},"thumbnailUrl":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/05\/mirror-selfie-min.jpg","datePublished":"2024-05-03T00:44:57+00:00","dateModified":"2024-05-06T01:06:43+00:00","author":{"@id":"https:\/\/anchoramconsulting.com\/au\/#\/schema\/person\/1a3072848bd1a696ca298dacd5e4a148"},"description":"I wonder if vetting agencies should set a higher security clearance bar for people who take mirror selfies.","breadcrumb":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/#primaryimage","url":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/05\/mirror-selfie-min.jpg","contentUrl":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/05\/mirror-selfie-min.jpg","width":915,"height":480,"caption":"Jack Teixeira, US Air Force IT Technician"},{"@type":"BreadcrumbList","@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2024\/05\/03\/mirror-selfies-and-trusted-insiders\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/anchoramconsulting.com\/au\/"},{"@type":"ListItem","position":2,"name":"Mirror Selfies And Trusted Insiders"}]},{"@type":"WebSite","@id":"https:\/\/anchoramconsulting.com\/au\/#website","url":"https:\/\/anchoramconsulting.com\/au\/","name":"Anchoram Australia","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/anchoramconsulting.com\/au\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/anchoramconsulting.com\/au\/#\/schema\/person\/1a3072848bd1a696ca298dacd5e4a148","name":"Anchoram Consulting","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g","caption":"Anchoram Consulting"},"url":"https:\/\/anchoramconsulting.com\/au\/blog\/profiles\/anchoram-consulting\/"}]}},"_links":{"self":[{"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/posts\/4550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/comments?post=4550"}],"version-history":[{"count":4,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/posts\/4550\/revisions"}],"predecessor-version":[{"id":4560,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/posts\/4550\/revisions\/4560"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/media\/4558"}],"wp:attachment":[{"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/media?parent=4550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/categories?post=4550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/tags?post=4550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}