Can You Keep a Secret?

Why People-Driven Mistakes Are a Serious Matter

Irrespective of your political view, this week's inadvertent release of battle plans underscores a critical issue extending far beyond government affairs, and that’s the human element in keeping the most secret information just that.  Secret.

It should serve as a a wake-up call for every organisation involved in handling highly sensitive information, government or otherwise, that people are the root cause of these type of breaches and if any of their actions could impact major strategic business decisions they should not be part of the dialogue unless the environment is water-tight.

Even the smallest slip-up can have devastating consequences. Sensitive information about market movements, upcoming mergers, or strategic plans isn’t just business as usual, it’s the lifeblood of any company’s competitive advantage. And yet, all it takes is one person to make an error, whether it’s sending an email to the wrong recipient or a text meant for a colleague that ends up in the wrong hands.

It's Not About the App

It's not a matter of relevance which App was used as a platform for this error to occur, nor whether it was an intentional act or a mistake. Signal is being ostracised, but it's the fact there were no controls in place to stop someone, anyone, including a wrongly classified person into a group who should not have been party to the conversation.

It's Not About Cyber Security

It’s also not a matter of cybersecurity; this was not a hack and any number of the usual measures taken by the organisation would not have made a jot of difference.  It’s 100% down to human accountability. People make mistakes, whether through oversight, carelessness, or sheer accident, yet, the fallout from these mistakes is real and tangible. Competitors gain an advantage, the market reacts, and trust, which take years to build, can be shattered in an instant.

Consequences

Arguably, the impact of what is reported here is capable of far more devastating consequences in terms of loss of human life, which could (and maybe did) happen as a result of this action.  Try telling that to business leaders involved in making high-stakes decisions that affect billions, like mergers and acquisitions, market positioning, and investor relations, when a similar mistake could cost markets and livelihoods a-plenty.  Regardless of whether the leak was intentional or accidental, the result is the same; once the information is out, the damage is done and there is no going back.

Get it on the Board Agenda

Any organisations involved in highly classified and strategic negotiations, cannot afford to let people-driven actions, intentional or not, undermine the integrity of those operations. A single misstep can cause an avalanche of consequences. So, ask yourself: Can you trust that your most sensitive business decisions, from strategic shifts to financial dealings, will remain confidential? Can you rely on your team to keep a secret?  If not, and the action of an inappropriate or malicious step would seriously undermine strategic goals, this is a serious Board consideration.

In the end, it’s not about technology or processes, it’s about the people in your organisation and how well they safeguard the integrity of your business.

Perhaps it’s time for organisations themselves to rethink how accountability is viewed and the human factors that drive both the successes and failures of Governments and big businesses.

Find out more

Compliance sets the rules, but human behaviour defines the risk!

Find out more about the privacy personality spectrum from 'the oversharer' to the 'disgruntled employee' - and uncover who is your leak!

Our infographic shows you why privacy isn't just an IT concern - it's a human challenge.

>Find out more
Related Articles
Advanced Solutions Closed communication ecosystems
Closed communication ecosystems

What it means to truly control access.

Advanced Solutions The moment when 'secure enough', isn't
The moment when 'secure enough', isn't

Why highly secret situations need more than standard cybersecurity.

Advanced Solutions Compliance isn’t enough:
Compliance isn’t enough:

Securing data beyond the basics.

Advanced Solutions The real risk: Accidental leaks from trusted users
The real risk: Accidental leaks from trusted users

Some of the biggest threats to your organisation’s sensitive data come from within.

Advanced Solutions Securing communications: The hidden risks
Securing communications: The hidden risks

Threats don't just come from the outside.

Modern Workplace Secure enterprise instant communications
Secure enterprise instant communications

Protect your data in KoolSpan Trust Circles

Advanced Solutions The price of leaked words
The price of leaked words

How unsecured communication can derail reputations and market stability

Modern Workplace The privacy personality spectrum
Modern Workplace Identifying the Weakest Link
Identifying the Weakest Link

Could it be you in the team working on a sensitive business project

Advanced Solutions Everyone else is the target
Everyone else is the target

Why privacy should be everyone's concern.

Share this story

We're a community where IT security buyers can engage on their own terms.

We help you to better understand the security challenges associated with digital business and how to address them, so your company remains safe and secure.

Interested in what you see? Get in touch, and let's start a conversation Get in touch