Security Basics mailing list archives
RE: Security clearance.
From: "Escue, Robert S CONT (NETS)" <Robert.Escue () nets nemais navy mil>
Date: Mon, 23 Dec 2002 06:22:08 -0500
Chris, Actually I didn't state my clearance at all. I was previously cleared to Top Secret and that was removed when I retired from the Navy. And even then I did not specify what access I had to any information or where I worked (which would be very important to someone trying to "target" me for exploitation). I know of many people who have security clearances who are not exposed in any way to significant classified information. Holding a clearance can mean nothing more than being able to get into a building. For example I was cleared for access to a specific type of information just so I could walk into a room to gain access to another room!
From a social engineering standpoint you would want to target people who had
significant access to the type of information you are looking for, or a person in a position of trust who had regular contact with someone who had the information you are looking for. It is what is called in the military OPSEC (Operational Security). In today's environment it would be far easier to get information through passive snooping, dumpster diving and other means than to use people to get information (cost, possibility of exposure, etc.). Robert Escue System Administrator -----Original Message----- From: Teodorski, Chris [mailto:cteodorski () ppg com] Sent: Friday, December 20, 2002 2:35 PM To: 'Escue, Robert S CONT (NETS)' Subject: RE: Security clearance. Imho I don't think it's a good idea to announce to a public mailing list what clearance level you hold..... -----Original Message----- From: Escue, Robert S CONT (NETS) [mailto:Robert.Escue () nets nemais navy mil] Sent: Thursday, December 19, 2002 12:35 PM To: 'Zimin, Alex' Cc: 'security-basics () securityfocus com' Subject: RE: Security clearance. Alex, Getting a security clearance is up to your employer, not you (if you are talking about a Government security clearance). And this is dependent on access and need to know as to what you would be cleared for. If you are trying to apply for a Government position (Government Service) or as a Government Contractor you will need a security clearance (usually Secret or Top Secret). And this can be a rather involved process (my Top Secret took over 18 months). Robert Escue System Administrator -----Original Message----- From: Zimin, Alex [mailto:alex () towerrecords com] Sent: Wednesday, December 18, 2002 3:41 PM To: security-basics () securityfocus com Subject: Security clearance. Looks like personal security clearance is the "must have" for the security professionals. Does anyone know where to start getting US security clearance, or any good web resources on that? What are the different US security clearance levels available? Thanks, Alex
Current thread:
- Security clearance. Zimin, Alex (Dec 19)
- RE: Security clearance. Andrew H. Turner (Dec 20)
- Re: Security clearance. Bennett Todd (Dec 20)
- Re: Security clearance. Paul (Dec 20)
- <Possible follow-ups>
- RE: Security clearance. Anthony, Shayla (Dec 20)
- RE: Security clearance. Teodorski, Chris (Dec 20)
- RE: Security clearance. Martin, James E. (Dec 20)
- RE: Security clearance. Escue, Robert S CONT (NETS) (Dec 20)
- RE: Security clearance. Zimin, Alex (Dec 20)
- RE: Security clearance. Escue, Robert S CONT (NETS) (Dec 23)