RE: Security clearance.

["Escue, Robert S CONT (NETS)" <Robert.Escue () nets nemais navy mil>]

Chris,

Actually I didn't state my clearance at all. I was previously cleared to Top
Secret and that was removed when I retired from the Navy. And even then I
did not specify what access I had to any information or where I worked
(which would be very important to someone trying to "target" me for
exploitation). I know of many people who have security clearances who are
not exposed in any way to significant classified information. Holding a
clearance can mean nothing more than being able to get into a building. For
example I was cleared for access to a specific type of information just so I
could walk into a room to gain access to another room!

> From a social engineering standpoint you would want to target people who had
significant access to the type of information you are looking for, or a
person in a position of trust who had regular contact with someone who had
the information you are looking for. It is what is called in the military
OPSEC (Operational Security).

In today's environment it would be far easier to get information through
passive snooping, dumpster diving and other means than to use people to get
information (cost, possibility of exposure, etc.).

Robert Escue
System Administrator

-----Original Message-----
From: Teodorski, Chris [mailto:cteodorski () ppg com]
Sent: Friday, December 20, 2002 2:35 PM
To: 'Escue, Robert S CONT (NETS)'
Subject: RE: Security clearance.


Imho I don't think it's a good idea to announce to a public mailing list
what clearance level you hold.....

-----Original Message-----
From: Escue, Robert S CONT (NETS) [mailto:Robert.Escue () nets nemais navy mil]

Sent: Thursday, December 19, 2002 12:35 PM
To: 'Zimin, Alex'
Cc: 'security-basics () securityfocus com'
Subject: RE: Security clearance.

Alex,

Getting a security clearance is up to your employer, not you (if you are
talking about a Government security clearance). And this is dependent on
access and need to know as to what you would be cleared for.

If you are trying to apply for a Government position (Government Service) or
as a Government Contractor you will need a security clearance (usually
Secret or Top Secret). And this can be a rather involved process (my Top
Secret took over 18 months).


Robert Escue
System Administrator

-----Original Message-----
From: Zimin, Alex [mailto:alex () towerrecords com]
Sent: Wednesday, December 18, 2002 3:41 PM
To: security-basics () securityfocus com
Subject: Security clearance.


Looks like personal security clearance is the "must  have" for the
security professionals.
Does anyone know where to start getting US security clearance, or any
good web resources on that?
What are the different US security clearance levels available?

Thanks,

Alex