Security Risk

[Joe_K]

So heres the issue. If someone was aware of a glaring gap in security at a government entity's facility what agency/office would be that individual's best way to anonymously report it?


Sent from my SM-G920T using Tapatalk

[TFOGGER]

Most government agencies have a whistleblower hotline. Call it anonymously from a pay phone or the public phone in a hotel.

[davsel]

IG

[HoneyBadger]

SFS and the IG should both have anonymous tip lines.

[clodhopper]

So heres the issue. If someone was aware of a glaring gap in security at a government entity's facility what agency/office would be that individual's best way to anonymously report it?


Sent from my SM-G920T using Tapatalk


Whoops. Too late. The NSA now knows it is you and will report you to the offending department. Anonymity lost.

[HoneyBadger]

Whoops. Too late. The NSA now knows it is you and will report you to the offending department. Anonymity lost.
The NSA? oh the irony...

[Joe_K]

I don't care if big brother knows I'm inquiring how to inform them of something. I want to keep a third party anonymous. And the subject matter anonymous to everyone but those that need to know. Interestingly enough the government department does not have a tipline that I could find.

Sent from my SM-G920T using Tapatalk

[theGinsue]

Bear in mind that if you don't report anonymously the question will come up as to what made you even consider this as a vulnerability & YOU will be investigated. Non-anonymous whistleblowers are often demonized and persecuted for their actions even of it is the right thing to do.

[Aloha_Shooter]

I have never had an issue with reporting suspected issues to the facility security manager. I've never known one that would kill the messenger. You can still report it to the security manager if you want to keep the third party anonymous or -- if fact of your reporting would lead to the third party -- you can usually leave a note under their door or on the desk. If you're concerned about the note possibly being classified, mark and secure it properly in a security container -- possibly in a sealed envelope -- and then leave the security manager a note telling him/her where to find the report.

[Aloha_Shooter]

Bear in mind that if you don't report anonymously the question will come up as to what made you even consider this as a vulnerability & YOU will be investigated. Non-anonymous whistleblowers are often demonized and persecuted for their actions even of it is the right thing to do.

Often? You must have run in different circles. I have had active disputes with facility security managers, sometimes been ignored, never seen any evidence of the oft-alleged persecution. Most managers I've known would rather hear about things so they can correct them before it comes up in an inspection.

[hobowh]

If it is a non mil agency you can contact federal protective services as they are responsible for quite a few and have contacts with the ones they are not responsible for.

[Joe_K]

Thanks for the input/advice.

Sent from my SM-G920T using Tapatalk

[Guylee]

Send it through a non-secured email.