A Tragic Wake-Up Call for Businesses

A Tragic Wake-Up Call for Businesses

Security is not just a matter of physical protection, locking doors and monitoring access points. A good portion of our lives resides online. Today’s landscape demands robust digital and physical security measures. Business executives are often high-value targets for cyberattacks, surveillance, and threats because of the knowledge they possess along with their ability to sway markets. This aims to equip business executives, security personnel, and IT managers with knowledge about implementing effective security protocols. A key focus will be leveraging Open Source Intelligence (OSINT) as a critical component of executive protection.

Why Security Matters for Executives

The past year has seen an explosive rise in political violence that includes two attempts on the American President-Elect, business supply chains are targets of state-sponsored sabotage, and just this week, United Healthcare CEO, Brian Thompson was targeted and gunned down in mid-town Manhattan on his way to an investor day. Security is the most vital of functions in society and should be defended with all resources available.

When using ShadowDragon’s Horizon® Monitor, we can see some of the troubling sentiment emerging online in social media platforms X, BlueSky, Reddit, dark web forums, Telegram and more:

And A lookalike contest ad was posted in BlueSky:

The online sentiment and viral nature of Mr. Thompson’s killing is gaining troubling momentum for the ‘eat the rich’ mentality. There is a worrying contagion effect gaining attention in the dark web and social media platforms that should be a wake up call for all businesses, executives, and their employees.

Corporate Security

Business executives often hold sensitive information, are responsible for major decision making and can influence markets making them prime targets for both cyber and physical threats. Some key risks include:

• Corporate espionage and intellectual property
• Social engineering attacks like phishing
• Personal threats to safety or privacy
• Financial fraud or data leaks

Comprehensive security measures are critical in mitigating these risks.

Understanding the Role of OSINT in Security

What is OSINT?

Open Source Intelligence (OSINT) refers to the collection and analysis of publicly available information and data to turn insights into actionable intelligence. OSINT, in this case, is used to conduct an initial risk assessment of an executive, or principal, and provide constant situational awareness by monitoring social media and dark web forums, or drill down on people or entities of interest using a link analysis platform and collection capabilities.

Why OSINT is Critical for Executive Protection

1. Proactive Threat Identification: OSINT, used correctly, will identify threats or risks in advance by monitoring publicly available data.
2. Vulnerability Assessment: Maps out digital footprints and potential weak points in online profiles, such as exposed personal information.
3. Real-Time Monitoring: Tracks social media and dark web forums, public disclosures, or news to identify escalating risks.

How to Use OSINT for Executive Protection

1. Social Media Scanning: Identify potential threats in posts, comments, and shared content.
2. Geolocation Tagging: Check for sensitive or compromising information, such as locations tied to daily activities using Horizon® and SocialNet®.
3. Digital Footprint Review: Discover executives’ online exposure, including personal information that might pose a risk, including impersonation accounts.
4. Threat Detection Tools: Horizon® Monitor allows users to have a real-time operating picture of entities and of interest through social media, open chats, RSS feeds and more.

Core Principles of Digital Security

Data Protection

1. Use encrypted communication tools for sensitive discussions.
2. Restrict access to confidential files with multi-factor authentication (MFA) and user access.
3. Utilize a faraday cage for electronic devices during travel.

Email and Social Media Security

1. Educate executives about phishing and other social engineering tactics.
2. Ensure email accounts are equipped with robust spam filters and secure passwords.

Device Security

1. Install anti-malware and endpoint protection software.
2. Keep mobile devices updated with the latest operating systems and patches.

Network Security

1. Always use a Virtual Private Network (VPN) when accessing public Wi-Fi.
2. Limit access to internal networks based on roles and responsibilities.

Foundations of Physical Security

1. Executive Residence Security
   • Install monitored alarm systems, surveillance cameras, and secure perimeter fencing.
   • Periodically conduct vulnerability assessments of homes.
2. Travel Security
   • Use vetted transportation services and employ geofencing or GPS tracking.
   • Disclose travel plans only on a need-to-know basis, avoiding unnecessary exposure online.
3. Workplace Safety Measures
   • Ensure access control to offices with security badges or biometric verification.
   • Educate all staff to prevent social engineering.
   • Guard executives during public appearances with personal security details.
4. Emergency Response Plans
   • Train executives on how to respond to immediate threats (evacuations, lockdowns).
   • Ensure security staff regularly rehearse contingency plans for breaches or crises.

Integration Between IT and Security Personnel

Open collaboration between IT managers and the executive protection team is essential for seamless security coverage:

• Risk Assessments: Conduct joint evaluations of physical and IT systems. Integrate real-time OSINT assessments into assessments and exercises.
• Incident Response Protocols: Align response tactics for cyber and physical security breaches.
• Regular Security Updates: Brief executives on evolving threats and how to stay vigilant.

Building a Security-Aware Organization

Encourage a culture of security awareness across the organization:

• Training Programs: equip employees with knowledge of cybersecurity hygiene, such as recognizing phishing emails or securing passwords.
• Clear Communication Channels: ensure all employees know how to report suspicious incidents or behavior.
• Policy Enforcement: regular audits to ensure compliance with security best practices.

Strengthening both digital and physical security is imperative for mitigating risks faced by businesses and executives. By incorporating OSINT as a major component of your security strategy, identifying indicators to emerging threats early can be not only save money, but it can save lives.

To take your organization’s security to the next level, implement these strategies and conduct regular assessments of your protocols to address evolving threats.

To learn more about ShadowDragon’s Horizon® Monitor, how it can enhance corporate security, or request a demo or trial license, click here.