A Cause for Concern for Congress, DoD Personnel, and the Public
With Donald Trump’s ascension to the presidency of the United States, a wave of executive orders has reshaped various government functions. Among them, the establishment of the Department of Government Efficiency (DOGE) task force has raised significant national security concerns. This task force, which has facilitated personnel placements of individuals affiliated with Elon Musk within government agencies, has given individuals access to sensitive information across multiple federal departments. While some of this access may be limited to unclassified systems, aggregating data across agencies creates a serious and growing security risk.
A Lesson from the Past: DoD’s Web Security Review
In the mid-to-late 1990s, during my tenure at the U.S. Department of Defense (DoD), I had the opportunity to work on several critical projects, one of which led to an order issued by then-Deputy Secretary of Defense Dr. John Hamre. Titled “Information Vulnerability and the World Wide Web,” this directive highlighted the dangers of “aggregation of information.”
Dr. Hamre’s concerns remain strikingly relevant today. He stated:
“I have become aware that some information provides too much detail on DoD capabilities, infrastructure, personnel, and operational procedures. Such details, especially when combined with information from other sources, may increase the vulnerability of DoD systems and potentially be used to threaten or harass DoD personnel and their families.”
This principle underscores a foundational risk in information security: isolated pieces of unclassified information, when combined, can form a highly sensitive and actionable intelligence picture.
The Emerging Threat of Mass Aggregation
The influx of personnel unfamiliar with the defense industry’s culture, policies, and procedures, now wielding unprecedented access to information across multiple agencies, raises significant security concerns. Even if the information they access is technically unclassified, modern AI tools and data aggregation techniques can process, correlate, and synthesize vast amounts of data, providing adversaries with an intelligence goldmine.
Recent developments further validate this concern. On July 15, 2024, the Defense Information Systems Agency (DISA) issued an updated Request for Information (RFI) for cyber threat intelligence (CTI) aggregation. This move underscores the DoD’s ongoing efforts to mitigate the dangers posed by large-scale information aggregation. Yet, despite these precautions, the Trump administration has granted several individuals unrestricted access to data spanning multiple agencies, directly contradicting established security principles.
The Long-Term Risks to National Security
For decades, the United States has invested billions in developing a robust and resilient Defense Information Systems network designed to withstand cyber threats and unauthorized disclosures. The risks posed by the current approach, which gives individuals with little national security experience access to a broad swath of government data, are alarming.
Many senior defense officials I have worked with would be deeply concerned by this development. Lessons from past breaches and intelligence leaks underscore the need to limit access, compartmentalize information, and ensure personnel handling government data are properly vetted and trained.
A Call to Action
Given these concerns, it is imperative that:
- Congress conducts an immediate review of the DOGE task force’s personnel policies and information access privileges.
- The DoD and intelligence community strengthen safeguards against unauthorized data aggregation, especially as AI’s capabilities grow.
- A cross-agency audit assesses the extent of information access granted to new personnel and whether existing security protocols are being circumvented.
Unchecked access to government information, even if unclassified, poses a severe national security risk. Aggregating disparate data points can give adversaries unprecedented insight into U.S. defense and state operations, personnel, and infrastructure. Without decisive action, the consequences could be dire.
It is not too late to reinforce the safeguards that have protected the nation for decades. Congress, the Department of Defense, and the public must remain vigilant to ensure security is not sacrificed for expediency.
Links to articles:
