I need clarification from the #cososec community on this.
Even if Texiera had access to SIPR with the appropriate clearances for that work, docs like these wouldn't be sent in the clear no matter how secure the network is, because any network can be compromised. They would be sent in encrypted containers, with decryption keys only the intended recipients would have, right?
Too many explanations I'm seeing online don't add up.
@voltronic I am not an expert. But SCIF documents could be printed. Then the asshole could have snuck it outside the SCIF room and took a picture of it in the bathroom and returned it without anyone knowing. Took the picture home and printed it out from the phone
regardless, it shows a lack of attention to security that you would even allow a non-secure smart phone anywhere near a SCIF
I was under the impression that was the point of SCIF — to a) prevent prying eyes and b) to assure folks don’t make copies.
The idea that a printer exists in SCIF doesn’t sound at all like best practices.