Feeds

MoD: We lost 87 classified USB sticks since 2003

Over-use of secrecy leads to bullethole in foot

Beginner's guide to SSL certificates

The UK Ministry of Defence has told parliament that it has lost or had stolen some 87 USB sticks holding "protectively marked" - ie classified - material since 2003. However, almost all the devices were marked at the lowest grade of classification, and even the remaining few are unlikely to have contained information of any significance.

According to a written parliamentary answer by Defence minister Bob Ainsworth on Wednesday, which can be viewed here, 81 of the devices held "Restricted" data. Restricted is a blanket classification which the MoD tends to use for almost any document it generates; marking something "Unclassified" - free for anyone to look at - runs against the Ministry's institutional culture. "Restricted" is so overused that it is meaningless, effectively the same as Unclassified (unless perhaps accompanied by an additional handling caveat indicating that there might be privacy issues, as in the case of individuals' promotion reports).

One further USB stick, lost in 2006, held "Confidential" data, the next level up. This isn't really much different from Restricted, though such documents are supposed to be more securely held and handled. You're supposed to shred Confidential hard copies rather than just chuck them in the bin, for instance. Even so, this kind of info can be freely discussed with families and even friends in many cases.

Five further sticks were marked "Secret", which is theoretically the penultimate level of UK classification. In fact, so profligate is the use of the Restricted and Confidential labels that Secret information is generally more like what you would expect Restricted to be - things you'd like to keep mainly in-house but you aren't going to make a big deal about it.

Actual important secret stuff starts to appear at the Top Secret level, but the MoD isn't admitting to having lost any of that. TS is the highest grade of protective marking, but in fact it has many subdivisions and add-ons which typically require special, extra vetting and clearances. Then there are national caveats: any TS info which isn't also marked at the very least "UK/US/AUS/CAN/NZ Eyes Only" is probably not all that exciting. You wouldn't normally let le tout NATO see anything very hot.

So, if we're to believe the MoD, they haven't really lost anything of significance on USB sticks in the last few years. However, one does note that Mr Ainsworth says "the figures... continue to be adjusted as a result of additional thefts and losses along with subsequent clarification of historic incidents"; and that most of the missing sticks were apparently stolen in just one year, 2006. This suggests that actually this information is more than a little bit incomplete.

All in all, though, the MoD has created a problem for itself here where none needed to exist. If it weren't so institutionally prone to unnecessarily marking things as secrets, it could have stood up in Parliament and said "we haven't lost any protectively marked thumb drives at all". ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
Lawyers mobilise angry mob against Apple over alleged 2011 Macbook Pro crapness
We suffered 'random bouts of graphical distortion' - fanbois
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Verizon bankrolls tech news site, bans tech's biggest stories
No agenda here. Just don't ever mention Net neutrality or spying, ok?
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Simplify SSL certificate management across the enterprise
Simple steps to take control of SSL across the enterprise, and recommendations for a management platform for full visibility and single-point of control for these Certificates.