Hi folks,
I am summarising a piece that was published on the Ministry of State Security’s WeChat account. This was republished by Xinhua today. The piece basically talks about the need to be cautious with open-source information. The warning is that open-source information can become a source of leaking of secret and sensitive information.
Before I get to the article, I think this is the opportune moment to announce that the next edition of my 6-week online course Watching China is scheduled for early February 2025. The course is designed to equip those aspiring to study and analyse China’s domestic and foreign policies with the skills that are essential to engage in such a task.
Over a period of six weeks, Watching China will provide an introduction to the philosophy, structures and processes of the Leninist Party-state system, discuss the role of ideology and familiarise students with the language of Communist Party discourse. Students will also be introduced to key analytical frameworks and China’s information ecosystem allowing them to undertake effective open source research.
Further details will be provided in the days ahead. If you would like to be personally notified when applications open, please can drop me a line through the link below or by replying to this email.
Back to the MSS’ article.
The article says that in the era of big data and cyberspace, “some sensitive information is being publicly disseminated through the Internet without undergoing declassification processing or risk assessment, thereby becoming an important source of open source intelligence for foreign espionage and intelligence agencies, posing a threat to our national security.”
It adds:
“Open-source information generally refers to legally accessible information resources, including but not limited to social media posts, online forum discussions, blog articles, news reports, satellite images, etc. These information sources are extensive, have low acquisition costs, and often contain a wealth of valuable data and intelligence, which may become a critical source of network-based intelligence theft for foreign espionage and intelligence agencies.
Be vigilant when it comes to leaks in procurement bidding. Classified procurement refers to procurement activities that require confidentiality measures during the process to ensure the security of state secrets, such as classified construction projects or digitization of classified archives. In practice, due to inadequate management or weak confidentiality awareness among personnel, procurement content or purposes may be improperly disclosed, or classified technical parameters may be marked in public bidding documents on occasion, threatening the security of state secrets.
Be vigilant of leaks during information disclosure. According to regulations, government agencies must, as per the law, conduct confidentiality reviews of information proposed for public disclosure before making it public. However, it has been found in practice that some agencies fail to strictly follow confidentiality review regulations when publishing information, uploading classified documents to public websites, thereby leading to incidents of information leaks.
Be vigilant of leaks on social media. In today’s society, self-media is flourishing, and videos casually filmed or comments posted by netizens can attract widespread attention. Some outdoor enthusiasts share images with classified sensitive forbidden areas as backgrounds on social media to attract attention. Such behaviour not only severely disrupts the management order of classified and sensitive areas but may also be exploited by foreign espionage and intelligence agencies, posing a threat to our national security.
开源信息通常指公开可获取的合法信息资源,包括但不限于社交媒体帖子、网络论坛讨论、博客文章、新闻报道、卫星图像等。这些信息来源广泛,获取成本低,且往往包含大量有价值的数据和情报,可能成为境外间谍情报机关网络窃密的重要来源。——警惕采购招标泄密。涉密采购指在采购过程中需要采取保密措施,以确保国家秘密安全的采购行为,如涉密工程建设、涉密档案数字化等。在实际工作中,由于管理缺失、工作人员保密意识不强等原因,致使采购内容、采购用途等违规公开或在公开招标文件中标注涉密技术参数的情况偶有发生,威胁国家秘密安全。——警惕信息公开泄密。根据规定,机关单位在信息公开之前,均应当依法对拟公开的信息进行保密审查。但工作发现,个别机关单位在信息发布时,未严格履行保密审查规定,将涉密文件上传至公开网站,导致失泄密事件发生。——警惕社交媒体泄密。当今社会,自媒体蓬勃发展,网友随手拍摄的视频、发布的言论都可能受到大量关注。个别户外爱好者在社交媒体上分享以涉密敏感禁拍区域为背景的图片博取眼球,这种行为不仅严重扰乱涉密敏感区域管理秩序,还可能被境外间谍情报机关利用,对我国家安全造成危害.
The next bit of the article says that:
“The openness and easy accessibility of open-source information makes sensitive information easily exploitable by foreign espionage and intelligence agencies. Foreign espionage and intelligence agencies can gather fragmented, blurred data together, and through big data correlation analysis, can implement precise, continuous, and stable information tracking on targets, obtaining valuable intelligence. This poses great challenges when it comes to maintaining confidentiality, necessitating the adoption of stricter and more effective measures to prevent information leaks.
Improve systems and clarify responsibilities. Relevant units should establish and improve confidentiality responsibility systems and management protocols, clearly defining the confidentiality duties and authorities of leaders and staff at all levels. Strengthen the management and supervision of personnel involved in dealing with classified information to ensure strict compliance with confidentiality regulations and systems.
Strengthen control and conduct strict reviews. Relevant units should strengthen information disclosure control at the source, strictly implement confidentiality review systems, absolutely prohibit the disclosure of classified information, and implement categorised and graded protection for non-classified but sensitive information. Network platforms should strictly fulfil main body responsibilities, strengthen full-process management of information circulation, improve content review mechanisms, and ensure compliance in editing and compilation, conduct declassification before publication, and review materials before re-sharing.
Raise awareness and be cautious in speech and action. Citizens in general should enhance risk prevention awareness, be vigilant against behaviours that endanger national security, maintain clear-headedness and caution in network-related behaviours, and prevent themselves from becoming sources of open-source intelligence for foreign espionage and intelligence agencies.
开源信息的公开性和易获取性使得敏感信息容易被境外间谍情报机关所利用。境外间谍情报机关将碎片化、模糊化数据汇聚在一起,通过大数据关联分析,就可对目标实施精准、持续、稳定的信息追踪,从中获取有价值的情报,这使得保密工作面临着更大挑战,需要采取更加严密有效的措施来防止信息泄露。——健全制度,明确责任。相关单位应建立健全保密工作责任制和保密管理制度,明确各级领导和工作人员的保密职责和权限。加强对涉密人员的管理和监督,确保严格遵守保密规定和制度。——加强管控,严格审查。相关单位应从源头加强信息公开管控,严格落实保密审查制度,严禁公开涉密信息,实行非密敏感信息分类分级保护。网络平台应严格履行主体责任,加强信息流转全过程管理,健全内容审核机制,采编要合规、发布要脱密、转载要审核。——提高意识,谨言慎行。广大公民应提高风险防范意识,警惕危害国家安全的行为,在涉网行为中保持清醒、谨言慎行,防止成为境外间谍情报机关获取开源情报的源头.
The piece ends with a call to action, i.e., to report suspicious activities through the 12339 hotline, through www.12339.gov.cn, the WeChat public account of the Ministry of State Security or directly to the local national security authorities.