Security for the Holiday Season

The holiday season is approaching quickly! While maintaining strong security practices should be a primary focus throughout the year, it is important to understand the increased threats during the holiday season.
 
The hustle, bustle, general spirit of celebration and goodwill that we experience during the holidays can lead to distraction and lower our guard. Unfortunately, criminals and our adversaries don’t slow their nefarious goals simply because we are busy, distracted, or nurturing kindness during the holidays. In fact, this gives them a better opportunity to exploit us. 
 
It is vital that we be aware of increased risks during this time of year and take extra precautions while preparing for and celebrating year-end festivities.
 
Holiday OPSEC
As discussed in previous editions, OPSEC (Operations Security) is a five-step process used to identify and protect sensitive information from our adversaries.
 

1. Identify What Needs Protection
2. Analyze the Threat
3. Analyze Vulnerabilities
4. Assess Risk
5. Apply Countermeasures

 
These same concepts can, and should, be used to protect ourselves, our families, our homes, and our data, during the holiday season.
 
Safety in Public and Crowded Places
Crowded malls and stores, and any place where people congregate, are prime targets for nefarious activities, from pick pocketing to threats of terrorism. We must always remain watchful and aware of our surroundings.
 
Furthermore, many people are simply stressed out this time of year. The pressure of holiday preparations, financial stressors, and even the desire to get a good deal, can lead to unruly and disorderly behavior.
 
Here are some basic things you can do to keep yourself and your loved ones safe.

• Situational awareness! No matter where you are, you should always be mindful of your surroundings and those around you.
• Have an exit plan and know how to contact the authorities if something goes sideways.
• If anything feels off, say something. If you feel like you, or your location, are being threatened, call the authorities and extract yourself from the situation as quickly as possible.
• Take care when carrying large amounts of cash. Keep some money separate Look out for “shoulder surfers” looking to steal your credit card information, ATM pin number, etc.
• When out purchasing gifts, consider bringing items back to your vehicle as you shop. Place them in your trunk and out of sight.

 
Data Security
The holidays are not the time for us to lower our defenses regarding data security, personally or professionally. Here are some tips to keep information safe.

• Always follow all company and government data security protocols.
• Ensure all personal, company-issued, and government-furnished devices and equipment are protected.
• Follow all company and government device and equipment usage policies company.
• Never use company-issued or government-furnished equipment for online shopping.
• Consider a personal VPN to help secure your data.
• Use strong passwords, change them frequently, and never share them with anyone.
• Whenever possible, you multi-factor authentication.

 
Online Shopping
Almost all of us participate in online shopping. Scammers and bad actors are at peak activity during the holiday season. They know we are distracted, which makes us far more vulnerable, offering them the perfect opportunity to catch us off-guard. Here are some tips to protect yourself when shopping online.

• Know that scams and phishing are around us all throughout the year, but they are especially heightened during the holidays. Always validate the legitimacy of emails and text messages. Pay close attention to what you respond to and how.
• Know how to identify safe and secure websites.
• Always follow safe and proper cybersecurity practices.
• Limited merchandise selection can make people especially vulnerable to cyber scams. Remember: If it sounds too good to be true, it probably is!

 
Securing Your Home During the Holidays
 
Home Security
Our home should be a safe space. Unfortunately, the threat of burglary, robbery, and home invasion are significantly higher during the holiday season. Here are some tips to deter and detect threats at home.

• Protect and control your house keys, door codes, garage or entry access codes, with extreme caution.
• Secure doors and locks, even when you are at home.
• Keep a light on, even when you are not at home.
• Keep valuables out of sight.
• Have good exterior lighting.
• Consider a home security system and video surveillance system.
• Be wary of canvassers and anyone requesting access to your residence. Verify their identity before allowing them into your home.
• Only use reputable and licensed companies for home services.
• Be wary of strangers showing interest in your property or belongings.
• Mind who is “hanging out” in your neighborhood. Report any suspicious activity or odd behavior to local law enforcement.
• Maintain good relations with your neighbors and look out for each other.
• Care what you share publicly and on social media. Don’t share information that could peak a malicious actor’s interest.
• Monitor internet/social media activities of friends, family, and acquaintances. If they are post things about you that should not be public, make them take it down.
• When socializing at parties, keep need-to-know in sight! Don’t “talk shop” and be wary of attempts to elicit information, even from friends and family.

 
Protect Your Home When You're Gone
It is estimated that more than 80 million Americans travel 50+ miles from home during the holidays, leaving our personal space vulnerable.
 
Studies show that 40% of burglaries do not involve forced entry and most burglars are deterred by simple safeguards that are easy to implement. Here are some tips to keep your home and valuables safe while you are away.
 
Secure your home:

• Lock every door and window, including your garage door
• Secure pet doors and sliding doors
• Activate your home security system
• Lock up ladders, tools, lawn furniture, etc.
• Put valuables in a safe or safety deposit box
• Remove “hidden” keys

Ask a trusted neighbor to:

• Keep an eye on your house and hold onto your emergency contact information
• Collect packages, newspapers, or mail that might arrive while you are gone
• Park a car in your driveway

Don’t make it look like you are not home:

• Never post travel plans on social media
• Consider putting lights, TVs, or radios on intermittent timers
• Trim overgrown trees or shrubbery
• Consider installing motion-sensing lights
• Don't leave trash and trash cans at the curb

 
Package Theft
Surveys suggest that 100 million+ packages have been stolen in the last year, amounting to more than $12 billion in lost merchandise. Those numbers are enormous! Package theft is a problem throughout the year, but the sheer volume of deliveries during the holidays, create a huge opportunity for porch pirates. Here are some tips to protect against package theft.

• Track your packages
• Don’t have packages delivered to a place where you are not going to be
• Consider having your packages held at a protected location
• Utilize purchase insurance for large ticket items
• Consider setting up a live recording video camera aimed at your porch

 
Holiday Trash
It is fascinating what you can learn from a person’s trash. Don’t make yourself a target! Boxes from large ticket items tell criminals (and nosey neighbors) that you may have high value items in your home. Here are some tips to protect you.

• Skip curbside pickup. Take packaging directly to a recycling center.
• Use surveillance equipment. Even a visible doorbell camera can discourage people from snooping.
• Break down boxes. Flatten and cut them into pieces. Place pieces inside a black or opaque trash bag. Cut out barcodes and pictures and dispose of them separately to help obscure product information.
• Shipping labels can include names, addresses, and product info. Remove, shred, and dispose of separately.
• Wait until pickup day. Don’t put boxes out early or the night before. Schedule bulk pickup if available.

 
Travel Safety and Foreign Travel
Travel can be frustrating. Heavy traffic, stranded vehicles, delayed or cancelled flights can increase tension. Delayed and stranded travelers may act out and cause disturbances in crowded airports, in hotels, or on roadways. This can also strain law enforcement resources.
 
Always maintain constant awareness of your surroundings and be prepared to protect yourself, your family, and your belongings.
 
Foreign Travel
If you are traveling outside the US, don’t forget to report it to your FSO! For most of us, all personal and professional foreign travel requires reporting. If you are traveling to any country outside the United States (including Mexico or Canada) you must contact your FSO and complete all briefing and reporting requirements. Ideally, foreign travel should be reported 30 days in advance of departure.
 
 
Why Reporting is Critical & How to Report Concerns
 
We must always keep company and government security policies and procedures in mind, even during the holidays. This includes reporting.

• Suspicious contact…report it to your FSO.
• Suspicious activity… report it to your FSO.
• Odd device or equipment behavior…report it to IT and your FSO.
• Fell victim to a scam…report it to your FSO.
• Foreign Travel…report it to your FSO

 
Also important to remember…
 
Places where large groups of people congregate are at high risk for physical threats. If you suspect any danger at work, contact security immediately. If you suspect any danger when not at work, contact local law enforcement immediately.
 
Pay mind to your coworkers. Many struggle emotionally during the holiday season. While kindness and compassion go a long way, we must always be mindful of insider threat concerns. If a co-worker is displaying any concerning behavior, report it to your FSO immediately.
 
Report any concerns to your company’s FSO!
 
Want to learn more?
Resources and Additional Learning:

• DLA Holiday Safety & Security
• CISA Online Shopper Safety
• FEMA/DHS Holiday Safety Social Media Toolkit
• CISA Cybersecurity Best Practices
• CISA Holiday Online Safety Tip Sheet
• OSHA Holiday Workplace Safety
• National Safety Council Holiday Safety
• CDSE Pulse Holiday Tips for Safe Travel
• DHS Personal Safety & Security While at Home

 

As always, if you have any questions about whether or not a situation requires reporting, ask your FSO! Your company’s FSO is the best person to help you navigate any questions you have about security compliance, briefing, and reporting requirements. As security professionals, we are here to help you navigate things to ensure you fulfill all requirements.