An official website of the United States government
A .mil website belongs to an official U.S. Department of Defense organization in the United States.
A lock (lock ) or https:// means you’ve safely connected to the .mil website. Share sensitive information only on official, secure websites.

Home : News : Commentaries : Display
NEWS | July 23, 2009

Commander's Commentary

By Col. Donald Shaffer 437th Airlift Wing vice commander

"This information is protected by the privacy act of 1974..." How many times have you seen this statement stamped or printed on an official document?

We have all heard of or personally experienced phishing schemes, which include internet scams and fraudulent e-mails asking for sensitive personal information. It seems we are being constantly bombarded with warnings of the latest ruse about someone trying to steal our identity.

In our own personal lives we know we need to safe-guard our social security numbers, bank account information, usernames and passwords from falling into the wrong hands. Many of us have shredders in our homes and we are careful not to throw bank account statements or other sensitive papers in the trash.

We all probably feel comfortable with how well we protect our personal information at home, but what about while we are at work? Have you ever given out a co-worker's home phone number without verifying the identity of the person asking for it or their need to know?

How would you answer a request over the phone, from a person claiming to be a close friend of someone in your squadron, telling you they are from another air force base, asking for someone's home address so they could send a card?

How closely do you safeguard flight schedules, deployment timelines, travel itineraries or departing personnel rosters? These pieces of information in the wrong hands could threaten our operations or put our mission and our people at risk.

Our 437th Communication Squadron warriors do a fantastic job keeping our computer systems secure, but computer security is only one small part of Information Protection. Our computers can be locked and require Common Access Cards, but what about the recall roster thrown in the trash and not shredded?

Information protection involves the proper handling, storage, distribution and security of electronic as well as physical forms of data. It involves many of the processes we follow every day. We all need to approach our information protection programs in the same manner we approach our safety - as a mindset.

In response to the growing concerns over the security of sensitive information, the Air Force has directed each unit to establish an Information Protection office under the vice commander to act as the focal point for our efforts to secure and prevent mission critical and sensitive information from falling into the wrong hands.

In December 2008 the 437th Airlift Wing Information Protection office was established to meet that challenge. Andy Gancarz, Samantha Stevens, and James Snellgrove make up our 437th Airlift Wing information protection team and are in the process of developing a comprehensive approach to how Team Charleston will tackle this crucial task.

Information Protection is more than communication security. It's more than usernames, passwords or securing classified information and it's more than a Privacy Act statement at the top of a memorandum. It's a mindset just like safety.

The next time you think of throwing away the old recall roster or tossing a copy of the flight schedule or flight orders in the trash - take time to think about that information falling into the hands of someone who might want to do us harm. When in doubt, don't throw it out - shred instead.