Cleared For Discussion

Cleared for Discussion Podcast | Episode 41 | Cloud Computing & Classified Info

Episode 41 Summary – Cloud Computing & Classified Info In this episode, Tabetha Baume explains the risks and compliance challenges of handling classified information in cloud environments, highlighting frameworks like NISPOM, FedRAMP, and CMMC. She uses the Microsoft Storm-0558 breach to show how cloud misconfigurations and poor coordination between IT and security teams can expose sensitive government data. She also warns about growing risks from generative AI and shadow IT tools. Her key message is that strong cloud security requires close collaboration between FSOs and IT teams, continuous monitoring, and proactive security practices to protect sensitive information.

Cleared for Discussion Podcast | Episode 40 | Russia's SVR, FSB, and GRU

Episode 40 Summary – CFD Podcast: Russia's SVR, FSB, and GRU In this episode, Tabetha Baume explains how Russia’s intelligence services target cleared U.S. personnel and defense contractors through espionage, cyber attacks, insider recruitment, and AI-driven information operations. She highlights cases like Robert Hanssen, the Russian illegals network, and Peter Debbins to show how Russian intelligence patiently cultivates insiders and exploits digital platforms, ransomware, and online communities to gather intelligence. Her key message is that cleared organizations must strengthen cybersecurity, insider threat awareness, and reporting processes to defend against increasingly sophisticated Russian intelligence operations.

Cleared for Discussion Podcast | Episode 39 | The World's Most Active Espionage Machine

Episode 39 Summary – CFD Podcast: The World's Most Active Espionage Machine In this episode, Tabetha Baume explains how Chinese intelligence agencies actively target the U.S. defense industrial base through cyber operations, LinkedIn recruitment, university partnerships, and insider threats. She highlights real-world espionage cases like Chi Mak and Kevin Mallory to show how cleared professionals can be exploited through long-term intelligence operations and coercion tactics. Her key message is that cleared organizations must strengthen counterintelligence awareness, insider threat programs, and reporting processes to better protect personnel, programs, and classified information from ongoing Chinese intelligence collection efforts.

Cleared for Discussion Podcast | Episode 38 | An Effective Security Team

Episode 38 Summary – CFD Podcast: An Effective Security Team In this episode, Tabetha Baume explains how to build an effective security team for cleared organizations, emphasizing key roles like the Facility Security Officer (FSO), Senior Management Official (SMO), and Insider Threat Program Senior Official (ITPSO), along with the need to meet regulatory requirements such as NISPOM. She highlights essential skills, certifications, and team structures, noting the importance of communication, technical expertise, and choosing between centralized, decentralized, or hybrid models. Her key message is that strong security teams go beyond compliance by investing in the right people, structure, and training to protect classified information while supporting business success.

Cleared for Discussion Podcast | Episode 37 | OPSEC in the Digital Age

Episode 37 Summary – CFD Podcast: OPSEC in the Digital Age In this episode, Tabetha Baume explains how the digital age has transformed operational security, shifting the focus to managing the vast amount of data we unknowingly share. She highlights key risks such as metadata, data aggregation, cloud storage, mobile devices, and IoT systems, showing how these can reveal sensitive patterns even without direct communication. Her key message is that while technology increases exposure, strong OPSEC comes down to awareness, disciplined habits, and actively managing your digital footprint.