This sort of approach is a thought process and methodology we have been training NGOs, journalists and human rights organisations in for years at Security First

This sort of approach is a thought process and methodology we have been training NGOs, journalists and human rights organisations in for years at Security First (http://www.secfirst.org http://www.secfirst.org). Though it is strange to think about it this way, the work of many NGOs and journalists is actually very similar to intelligence organisations (a cycle of planning requirements, collecting, processing, analysis/production, distribution to policy makers, collect, etc) and in many ways the threats/defence measures are similar (insider threats, digital penetration, disruption etc). All too often organisations we work with focus on tools (encryption,etc) instead of beginning with processes (compartmentalisation, need to know, vetting etc), so usually we have to begin with them. For many reasons this can cause people and organisation'so discomfort ("We are a human rights org, we won't want to hide information from other staff.") I could talk all day about the subject and have been meaning to write up or do a full public presentation about it somewhere about the methodology and how it applies to NGOs, media etc - I just need to find the right place to do that!