The greatest internal security peril is laziness, and always has been.
The increase in vulnerability is in very large part due to lack of access control. Way back in "my day", if you were working on the log aspects of an opord, you were handed only those documents necessary to do your job.
Now, with a "level of access" granted a user can look at areas of operation for which they have no need, look outside their own unit, and can look at nearly all similar operations.
The need for access control that is personalized for each individual is obvious, but it requires actual WORK to implement and watch over.
That doesn't sound much like an ex S-2, does it?
