Open Source Intelligence (OSINT) gathering

Computer Keyboard

Often in the course of our business, we use OSINT to inform our casework. But what is OSINT and how do you not only gather the information but remain safe online whilst doing so? Here we provide a brief overview of OSINT and SOCMINT, and also some considerations around security when carrying out research and analysis.

What is OSINT?

OSINT is the practice of collecting and analysing publicly accessible information to be used in an intelligence context. Trained OSINT researchers use advanced techniques and tools in order to wade through the vast amounts of data online and offline in order to find that golden nugget of information.

OSINT is used by a wide range of industries, from recruiters looking into whether a potential job candidate is a right fit for the role to law enforcement who require intelligence on a suspect. Many security departments are performing OSINT activities more and more on their own companies to lock down their operational security.

Online information is in abundance and due to its transient nature, understanding how to navigate the surface, deep, and dark web can take people who are new to OSINT a long time to work out where and how to find pieces of information relevant to their requirement.

‘Requirement’ is a big word in the intelligence community as it is arguably the most important aspect of an investigation. Without a requirement, a clear understanding of your objectives, you will be looking into the open-source abyss and will not find success in what you are trying to achieve.

A clear understanding of the questions being asked and a plan on how to collect the information to answer those questions will make all the difference to the progression of your case.

Social Media Intelligence (SOCMINT or SMI)

The term SOCMINT was coined in a 2012 paper written by Sir David Omand, Jamie Bartlett and Carl Miller for the Centre for the Analysis of Social Media. To read the paper, click here.

SOCMINT is part of the OSINT realm and the techniques to research and investigate on social media are a little different from those across the rest of the online world. With a vast amount of personal information available and made public, SOCMINT techniques can really help you explore the deeper parts of Facebook, Twitter, Instagram, etc, and harness all the information it has according to your requirement for analysis.

Is someone watching you, watching them?

One question to ask yourself when conducting an OSINT investigation is how visible are you when searching online? Everything from your IP address through to the profiles you are using can be seen by others. There are many ways in which you can view the data that you are leaking and even more ways to resolve this issue with simple and free tools and techniques.

As a leading corporate intelligence company, Millbank Solutions not only conducts OSINT investigations for clients using our expert knowledge and skills, but we also provide you with the training to carry out these investigations yourself. Our team of former law enforcement and government agency officers have an enormous amount of experience to draw upon as well as keeping up to date with new and improved software and techniques as the online world evolves.

Whether you require 1 to 1 training on online analytical techniques, or a large group needs assistance on their safety and security when running online operations, Millbank Solutions is here to give you all the help and information you could need.

You can email us at enquiries@millbanksolutions.co.uk, or contact us via the details on our website at millbanksolutions.co.uk.

 

About the Author: Kathryn Caudrelier is the Director of Intelligence at Millbank Solutions, a leading supplier of corporate intelligence services.

Considerations when choosing a Reputational Due Diligence services provider

Two men at laptop

What is meant by Reputational Due Diligence (RDD)?

Due diligence (DD) is a term widely used in business circles generally referring to a means of information collection with which to inform a decision-making process. For example, if you are about to enter into a deal with an unknown company or individual, it would make sense therefore to do your due diligence and ensure you have all the information available to you. From there you can analyse and assess risk relating to you, your company, and its stakeholders.

A professional due diligence company may offer numerous services. Some may look at specific areas such as finance and some legal, but all are elements that inform the full DD package. We at Millbank Solutions, however, deal with background and reputational risk matters surrounding third party entities, where adverse publicity could cause significant loss (both financially and reputationally) and damage to a brand.

 

Can you afford not to engage an RDD provider?

There are obvious financial costs to engaging a reputable provider of due diligence services, and care should be taken to ensure that those costs are proportionate to the work required. However, not spending what could be a relatively small amount and gaining the information you need to make those informed decisions, could prove costly further into the business relationship with the third party, whether they are a customer or commercial enterprise.

The recent disclosure of the Pandora Papers ensured that some dealings involving high-profile businesspeople, politicians and organisations were aired for all to see. Perhaps those involved may have thought that the processes behind their dealings were untraceable and watertight in terms of information leakage. Any companies in the chain who may be innocently involved in the dealings could still get an unwanted mention. A credible RDD process may have highlighted the risks and provided the information they required to make alternative arrangements or decisions.

 

Choose your provider wisely

There are some basic questions you should ask yourself before choosing your RDD provider.

  • Has the provider formed an initial understanding of the risk and requirements?
  • Have they indicated that these risks would be explored as part of the due diligence process?
  • Do they have other skills and resources to be able to inform reporting where approved?
  • Can they evidence experience?
  • Have they indicated they will always operate lawfully regardless of where they may be required to operate?
  • Are the proposed services and costs proportionate to the risk?
  • Are their levels of communication effective?
  • Have they provided options or alternatives which could be as effective and may reduce costs?

This list is not an exhaustive list of questions, and you should certainly expect positive answers from them before issuing instructions.

 

Conclusion

It has never been more essential to carry out due diligence commensurate with both the requirement and your organisation’s appetite for risk. Given current supply-chain issues, the global financial climate, and the necessity to demonstrate resilience to stakeholders, there is an almost palatable clamour to rush to what seems to be an easy resolution to problems with little regard to the potential risks. Choose your provider with care and ensure they also do not become a threat to your operations. Choose well, and they will help you identify opportunities and avoid costly errors.

 

At Millbank Solutions, our specialist team take the time to understand the requirements of our clients and in consultation with them, formulate a plan of action that will result in them having all the information required to make the right decisions.

You can email us at enquiries@millbanksolutions.co.uk, or contact us via the details on our website at millbanksolutions.co.uk.

 

 

About the Author: Michael George is the Managing Director of Millbank Solutions and Associate Director of Investigations at Crime Prosecutors

5 ways to use credible information to make good decisions

man and woman at computer

You are only as strong as your weakest link, how fallible is the chain-holder?

Your business is the chain. You are the chain-holder. So, your ability to sort through a wealth of information to make effective decisions is crucial.

Here are 5 methods you can use to find credible information:

1- Analytical Reporting Tools: Knowing at what load the chain breaks can be quite useful when making business decisions. Tools that help with due diligence, country or regional risk assessments and counterintelligence can provide the necessary information. You will sound credible to your team, management, decision-makers etc. Decisions supported by accurate data lead to commercial growth.

2- Investigation Mentors: To achieve peak performance in sports, you need a coach – pretty simple right? Using that same logic – to make better decisions and achieve commercial growth, you need understandable insights from people who have several years of experience within the industry. They won’t necessarily label themselves as mentors but the wealth of knowledge they have can help you leverage digital insights which would take you more time, money and resources if you did it on your own.
You can contact some experienced investigation mentors here and have a chat via free consultations.

3- Data Cleansing: We all know there is a large amount of data out there. But, to make effective decisions, you need accurate and relevant data. This is where data cleansing comes in – this refers to the process of removing, updating and rectifying corrupt or inaccurate data within a database. When this is done, the data left behind is of a higher quality. Having higher quality data saves time and resources because you might be working with outdated data. This also means you have access to data that is GDPR compliant and you’re interacting with the right people within the industry.

4- Revisit and Re-evaluate Decisions: We have unconscious biases and deal with cognitive dissonance regularly. Our brains jump to conclusions, seeing the data we want to see rather than what is really there. We are often resistant to considering a different approach. Revisiting initial decisions and rationale at key checkpoints in our decision-making process can often produce more effective decisions than simply running with it from the start because it allows for re-evaluation and reflection. Step out of your usual decision patterns and look at the information again objectively. It may feel like you’re taking two steps back to move one step forward, however, in the long-run, you will be moving faster in the right direction.

5- Evolve and Question Decisions: Be sure to continually examine and question decisions. This is not to say you constantly second-guess yourself but to ensure you’re comfortable with the wealth of insights. If the landscape around you is changing but your analysed data isn’t, your decisions might become outdated. To take control and hold the chains of your business, it’s important to refresh and evolve strategies and decisions.

Bottom line:

As a chain-holder, you wouldn’t want to hold a chain that would break. You would want a chain that maintains integrity and trust. By following the 5 ways above, the chain (i.e your business) can grow more links without compromising on quality and performance.

 

About the Author: Kathryn Caudrelier is the Director of Intelligence at Millbank Solutions, a leading supplier of corporate intelligence services.

enquiries@millbanksolutions.co.uk