Security is a mindset, not simply a process. This article goes a little into the mind of a Counterintelligence officer but when they talk of &quot;paranoia&quot; it has more of a negative connotation than I think is warranted.<p>I would offer that the way the CI officer approaches security along the spectrum (PERSEC, INFOSEC, OPSEC) is an extreme and fractal form of the &quot;Front page rule.&quot; So the question is always: &quot;How would this look on the [insert increasingly public channels].&quot;<p>Compartmentalization and segmentation are really the underlying theories behind defense in depth and I think it is valuable for other people to look at how these principles should be applied.<p>The last thing I will say is that, it&#x27;s probably best to ignore the &quot;Well NSA does that but look at how that failed.&quot; In fact what you see with leaks and hacks etc...is a failure of the implementation - usually in the form of a person or persons who tried to make things easier or more user friendly. That should not indict the theory of compartmentalization, but rather prove that the human is the most important element in the security system.