OPSEC: Protect your CAC

  • Published
  • By Kimberly Woodruff
  • Staff Writer
Information on a common access card isn't meant to be common knowledge.

Jennifer Carrico, the Installation Operations Security Program manager with the 72nd Air Base Wing Plans and Programs Office, said everyone plays a part in operations security at Tinker Air Force Base. That includes taking measures to protect CAC cards.

"We should all be vigilant in practicing safeguards with our CAC and military ID cards and not succumb to lax personal security," said Ms. Carrico.

Because information such as name, rank, date of birth and Social Security numbers are imbedded on the card, CACs in the wrong hands can be used to steal a person's identity or compromise national security.  It functions as the principal card used to enable physical access to buildings and controlled spaces, and it provides access to DoD computer networks and systems.  Remember your CAC is a controlled item! 
In a May 31 report, the U.S. Army Criminal Investigation Command Computer Crime Investigative Unit warned CAC holders of a new application that's used to scan the ID cards.

According to the report, "CACScan" is a free application for Android devices that was recently released on Google Play. With the app, the user can scan the barcode on the front of the CAC card, gaining access personally identifiable information (PII) such as the name, Social Security number, rank and Department of Defense ID number of the CAC holder.

The report warns CAC holders to not download or use any application designed to read the barcode, magnetic strip or integrated circuit chip on their CAC. The application could be sending your PII to people you do not want to have it.

Neither "CACScan" nor any other CAC reader application available for download via an app store are sponsored or endorsed by the Department of Defense.

Ms. Carrico said Tinker personnel need to remember step five in the OPSEC process: Develop countermeasures and guard your information.

"Remember to always safeguard your CAC or other ID cards," she said.

Other things to remember:
· Your CAC or other ID should not be worn or displayed in public.

· Commercial establishments can ask for your CAC to verify military affiliation for military discounts, but are prohibited from photocopying it. It is recommended that military and DOD personnel provide a state drivers license or other form of photo ID if that is required.

· Do not allow your CAC to be photocopied. Exceptions to this rule include military and civilian medical providers to facilitate medical care, proof of insurance and process military-related benefits to eligible beneficiaries.

· If your CAC is lost or stolen, report the missing card to your supervisor and security officer as soon as possible.

"Practice good OPSEC," Ms. Carrico said, "'OP' in OPSEC doesn't mean Optional."