Let's say the nuclear reactor site hosts a "post pictures of our site to Instagram" day. Then who has the data? And then suppose that the worker gets a text from someone impersonating his wife that says, "honey, you should text me some schematics of the plant." That would also be really bad.
And then suppose that the worker adopts a Chinese daughter, but really the daughter has been a Chinese spy the entire time, and on bring your daughter to work day she excuses herself to use the bathroom but actually goes and sabotages the plant by pulling an unguarded lever in a control room, sparking WW3. What is the US doing to protect against that happening?
Maybe you think these scenarios are unrealistic or that there are simple security measures that can mitigate them, but I want to stress that these are just examples. If I spend enough time, I can think of a whole lot more examples.
Let's say the nuclear reactor site hosts a "post pictures of our site to Instagram" day. Then who has the data? And then suppose that the worker gets a text from someone impersonating his wife that says, "honey, you should text me some schematics of the plant." That would also be really bad.
And then suppose that the worker adopts a Chinese daughter, but really the daughter has been a Chinese spy the entire time, and on bring your daughter to work day she excuses herself to use the bathroom but actually goes and sabotages the plant by pulling an unguarded lever in a control room, sparking WW3. What is the US doing to protect against that happening?
Maybe you think these scenarios are unrealistic or that there are simple security measures that can mitigate them, but I want to stress that these are just examples. If I spend enough time, I can think of a whole lot more examples.