national security communications

Classified Information PR That Will Communicate Secrets Without Breaches

Corporate Reputation & Brand Trust, Crisis Communication & Issues Management

Classified information PR is the discipline that most defense and national security agencies handle informally, right up to the moment a breach makes it impossible to ignore. The cost of that informality is now public record. On March 15, 2025, Secretary of Defense Pete Hegseth shared live military operational details, aircraft types, missile specifics, and strike timing in a Signal group chat on an unapproved commercial platform. The editor-in-chief of The Atlantic, who was accidentally added to the group, received the information hours before the U.S. launched airstrikes against Houthi rebels in Yemen. Security experts described it immediately as “an extraordinary breach of U.S. security.” John Bolton, former National Security Adviser, told NPR: “These are absolutely basic things. Yet these are Cabinet-level people in our government, and yet not one of them ever said, ‘Why are we on Signal?’” Sophisticated adversaries did not cause the breach. A failure in the classified information PR discipline caused the breach. Specifically, a failure to apply the basic protocols designed precisely to prevent this kind of exposure. The communications response that followed significantly compounded the damage. This article shows you what classified information PR actually requires and how to build the discipline that prevents both breaches and the crises that follow. Why Classified Information Breaches Are Always a Communications Failure Security experts distinguish between breaches caused by sophisticated adversaries and breaches caused by human error. The Signal incident of March 2025 belonged firmly in the second category. The Pentagon confirmed this in its own memo, issued on March 18, 2025, three days after the breach. The memo stated that “third-party messaging apps (e.g., Signal) are NOT approved to process or store nonpublic unclassified information.” That policy predated the breach. The memo also reiterated the well-established approved alternatives. Sensitive Compartmented Information Facilities (SCIFs), secure video teleconference systems, and official classified communications networks that senior officials can access even while traveling. These secure rooms are built to discuss classified information,” NPR’s national security correspondent Greg Myre reported. “You can’t take a phone into these rooms. You can’t take documents out, and all of these top-ranking national security officials have SCIFs at their offices and at their homes.” The breach happened not because the right systems did not exist. It happened because senior officials chose convenience over protocol, and because no one in the group ever raised the question of whether Signal was an appropriate channel. Furthermore, in an era when, as DefenseScoop reported in March 2025, “China, Russia, North Korea and Iran are constantly working to intercept U.S. communications for their benefit. Officials who choose to conduct sensitive discussions on a commercial app commit a classified information PR failure before they send the first message. The public communications failure that followed- four senior officials delivering four contradictory statements within hours, then transformed a security incident into a sustained institutional credibility crisis that lasted months. Read Also: Government Crisis Response: Why 73% Fail & How to Fix It The Anatomy of a Classified Information PR Crisis Understanding how classified information PR crises develop helps you build the prevention and response systems that contain them. Three stages define every significant classified information breach from a communications standpoint: 1. The breach itself Classified information reaches an unintended audience, whether through technical failure, human error, deliberate leaking, or, as in the Signal case, a combination of protocol failure and carelessness. 2. The disclosure and initial response The moment the breach becomes publicly known, the classified information PR response must be activated. This is the phase where most institutions fail. The 2025 Signal response demonstrated every common failure simultaneously: According to Red Banyan’s crisis communications analysis of the incident, the administration’s handling underscored a core principle. Unified messaging is the cornerstone of effective crisis management for classified information crises. 3. The sustained credibility crisis When Stage 2 fails, Stage 3 begins. The story shifts from the breach itself to the response, and then to broader questions about institutional competence, leadership integrity, and systemic security culture. The Signal breach entered Stage 3 within 48 hours. Senate hearings. Congressional investigations. A Pentagon-wide email warning about Signal vulnerabilities. A memo ordering an investigation into “recent unauthorized disclosures of national security information. Each development prolonged the crisis and deepened the damage to credibility. This progression is not inevitable. It is the direct result of an inadequate classified information PR strategy at Stage 2. Building a Classified Information PR Framework Communications teams do not improvise classified information PR during a crisis. They build it before any breach occurs, just as operational security teams build protocols before a mission launches. Below is the framework that protects both sensitive information and institutional credibility: 1. Prevention – Communication Protocol Enforcement The first line of classified information, PR defense, is protocol compliance. Every person with access to sensitive or classified information must clearly understand which channels are approved for which categories of information. This means more than a written policy. It means regular, mandatory training that covers: The 2023 Jack Teixeira case, in which a 21-year-old Air National Guard IT specialist removed classified documents from a base and photographed them for a private Discord server, demonstrated that classified information PR failures occur at every level of access. Approximately 1.3 million Americans hold top-secret clearances, according to the Office of the Director of National Intelligence. Protocol training and accountability must reach all of them. 2. Detection – Early Warning Communications Monitoring The second tier of classified information PR protection is monitoring. This means: The Signal breach was discovered not through internal monitoring but by the journalist who received the information. That is the worst-case detection scenario. A properly structured monitoring function gives institutions lead time, sometimes hours, to assess and respond before information becomes fully public. 3. Response – Unified Crisis Communications When a classified information breach occurs, the response phase determines whether the incident remains contained or escalates into a sustained institutional crisis. The response framework must include: Additionally, the holding statement approach is critical. The initial public response

Defense Communications Strategy That Protects the Highest Integrity and Ensures Transparency

Executive Reputation & Leadership PR, Thought Leadership & Influence

A defense communications strategy that gets the balance wrong does not just damage reputation. It can compromise lives, erode democratic accountability, and permanently weaken the institutional credibility that a nation’s armed forces depend on to function. The tension at the heart of military public affairs has always existed. Citizens in a democracy have a right to know what their armed forces do in their name. At the same time, operational security demands that certain information never reach adversaries. But 2025 demonstrated something important: both sides of that tension, excessive secrecy and careless disclosure, carry serious consequences. The difference between them is almost always a failure of communications strategy, not communications intent. This article breaks down what a defense communications strategy built on genuine integrity looks like. It also shows how defense agencies can protect sensitive operations while maintaining the public trust that legitimizes democratic military institutions. Why Defense Communications Strategy Matters More Than Ever In March 2025, one of the most significant national security communications failures in recent U.S. history unfolded in real time. Senior Trump administration officials, including the Vice President, the Secretary of Defense, the CIA Director, and the National Security Adviser, used the encrypted messaging app Signal. They used this to discuss live military operational plans for airstrikes against Houthi rebels in Yemen. Jeffrey Goldberg, editor-in-chief of The Atlantic, was accidentally added to the group by National Security Adviser Mike Waltz. Goldberg received messages containing aircraft types, missile details, and strike timing hours before the operation launched. The incident, which security experts immediately described as an extraordinary breach, exposed a fundamental failure in defense communications discipline at the very highest level of government. Furthermore, the administration’s response compounded the damage. Defense Secretary Hegseth deflected: “Nobody was texting war plans.” President Trump stated, “It wasn’t classified information.” CIA Director Ratcliffe shifted accountability to Hegseth during a Senate hearing. National Security Adviser Waltz posted defensively on social media. Four senior officials delivered four different messages, a textbook example of how contradictory crisis messaging turns a serious incident into a sustained credibility crisis. According to crisis communications firm Red Banyan’s analysis of the incident: “Delayed responses, contradictory messaging, or vague statements prolong crises and erode public trust.” The lesson applies directly to defense communications strategy at every level. The Pentagon’s Media Access Crisis: A Transparency Lesson Two months before the Signal breach, the Pentagon introduced another communications challenge, this time by restricting press access rather than mismanaging it. In October 2025, Defense Secretary Pete Hegseth required journalists to sign a new media policy that restricted their ability to move freely through the Pentagon. More than 30 news organisations refused to comply. At least 15 major outlets, including NPR, removed their correspondents from the Pentagon workspace entirely. The defense trade press issued a joint statement warning that “the public, industry, and indeed the department itself benefit from granting credentialed defense reporters access to unclassified areas in the Pentagon.” A U.S. District Court vacated key provisions of the policy in March 2026, ruling them constitutionally deficient. The DoD announced it was appealing, while revising the policy to comply with the court’s order. The episode demonstrated a principle that every defense communications strategist must internalise: restricting legitimate press access does not protect operational security. It transfers the narrative to critics, produces perceptions of institutional secrecy, and ultimately damages the public trust that defense institutions depend on far more than any single piece of sensitive information. Accordingly, the Pentagon’s own statement, “the Department remains committed to transparency to promote accountability and public trust”, is not just a communications aspiration. It is the foundation of democratic military legitimacy. Building a Defense Communications Strategy That Works An effective defense communications strategy does not choose between security and transparency. It builds the institutional architecture that delivers both, simultaneously, consistently, and under pressure. Here is what that architecture looks like: A clear classification of a communications protocol Every defense agency needs a documented, leadership-approved protocol that defines what information can be communicated publicly. It also requires clearance before release, and what must never appear on any unclassified channel, including encrypted commercial applications. The March 2025 Signal incident occurred in part because senior officials lacked, or ignored, clarity on approved platforms for sensitive communications. A March 18, 2025, Pentagon memo confirmed that “third-party messaging apps (e.g., Signal) are NOT approved to process or store nonpublic unclassified information.” That policy existed before the breach. The failure was not policy; it was communications discipline. Consequently, protocol clarity alone is not sufficient. Defense communications strategy must include regular training, leadership accountability, and documented consequences for protocol violations at every level, including the most senior. Related: Regulatory Agency PR: How FDA and SEC Build the Most Powerful Public Confidence A unified spokesperson system The Signal breach response revealed what happens when multiple senior officials improvise independently. Four different messages from four officials, delivered within hours of the incident, produced a credibility crisis that no individual statement could have caused alone. An effective defense communications strategy designates one authorised spokesperson for each category of public communication. All other officials route their public statements through that spokesperson, or through a coordination process that ensures message consistency before anyone speaks publicly. This is not an extraordinary measure. It is standard operating procedure in every well-run defense communications function. The 2025 experience demonstrated why it cannot be optional. Proactive transparency on unclassified matters Defense agencies build a credibility reserve by communicating proactively. They share unclassified operations, budgets, personnel decisions, strategic priorities, and programme outcomes. Citizens who trust a defense institution’s routine transparency are far more likely to accept, and less likely to challenge, the boundaries it draws around classified operations. Proactive transparency is not naivety. It is the mechanism through which operational security restrictions maintain their democratic legitimacy. A media relationship infrastructure built before a crisis arrives The defense trade press statement of October 2025 noted that “for decades, the defense trade media has been a trusted source of news and insight about Defense Department programs,

Scroll to Top