Politics & Campaigns

Establish a short onboarding checklist for employees, consultants, volunteers, and temporary offices. Use organization-controlled accounts where possible, require strong authentication, and define which devices and messaging services may handle sensitive work. Offboarding should remove access promptly rather than waiting until after an election or campaign phase.

Librarian can help organize accounts and ownership, while Relay integrations should use limited permissions. Include personal accounts only through clear, informed arrangements that respect privacy. Campaign security should not become unrestricted monitoring of volunteers, family members, or political associates.

• Assign an owner to shared platforms and high-profile accounts.
• Maintain recovery methods that do not depend on one departing staff member.

Limit access to strategy, opposition research, donor records, travel plans, and internal deliberations according to role. Review external links and consultant access, particularly where a supplier works with several organizations. A compromised peripheral account can provide a route into more sensitive conversations.

Psycher can support suspicious-message review, Argus can inform exposed-credential investigations, and Pulse can help prioritize relevant intelligence. Confirm unusual requests through an established channel. Do not equate a persuasive lure or an external allegation with proven attribution to a government or political opponent.

• Verify requests to move conversations or documents to a new service.
• Keep sensitive research out of broadly accessible volunteer workspaces.

Exercise scenarios involving stolen credentials, compromised websites, impersonated leaders, and publication of alleged internal records. Establish a coordinated process for technical investigation, legal review, and communications. Preserve originals and distinguish authentic material from altered or unverified content before making claims.

Growler can support evidence handling and Dewey can assist with response coordination. Human leadership must approve account restrictions, notifications, public statements, and any external reporting. Campaign-system guidance should be tailored to campaign operations; election-administration procedures should not be presented as interchangeable responsibilities.

• Keep independent contact channels for core incident leaders.
• Review security controls before debates, major announcements, and election-related deadlines.