Open-source intelligence (OSINT) is the acquisition and analysis of data obtained from publicly available information sources such as the internet, social media, websites, forums, and blogs. OSINT can also be acquired from offline sources such as television, newspapers, magazines, and human contacts.
The data and information gathered can then be transformed into actionable insights, enabling individuals, organisations, or businesses to make informed decisions.
The initial use of OSINT was by the American military during the Second World War, whereby they scrutinised newspapers, journals, press clippings, and radio broadcasts to obtain valuable information and intelligence. Subsequently, OSINT was predominantly used by governments, the military, and law enforcement agencies for many years.
Let’s be very clear on this point: OSINT is not just a Google search, as many people might assume; it is far more than that. OSINT requires individuals to possess a passion for research combined with an analytical mindset. This enables them to locate, extract, and analyse critical information, even when it feels like finding a needle in a haystack. They then transform this information into actionable intelligence (insights) that can be easily understood.
With the advent of the internet and the vast amounts of information now accessible via computer screens, OSINT has grown exponentially in its capabilities and the tools available to obtain publicly available data. Consequently, its application has shifted from being primarily the domain of governments and the military to a capability now widely utilised by large financial institutions such as banks, corporations, and major media organisations.
An example of using OSINT includes a motorcyclist filming themselves on motorways riding at excessive/dangerous speeds before crashing and seriously damaging their machine.
Subsequently they make an insurance claim with their insurers, who conduct a due diligence process on the claimant, part of the due diligence includes an OSINT enquiry which highlights (video on social media) the individual riding the motorcycle at dangerous speeds.
In view of this due diligence the claimant has their insurance denied and a report is sent to the local police force, due to road traffic violations being committed.
Most recently, OSINT has gained the attention of a broader business community, including law firms, HR companies, and recruitment businesses. Within these enterprises OSINT is a game changer, it can support the recruitment process such as background checks, checking publicly available court cases and financial records. Additionally, potential business suppliers or partners can be assessed for potential risks to reputational damage prior to conducting or aligning business agreements. It is in these areas that OSINT will and must continue to grow.
Advancements in technology, such as automated search software, artificial intelligence (AI) analytics, and natural language processing (NLP), will further enhance OSINT’s utility for professional organisations.
Automated search software powered by AI can return information much faster, enabling the creation of personal profiles more quickly and efficiently. This capability allows law firms to assess and review individuals of interest, identify and understand new laws as they emerge, and provide clients with clear legal advice and defence or mitigation strategies.
AI analytics and NLP can support HR departments and recruitment companies in identifying potential inaccuracies in employee backgrounds and assessing the mental state of staff through the tone of written communications.
These tools can identify whether a person’s tone is positive, negative, or neutral and can indicate emotional states such as anxiety, stress, or fear. Studies have shown these methods to be 80–90 per cent accurate. By providing company executives with insights into organisational productivity and staff well-being, OSINT can help improve company performance and address employees’ mental health needs.
Although the use of OSINT is a massive positive in the business world, care must be taken with regards to privacy and information security, publicly available information can be assessed and acquired by anyone but the analysis and creation of useable insights on individuals or organisations can have unforeseen personal, financial, harmful or even fatal results.
It is vital that professional, knowledgeable specialists with unwavering integrity are used to conduct OSINT investigations. These professionals will have years of experience and awareness of the type of work needed to be undertaken and the legal ramifications of not complying with the legal aspects of information acquisition such a GDPR and the Data protection legislations.
It is, therefore, clear that using OSINT for general business purposes is an invaluable capability for the future of any organisation.
In the United States, a four-year OSINT strategy (2024–2028) has been produced. This strategy highlights several strategic goals, one of which is to “establish OSINT as a premier intelligence capability and the foundation for all other disciplines.” This demonstrates OSINT’s expanding role in both military and civilian sectors of society. To date and to the best of our knowledge, the United Kingdom (UK) does not have a publicly available strategy with regards OSINT.
By Barry Sobers of Oskaresearch.com
