The Leak: A Breach of Strategic Trust
The Context
The aborted military operation — described in speculative reports as “Operation Epic Fury” — was never executed. Yet its mere planning, now exposed, has already inflicted damage. The disclosure risks revealing classified strategic intentions: the timing, the targets, the diplomatic back-channels. For U.S. credibility with Gulf allies, the cost is immediate. Trust, once fractured, is not easily repaired. The question for directors is not whether the operation was real, but whether the governance that allowed its exposure was sound.
The Risk
Directors may be personally liable if their organisation’s information security or oversight failures contributed to this breach. Under the Companies Act 1993, a director’s duty of care and diligence extends to ensuring that strategic intelligence — whether military, commercial, or diplomatic — is protected with appropriate controls. If a board failed to challenge management on classification protocols, or if it signed off on risk assessments that ignored the consequences of a leak, that could constitute a failure of duty. The penalty? Reputational collapse. Loss of market access. And, in the most serious cases, personal liability for damages under Section 137 of the Act. This is not a hypothetical. The law does not distinguish between a leaked memo and a leaked military plan.
The Control
The strategic solution is not to prevent all leaks — that is impossible. It is to build a culture of classified information stewardship that makes a leak either impossible or inconsequential. That means: clear ownership of each intelligence asset; mandatory breach reporting to the board within 24 hours; and a pre-agreed crisis communications protocol that does not rely on improvisation. Directors must demand evidence of these controls, not promises. They must audit the audit trail.
The Challenge
These are the critical questions you should be raising at the board table:
| Who in our organisation has the authority to classify a strategic plan, and what is the evidence that this authority is exercised with due diligence? | |
| If a classified operation were leaked tomorrow, what is our pre-approved crisis response — and when was it last stress-tested under real-world conditions? | |
| Who on the board is accountable for the integrity of our strategic intelligence governance — and what is the last documented review of that accountability? |