Welcome to Module 3 of the Sensitive Source Safety Training.
Abstract:
Every document carries a history—metadata, watermarks, and hidden identifiers can expose more than the information itself. This module equips you with the knowledge and tools to handle sensitive materials securely, protecting both their integrity and the anonymity of your sources.
About this module:
From leaked PDFs to scanned contracts, digital and physical documents can contain invisible traces that put sources at risk. How do you verify authenticity without revealing a source? What systems should you use to store, transfer, and eventually delete files securely? And how do you avoid inadvertently soliciting documents while still safeguarding what is shared?
This module addresses these questions with expert-led guidance, practical case studies, and interactive exercises.
What do I learn?
You will learn how to:
- Implement secure systems for receiving and storing sensitive materials.
- Understand and mitigate document metadata risks.
- Analyze documents for hidden identifiers, such as watermarks.
- Verify authenticity while maintaining source protection.
- Apply secure deletion and file transfer protocols.
- Preserve source anonymity in all aspects of document handling.
- Uphold ethical standards by never soliciting or advising on the acquisition of documents.
What do I need to know?
This module is designed for journalists who work with sensitive sources and whistleblowers. No prior knowledge or training is required.
About the teachers:
This module is presented by Delphine Halgand-Mishra, the Founding Executive Director of The Signals Network (TSN). TSN former chief of staff Kate Miller created these modules. Since 2017, The Signals Network has provided support and protection to hundreds of sensitive sources.
About The Signals Network: The Signals Network is a nonprofit organization that supports whistleblowers who disclose information in the public interest. It provides legal, psychological, physical safety, and advocacy assistance to help protect sources and amplify their disclosures.
About the Reynolds Journalism Institute: The Reynolds Journalism Institute is a journalism support organization based out of the University of Missouri that empowers journalists with knowledge, tools and funding to strengthen journalism through practical innovation.
Curriculum
- 12 Sections
- 38 Lessons
- 10 Weeks
- Pre-Assessment: Test Your KnowledgePlease answer the following questions.3
- Adversary Perspective Simulation6
- Document Vulnerability Assessment1
- Secure Document Reception and Handling ProtocolsHow you first receive and handle documents is critical for source protection. These protocols establish security from the moment a document arrives.8
- Knowledge Check1
- Source Protection Verification Methods8
- 6.1Verification Technique Comparison
- 6.2Comparing Traditional vs. Source-protecting Verification Methods
- 6.3Verification Decision Tree
- 6.4Verification Scenarios2 Minutes3 Questions
- 6.5Traceability Assessment
- 6.6Risk Assessment
- 6.7Technical Expertise Engagement
- 6.8Quiz on Appropriate Technical Expert Engagement Scenarios3 Minutes3 Questions
- Knowledge Check1
- Secure Storage and Sharing10
- 8.1Encryption Fundamentals
- 8.2Encryption Demonstration
- 8.3Key Management Demonstration
- 8.4Secure Deletion Protocols
- 8.5Comparison of Different Deletion Methods
- 8.6Internal Sharing Safeguards
- 8.7Internal Sharing Protocols3 Questions
- 8.8Long Term Archiving Decisions
- 8.9Appropriate Archiving Policies
- 8.10Knowledge Check3 Minutes3 Questions
- Redaction Decision Tool2
- Publication Checklist Generator2
- Post-Assessment: Apply What You've Learned2
- Congratulations!1
Instructor
