CAC wa basalayi ne mukanda wa dikuba dia ditunga uvua mujimine¶

Kujimija karte ka tshibambalu tshia malu a bukubi, karte ka dimanyisha dia mudimu wa basalayi, anyi tshimanyishilu tshia bukubi tshia mbulamatadi ntshilumbu tshia bukubi tshia mbulamatadi ne tshia mudimu. Dianyisha dia busalayi ki ntshimanyinu tshia muena mudimu tshia patupu to. Mudi biamu bia circuit misangisha bidi ne mikanda ya Public Key Infrastructure, profil ya bantu, bimanyinu bia tshiamu tshia mashinyi, ne bukenji bua kubuela mu nzubu ya basalayi, mu njila ya ndeke ne mu nzubu ya tshisokomenu. Padi mukanda wa dianyisha ujimina, bimenga bia basalayi ne biamu bia ordinatere bia mbulamatadi bidi bipetangana ne njiwu diakamue.

Bena mudimu ba bungi, bena mudimu ba malu a dikuba dia ditunga, ne bena mudimu ba tshianana batu belakana bua kumanyisha karte kadi kabuyiku bualu badi batshina bua kubabela kudi balombodi, bua kubapesha mibelu, anyi bua kuikala ne malu mabi adi atangila dianyisha dia bukubi. Kusokoka anyi kulekela luapolo lua karte ka Common Access kadi kajimija kudi kubi menemene kupita dijimija adi nkayadi. Ma karte adi kaayi mamanyisha adi mua kuenzela kudi bena mudimu ba malu a tshimpitshimpi ba ku babende anyi kudi bisumbu bia benzavi bua kubuela mu biibi bia ku mpenga anyi kujadika bumuntu buabu mu réseaux de défense. Kuenza malu ne lukasa ne patoke kudi kuimanyika dibuela dia bantu badi kabayi banyishibue ne kudi kukuba mikanda yebe ya bukubi.

Enza nunku mpindieu¶

1. Umanyishe bena mudimu bebe ne mulombodi wa bukubi diakamue.
   • Udi mua kubikila mfumuebe wa mudimu, sergent wa kumpala, mfumu wa tshibambalu, anyi muleji mpala wa mfumu wa mudimu mu dîba dimue dia kujingulula dijimija.
   • Umanyishe mulombodi wa malu a bukubi anyi biro bia malu a bukubi bua bobu kufunda bualu ebu mu tshilaminu tshia malu a bukubi tshia ditunga.
   • Shi udi mushipibua na bingoma, banyenga mashinyi, nansha mushipibua ku mubidi pambelu pa tshitudilu, bikila nimero ya lukasa ya muaba unudi (911 mu États-Unis ne Canada, 112 mu Union européenne mujima, 999 mu Royaume-Uni) anyi tangila liste wetu wa nomba ya tshimpitshimpi.
2. Fila luapolo lua bintu bijimija anyi biiba kudi bamfumu ba mpulushi.
   • Shi karte kajimine nansha kiiba pa tshitudilu tshia basalayi, manyisha buludiludi kudi bampulushi ba basalayi, kudi basalayi ba bukubi, anyi kudi biro bia Master-at-Arms.
   • Shi dijimija dienzeke pambelu pa tshitudilu mu tshisumbu tshia bantu ba tshianana, funda luapolo lua buivi kudi tshibambalu tshia bampulushi tshia mu tshimenga ne peta nomba wa dilonda dia tshilumbu.
   • Udi ne tshia kuleja mukanda wa luapolo lua mpulushi ludibu batue tshiala bua kupeta mukanda wa dianyisha wa kupingaja ku nzubu wa difunda dia malu a dikuba dia ditunga.
3. Request immediate PKI certificate revocation from your network help desk.
   • Contact your service branch or agency enterprise service desk, such as the Army Enterprise Service Desk, Navy 311, Air Force IT Service Desk, or defense agency equivalent.
   • Request that an Information Assurance Manager or Registration Authority revoke the Public Key Infrastructure certificates on the missing chip.
   • Revoking the authentication, email signing, and data encryption certificates blocks unauthorized logins across NIPRNet, SIPRNet, and defense web applications.
4. De-authorize physical installation access in perimeter security systems.
   • Notify the base Visitor Control Center or Pass and Decal office that your card is missing.
   • Request that security personnel flag your card profile in the Defense Biometric Identification System, or DBIDS, and local Physical Access Control Systems.
   • Flagging the electronic card serial number makes sure that if an unauthorized person attempts to swipe or scan the card at an installation entry gate, sentries receive an instant alert.
5. Secure the required command documentation for credential reissuance.
   • Obtain a signed Lost Credential Memorandum from your commanding officer, unit security officer, or authorized corporate contractor facility security officer.
   • Complete and sign Department of Defense Form 1172-2, Application for Identification Card/DEERS Enrollment.
   • Verify that the command memorandum explicitly details the date, location, and circumstances surrounding the disappearance of the card.
6. Schedule an urgent appointment at a RAPIDS issuing facility.
   • Keba tshiamu tshia mudimu tshia Real-Time Automated Personnel Identification System tshidi pabuipi kupitshila ku tshiibi tshia mbulamatadi tshia dilongolola dia rendez-vous ya dikuba.
   • Usangishe mafoto abidi adi makane, adi kaayi mapite matuku a mbulamatadi, bu mudi mukanda wa diendesha mashinyi, mukanda wa ditunga, anyi mukanda wa diledibua.
   • Present your secondary identification, police report, and command authorization memorandum to receive a newly encoded physical credential.

flowchart TD
    A["Military CAC or security badge lost or stolen"] --> B["Step 1: Notify chain of command and unit security manager"]
    B --> C["Step 2: File formal police report on-base or with civilian precinct"]
    C --> D["Step 3: Call enterprise IT service desk to revoke PKI certificates"]
    D --> E["Step 4: Notify base Pass and ID to flag card in DBIDS gate scanners"]
    E --> F{"Are you stationed on-base or attempting to enter?"}
    F -->|"Entering installation"| G["Report to Visitor Center for temporary escort pass"]
    F -->|"On installation"| H["Step 5: Obtain signed command lost credential memo"]
    G --> H
    H --> I["Step 6: Gather two secondary unexpired photo IDs and DD Form 1172-2"]
    I --> J["Step 7: Visit RAPIDS/DEERS office for replacement card re-encoding"]
    J --> K["Restore network access tokens and re-register in base DBIDS"]

The dual threat: physical perimeter breach and cryptographic compromise¶

Understanding why defense credentials receive extreme protection requires examining how the smart card functions. A Common Access Card combines two completely distinct security layers into a single piece of laminated plastic: physical visual and biometric authentication, and digital cryptographic tokens.

Malu adi kaayi makane bua kufika ku tshishimikidi ne dienza dia tshiibi¶

Ku tshipiminu tshia diteka dia bintu, balami badi ku miaba ya dibuela badi batangila mikanda ya dianyisha bua kujadika bumuntu. Padi mashinyi binunu ne binunu milongolola ku biibi bia diteka dia bintu mu dinda, balami ba ku biibi batu babala karte ku diambuluisha dia biamu bia DBIDS bia ku bianza anyi benza makebulula a kumona ku madidishi a mashinyi.

If a lost credential matches an individual of similar age, height, hair color, and build, a disciplined intruder can present the card to gain entry to the installation. Once past the perimeter fence, unauthorized individuals can observe operational unit movements, photograph flight line operations, map physical infrastructure, or access unsecured command spaces. For this reason, base security forces treat an unaccounted-for credential as a potential perimeter security breach.

Cryptographic compromise of military networks and PKI keys¶

The digital threat posed by a lost Common Access Card is equally severe. Embedded inside the smart card chip are three primary Public Key Infrastructure (PKI) certificates issued by the Department of Defense Certification Authority: * The Identity Authentication Certificate: Authenticates the user to defense computers, secure network domains, virtual private networks, and web portals. * The Digital Signature Certificate: Applies legally binding digital cryptographic signatures to official military orders, contracts, administrative actions, and emails. * The Data Encryption Certificate: Encrypts sensitive, unclassified, and proprietary correspondence transmitted across government networks.

If a credential falls into the possession of a sophisticated adversary, foreign intelligence service, or advanced cybercriminal group, they can use specialized smart card hardware readers and forensic software to probe the microchip. If the card personal identification number (PIN) is compromised, an attacker can authenticate to defense intranets, exfiltrate sensitive files, or forge cryptographic signatures on official documents. Immediate digital certificate revocation shuts down this electronic attack surface.

Immediate reporting requirements and timeline¶

The Department of Defense, service branch regulations, and federal directives enforce mandatory reporting timelines when defense credentials disappear. Treating a lost credential as an informal administrative matter is a serious mistake.

The mandatory reporting window¶

Service branch regulations, including Army Regulation 380-67, Air Force Instruction 36-3026, Navy Personnel Command directives, and Department of Defense Manual 1000.13, mandate that personnel report lost or stolen credentials immediately: * Dimanyisha dia kumpala (mu meba 1 anyi 2): Umanyishe dijimina kudi mulombodi webe, kudi mulombodi wa mudimu, kudi muena mudimu udi kayi ne mudimu, anyi kudi mfumu wa tshibambalu diakamue paudi ujadika ne: karte kenaku to. * Diyukidilangana dia mulombodi wa malu a bukubi (mu meba 4): Umanyishe mulombodi wa malu a bukubi anyi muleji-mpala wa muena mudimu wa tshipungidi. Mulombodi wa malu a bukubi udi ufunda luapolo lua bualu kampanda mu tshilaminu tshia malu a bukubi (DISS), tshilaminu tshia malu a bukubi tshia mbulamatadi. * Mikanda ya dikumbaja dia mikenji (mu meba 24): Kumbaja mukanda wa tshipungidi ne bampulushi ba basalayi anyi bampulushi ba muaba unudi.

Kufila luapolo lukasa kudi kukukuba bilondeshile mikenji. Shi muntu udi kayi muanyishibue wenza mudimu ne bintu biebe biiba bua kuteta kubuela mu tshiibi tshia ku tshiibi anyi kutuadija dibuela dia mu rezo, tshimanyishilu tshia dîba tshidi pa dimanyisha diebe dia kumpala dia bukubi tshidi tshileja ne: karte aka kavua mu bukokeshi buebe, kadi kakukuba ku dielakana dia ne: uvua muenze malu mabi to.

Kufila luapolo ku diambuluisha dia basalayi ne dia bantu ba tshianana¶

Muaba uudi mua kufila luapolo lueba lua kumpala lua bintu bidi bilondeshila muaba udi tshintu tshijimija: * Malu adibu bajimije pa tshitudilu: Wewe muteke karte munda mua nzubu wa basalayi, nzubu wa basalayi, muaba wa mazuwa, muaba wa kudiila anyi nzubu wa manaya, manyisha buludiludi tshibambalu tshia bukubi tshia dilongolola. Mulombodi wa tshibambalu tshia mudimu neangate mukanda weba wa mutshipu, neabulule mukanda wa malu adi menzeke, ne neapatule luapolo lua mbulamatadi lua bampulushi. * Malu adibu bajimije pambelu pa tshipalu: Shi tshibombi tshieba anyi tshibombi tshieba tshiiba ku tshipalu tshia ndeke, mu restoran, mu tshisalu, anyi mu otele, funda luapolo lua tshibawu kudi tshibambalu tshia bampulushi tshia mu tshimenga tshidi ne bukokeshi pa muaba au. Lomba luapolo lua mpulushi lua mbulamatadi ludi ne dina dia mpulushi udi wenza makebulula, nomba wa tshimanyishilu, nomba wa telefone wa tshibambalu, ne nomba wa dimanyisha dia bualu budi buenzeke. * Dijimija dia ngendu ya ku babende: Wewe mujimije mukanda wa busalayi paudi mu dikisha dia pa nkayebe anyi mu mudimu wa mbulamatadi mu ditunga dikuabu, manyisha biro bia tshiluilu tshia ditunga dia États-Unis anyi tshisumbu tshia balami ba tshiluilu tshia mâyi ku ambasade wa pabuipi nebe diakamue, ku luseke lua tshibambalu tshia mudimu tshia ku nzubu kuebe.

Mudimu wa dikuba dia ditunga udi ufila luapolo¶

Bena mudimu ba malu a bukubi badi benza mudimu bilondeshile mukanda wa ditunga wa bukubi bua midimu ya bianza (NISPOM / 32 CFR Part 117) badi benza mudimu bilondeshile mikenji mikole. Muena mudimu wa tshibambalu tshia malu a bukubi udi mujimije karte ka Common Access anyi tshimanyishilu tshia bukubi tshia kumpanyi udi ne tshia: 1. Umanyishe muena mudimu wabu wa bukubi (FSO) diakamue. 2. Kumbaja luapolo lua malu a bukubi a munda mua kumpanyi ludi luleja malu adibu mua kuikala bapeta ku diambuluisha dia mukanda wa dianyisha. 3. Mulombodi wa malu a bukubi udi ufila luapolo lua bualu bua bukubi mu tshilaminu tshia malu a bukubi ne udi umanyisha muleji mpala wa muena mudimu wa mbulamatadi. 4. Dipanga dia muena mudimu wa malu a bukubi bua kumanyisha diakamue mikanda ya dianyisha idiye mujimije didi mua kufikisha ku dimanyisha dia diondopangana dia tshipungidi, dipuekesha dia mushinga wa bukubi bua kumpanyi, anyi diimanyika dia mikanda ya bukubi ya nzubu.

Dijimija dia bintu bia ku Enternete: dijimija dia mikanda ya PKI ne bimanyinu bia ku Enternete¶

Bimanyinu bia ku mubidi kabiena mua kupingajibua ku bule to, kadi bukole buabi bua tshiamu tshia ordinatere budi mua kujika mu minite mikese ku diambuluisha dia réseaux ya IT ya dikuba.

Kuyukila ne mulombodi wa malu a ngumu ne tshibambalu tshia diambuluisha dia IT¶

Tshibambalu tshionso tshia basalayi ne tshia bukubi tshidi ne mulombodi wa malu a ngumu (IAM), mufidi wa midimu ya bukubi bua ku Enternete (CSSP), anyi tshibambalu tshia mudimu tshia muaba udibu basombele (NEC). Udi mua kubikila bena mudimu ba muaba unudi anyi ba mudimu diakamue bua kutuadija dijimija dia bukenji bua malu a tshisokomenu: * Pesha muena mudimu dina diebe dijima dia mu mikenji, nomba wa dimanyisha wa DoD (tshimanyinu tshia muntu tshia nomba dikumi tshia Electronic Data Interchange tshidi tshifunda kunyima kua karte kebe), ne bulongolodi budibu bakupeshe. * Amba patoke ne: "Ndi ngela luapolo lua dijimija anyi diiba dia karte ka Common Access. Ndi ndomba bua kumbusha diakamue mikanda yonso ya Public Key Infrastructure idi itangila malu aa." * Muena mudimu udi ubikila bena mudimu ba mbulamatadi (RA) anyi muena mudimu wa kueyemenyibua (TA) udi wela nkonko mu tshilaminu tshia malu a DoD Public Key Infrastructure ne udi ushintulula mikanda yebe ya dianyisha mu tshitupa tshia Revoked.

Liste ya dijimija dia mikanda ya dianyisha ne protocole wa nsombelu wa mukanda wa dianyisha wa ku Enternete¶

Padi mulombodi muanyishibue ukumbusha mikanda yebe, tshienzedi etshi tshidi tshienda tshitangalaka mu biamu bia mudimu bia bukubi ku diambuluisha dia mishindu ibidi ya malu a tekiniki: * Milongo ya dijimija dia mikanda ya dianyisha (CRLs): Tshibambalu tshia dianyisha tshia DoD tshidi tshisangisha ne tshipatula liste ya nomba ya dianyisha mifunda ku Enternete mu bikondo bisungula. Bibambalu bionso bia ku Enternete bidi biangata liste eyi bua kujadika ne: mikanda ya dianyisha idibu baleje padibu bateta bua kubuela idi anu ne mushinga. * Online Certificate Status Protocol (OCSP): Mashinyi a bukubi a lelu adi enza mudimu ne biamu bia dianyisha bia OCSP mu tshikondo tshia bushuwa. Padi muntu ubueja karte mu tshiamu tshia kubala natshi karte ka meji ne ubueja PIN, tshiamu tshia mudimu tshia muaba udibu basombele tshidi tshikonka tshiamu tshia mudimu tshia OCSP mu réseau. Shi mukanda wa dianyisha udi mubenga, tshiamu tshia mudimu tshidi tshibenga dianyisha mu tusunsa tukese, tshijikija dianyisha kumpala kua muntu udi kayi muanyishibue bua kutangila bintu bia ku Enternete anyi kutuadija programe.

Kumbusha bimanyinu bia diambuluisha ne mishindu ya dianyisha dia ku telefone¶

Shi karte kebe kadi kajimine kavua kaenza mudimu bua kujadika bintu bia mudimu bia pa mutu, manyisha muena mudimu wa diambuluisha dia IT bua bobu kumbusha bukenji bua kubuelamu: * Kumbusha njila yonso ya Virtual Private Network (VPN) idi milamakaja ku konte webe wa mudimu. * Umbusha mishindu ya dianyisha idi miteka pa telefone ya bianza, pa tablete anyi pa biamu bia mudimu bia mbulamatadi bidi bifila kudi mbulamatadi. * Tangila cookies ya tshikondo tshimue tshia kubuela (SSO) mu bibuelelu bia malu a bukubi bu mudi Defense Travel System (DTS), MyPay, ne bibuelelu bia ku Enternete bia mudimu.

Dibuela dia bintu bia ku mubidi ne dijimija dia bukenji bua DBIDS¶

Terminating network privileges protects electronic records, but installation security forces must also neutralize the card physical utility at base boundary gates.

Defense Biometric Identification System flagging¶

The Defense Biometric Identification System (DBIDS) manages physical access for personnel entering military installations worldwide. When you scan your card at a base gate, the optical scanner reads the barcode or contactless smart card chip, cross-references the internal database, and displays your photograph, clearance level, and installation access privileges on the sentry handheld terminal.

To flag a missing card in DBIDS: 1. Visit or call the installation Pass and Identification Office or Visitor Control Center. 2. Provide your DoD Identification Number and the circumstances of the loss. 3. The security clerk accesses the DBIDS administrative terminal and changes your card status to "Lost/Stolen - Confiscate." 4. If an individual attempts to present your physical card at any participating military installation gate, the handheld scanner sounds an audible alarm, flashes red, and prompts sentries to detain the individual and confiscate the credential immediately.

Physical Access Control Systems and facility security badges¶

In addition to primary installation gates, specialized command buildings, Sensitive Compartmented Information Facilities (SCIFs), and laboratory complexes operate local Physical Access Control Systems (PACS). These systems use proximity RFID chips embedded within Common Access Cards or specialized proximity badges: * Notify your building security manager or facility custodian immediately. * The facility custodian accesses the local building access control software and purges your card unique electronic badge number from the electronic door strike controllers. * Purging the badge serial number prevents an intruder from using the physical card to unlock outer perimeter turnstiles, biometric mantraps, or vault doors.

Base access procedures without a Common Access Card¶

Being stranded outside a military installation gate without an identification card creates an immediate practical hurdle. Sentries are armed, trained to challenge unauthorized entry attempts, and bound by strict force protection conditions.

Approaching the Visitor Control Center¶

Never attempt to drive through a military installation gate without an ID, hoping a friendly sentry will recognize you and wave you through. Doing so violates base security directives, causes gate closures, and can result in armed felony detention.

Follow this standard procedure to enter an installation when your ID is missing: 1. Pull your vehicle into the designated Visitor Control Center parking area located outside the installation perimeter fence before reaching the sentry guard shack. 2. Enter the Visitor Control Center and approach the intake counter. 3. State calmly that you are an active-duty service member, civilian employee, or contractor assigned to an installation tenant unit whose identification card was lost or stolen. 4. Present secondary unexpired government photo identification, such as a state driver license or civilian passport. 5. Provide your vehicle registration, proof of valid automotive insurance, and your assigned unit contact information.

Temporary installation passes and escort requirements¶

Depending on the current Force Protection Condition (FPCON) and local installation command policies, the Visitor Control Center will issue temporary access documentation: * Temporary Paper Pass (DoD Form 2883 or Base Pass): The security clerk verifies your active status in DEERS and issues a paper pass valid for twenty-four to seventy-two hours. The pass contains your photograph, legal name, and specific gate entry authorizations. * Sponsor Escort Requirements: Under elevated force protection conditions (such as FPCON Charlie or Delta), security clerks cannot issue unaccompanied visitor passes. You must contact your unit duty officer, leading chief petty officer, or first sergeant to drive to the Visitor Control Center in person. Your sponsor must sign an official escort authorization and accompany you physically through the gate. * Suspension of Trusted Traveler Privileges: When you lack an official credential, you lose Trusted Traveler privileges. You cannot escort other passengers onto the installation, and every individual inside your vehicle must be cleared independently at the Visitor Control Center.

The RAPIDS and DEERS replacement procedure¶

Once immediate security notifications are completed, you must obtain a replacement credential through a Real-Time Automated Personnel Identification System (RAPIDS) workstation. RAPIDS terminals are connected directly to the Defense Enrollment Eligibility Reporting System (DEERS) database.

Required documentation checklist¶

RAPIDS verifying officials operate under strict federal identity proofing guidelines established by Homeland Security Presidential Directive 12 (HSPD-12) and Federal Information Processing Standard 201 (FIPS 201). You cannot receive a replacement credential based on verbal vouching.

You must present the following mandatory documentation at the RAPIDS workstation: * The Signed Command Lost Card Memorandum: An official memorandum on command letterhead signed by your unit commanding officer, executive officer, security manager, or corporate Facility Security Officer. The memorandum must describe the circumstances of the loss and authorize reissuance. * The Formal Police Incident Report: A signed, stamped copy of the military police report or civilian municipal police theft report. * Two Forms of Unexpired Identity Documentation: You must present two original, unexpired forms of government identification listed on the federal Form I-9 list. One document must be an unexpired state or federal government photo ID (such as a state driver license or civilian passport). The second document can be a certified birth certificate, Social Security card, voter registration card, or foreign passport. * Department of Defense Form 1172-2: An approved Application for Identification Card/DEERS Enrollment. If your sponsor is not physically present, the form must be signed digitally via the online RAPIDS Self-Service portal or notarized.

Accessing the RAPIDS appointment system¶

Military installations experience heavy demand for ID card services. To obtain an appointment: 1. Access the official DoD ID Card Office Online (RAPIDS Appointment Scheduler) from a personal computer, smartphone, or sponsor workstation. 2. Search for all RAPIDS facilities within a fifty-mile radius. In addition to primary active-duty installations, look for National Guard armories, reserve training centers, and military recruitment stations that house certified RAPIDS workstations. 3. If online appointment calendars are fully booked for weeks, locate an installation that operates a standby walk-in queue. 4. Arrive at the walk-in facility at least forty-five minutes before doors open, bringing your complete documentation dossier. Explain to the intake clerk that you are in a duty-critical status requiring emergency same-day card re-encoding.

Card re-encoding and biometric capture¶

At the RAPIDS terminal, the verifying official walks through a structured enrollment process: * The official scans and uploads your two primary identification documents into the DEERS database. * You place your fingers on an optical biometric scanner to capture and verify digital fingerprints against your historical DEERS record. * A high-resolution digital photograph is taken against a neutral background. * The operator inserts a blank smart card into the desktop encoding machine. The system writes your demographic profile, burns digital cryptographic keys into the microchip, and prints physical visual text and barcodes onto the card exterior. * You insert the newly minted card into a keypad reader and establish a fresh six-to-eight-digit PIN.

Comparison of military credential types and replacement protocols¶

Different defense credentials carry distinct administrative authority, replacement documentation rules, and network privileges. The following comparison table provides an operational summary of primary Department of Defense identification credentials.

Counterintelligence, OPSEC, and espionage considerations¶

In the modern threat environment, foreign intelligence services, terrorist organizations, and organized cyber syndicates actively target military identification credentials. A Common Access Card is a valuable human intelligence asset.

The intelligence value of a military credential¶

Hostile intelligence operatives seek authentic military credentials for several operational objectives: * Perimeter Reconnaissance and Infiltration: An authentic card facilitates unauthorized physical access to military installations, permitting surveillance of weapon storage areas, command headquarters, and defense research laboratories. * Social Engineering and Impersonation: Possessing an authentic credential allows a hostile agent to pose convincingly as a military officer or defense technician when conducting phone-based or in-person social engineering attacks against military units or defense contractors. * Synthetic Identity Fabrication: Data harvested from the magnetic stripe, PDF417 barcode, and integrated circuit chip can be cloned or incorporated into counterfeit documentation used in espionage operations.

High-risk loss indicators and CI reporting¶

You must report the loss directly to military counterintelligence authorities (such as the Army Counterintelligence Command, Naval Criminal Investigative Service, or Air Force Office of Special Investigations) if any of the following high-risk indicators are present: * The loss occurred during personal or official travel in a foreign country designated as a high-threat counterintelligence environment. * The card disappeared under suspicious circumstances, such as an unauthorized room entry where high-value electronics and cash were left untouched while only the military ID was taken. * You are approached by unfamiliar individuals asking detailed questions about your security clearance, your military duties, or your access to classified networks following the loss. * You observe unauthorized electronic login attempts or password reset notices triggered against your government email or defense web accounts.

Protecting operational security (OPSEC)¶

When discussing the loss of your credential, maintain operational security: * Never post about the lost card on social media platforms or public forums. Announcing that you lost your badge or describing your specific unit access permissions provides valuable intelligence to adversaries monitoring social networks. * Do not discuss details regarding command security investigations or temporary installation vulnerabilities over unencrypted civilian communications channels. * Restrict all communication regarding the incident to official military email, secure telecommunications, or private in-person command briefings.

Bipeta bia malu a mbulamatadi ne dikuba dia mukanda webe wa bukubi¶

One of the greatest concerns for personnel who lose a credential is the potential impact on their military career, performance evaluations, and security clearance eligibility.

Dishilangana dia malu a dinyoka: dipanga dia lungenyi ne buivi budi kabuyi mua kuepuka¶

Military leadership and security adjudication authorities draw a sharp distinction between unavoidable criminal victimization and irresponsible negligence: * Unavoidable Criminal Victimization: If your credential was stolen during an armed robbery, a documented residential burglary, or a vehicle break-in where the bag was concealed in a locked trunk, you are the victim of a crime. As long as you report the loss promptly, file an accurate police report, and cooperate transparently with security officers, you will rarely face disciplinary punishment. * Negligent Carelessness: If an investigation demonstrates that you left your card unattended in a computer keyboard inside a public workspace, lost the card while intoxicated at an off-base bar, or failed to report the disappearance for several days, you face administrative consequences. These consequences can include non-punitive letters of caution, formal counseling statements, loss of pass privileges, or non-judicial punishment under Article 92 of the Uniform Code of Military Justice (Failure to Obey an Order or Regulation).

Security clearance impact and Continuous Evaluation¶

National security clearances are governed by the Security Executive Agent Directive 4 (SEAD 4) National Security Adjudicative Guidelines. Guideline K (Handling Protected Information) and Guideline E (Personal Conduct) evaluate an individual reliability, trustworthiness, and adherence to security rules.

To protect your security clearance: * Report Immediately: The single most damaging action an individual can take is concealing the loss. When an unreported card is flagged by gate sentries or network administrators, the security manager must log an adverse security incident report in the Defense Information System for Security (DISS), which can trigger clearance suspension. * Document Mitigation: Demonstrate personal responsibility by presenting your police report, IT ticket numbers, and replacement documentation to your unit security manager. Proactive remediation shows compliance with security directives. * Continuous Evaluation Compliance: Modern federal clearance holders are enrolled in Continuous Evaluation (CE) automated monitoring. Security incidents are reviewed continuously by the Defense Counterintelligence and Security Agency (DCSA). Transparent reporting guarantees that the incident is resolved administratively as an isolated administrative occurrence rather than a pattern of security non-compliance.

Hardening personal credential security for the future¶

Experiencing the disruption of a lost military credential reinforces the necessity of strict physical custody habits. Implement these daily security measures to safeguard your credentials:

Physical custody and transit discipline¶

Ikala ne karte kebe ka Common Access Card ne bukubi bua muomumue ne bua bintu bia basalayi bidi ne mushinga wa bungi: * Tshibidilu tshia diumusha: Kulekedi karte kebe mu tshiamu tshia kufunda natshi anyi mu tshiamu tshia kubala natshi karte ka meji paudi umbuka ku mesa ebe, nansha bua tusunsa makumi asatu. Kanga tshiamu tshiebe tshia mudimu ne uteke karte mu tshibombi tshiebe anyi mu nshingu webe dîba dionso diudi wimana. * Concealment Off-Base: When traveling outside military installations, remove your card from exterior lanyards or visible badge reels. Displaying a military credential in civilian spaces makes you an identifiable target for pickpockets and intelligence collectors. * Dedicated Interior Storage: Store your credential inside a dedicated, zippered interior pocket of your jacket or bag, separate from routine credit cards and transit passes. Separating your military ID from everyday cash reduces the risk that the card will accidentally slip out when paying for retail purchases.

Using RFID-shielding sleeves and secure holders¶

Smart cards containing contactless integrated circuits broadcast identification signals when exposed to radio frequency interrogation fields. Protect your card from electronic harvesting: * Store your credential inside an electromagnetically opaque RFID-shielding sleeve or a rigid, FIPS 201-approved dual-sided badge holder. * An approved shielding sleeve blocks unauthorized contactless card skimmers from reading unencrypted electronic chips while you travel through public transit terminals, airports, or crowded civilian spaces. * Inspect physical badge holders regularly for cracks or weak plastic clips that could allow the card to detach unnoticed during daily movement.

Nkonko itubu bela misangu ya bungi¶

Will I be disciplined under the UCMJ for losing my military CAC?¶

Losing a Common Access Card is not an automatic UCMJ violation, but service members can face non-judicial punishment under Article 92 if the loss resulted from gross negligence, leaving the card unattended in a secure facility, or intentionally failing to report the loss immediately to their chain of command.

How can I get on base if I lose my CAC on a weekend?¶

Pull into the installation Visitor Control Center parking area before the gate sentry post, present secondary unexpired government photo identification like a driver license or passport, and have your unit duty officer or a designated sponsor meet you to sign an official temporary escort pass.

Can someone use my lost CAC to access classified computer networks?¶

An unauthorized individual cannot access classified networks like SIPRNet with a lost card alone because authentication requires a cryptographically validated smart card PIN, but immediate reporting is necessary so Information Assurance Managers can revoke Public Key Infrastructure certificates before adversaries can attempt bypass attacks.

What two forms of ID do I need to bring to the RAPIDS office for a replacement CAC?¶

Udi ne tshia kuleja mikanda ibidi ya ntuadijilu idi kayiyi mianji kujika idi mu liste wa formilere I-9 wa mbulamatadi, nansha umue udi ne foto wa kumpala wa ditunga anyi wa mbulamatadi bu mudi mukanda wa diendesha mashinyi wa ditunga anyi mukanda wa ditunga, pamue ne mukanda muibidi bu mudi karte ka Social Security anyi mukanda wa diledibua udi mujadikibue.

What is a Lost CAC Memorandum and who has the authority to sign it?¶

A Lost CAC Memorandum is an official administrative document on command letterhead describing the date, location, and circumstances of the card loss, which must be signed by the service member commanding officer, executive officer, unit security manager, or authorized contractor Facility Security Officer before a RAPIDS workstation can issue a replacement card.

Malu adi apetangana¶

• Lost or Stolen Wallet Recovery and Card Freezing Procedures
• Replacing Lost or Stolen Birth Certificates and Identity Documents
• Enterprise Data Breach Response and Password Leak Mitigation
• Session Cookie Hijacking and Credential Revocation Procedures
• Tshibambalu tshia malu a tshimpitshimpi tshia pa buloba bujima ne nomba ya telefone ya pa buloba bujima