Who is responsible for detection of security threats within a unit?

• A. Commanders secure unit assets with organic resources.
• B. Owner/user personnel provide detection but are not sentries.
• C. Security contractors handle all detection.
• D. Public affairs handles breach notification.

Answer: (B)

Detection within a unit works best when the people who own or operate the assets themselves watch for signs of trouble. These owner/user personnel are closest to daily operations, know the normal patterns, access, and potential vulnerabilities, and can spot anomalies or unusual behavior quickly. When they notice something off, they report it through the established security channels, enabling a fast, appropriate response. They aren’t acting as formal sentries, but their everyday vigilance provides the first line of threat detection that keeps the unit proactive rather than reactive.

Leadership and resources still matter, of course—the commander directs security efforts and ensures proper protection, but the actual spotting of threats comes from those who interact with the systems and environment daily. External security contractors can support, but they shouldn’t be relied on as the sole detectors. Public affairs handles communication after an breach, not the act of detecting it. So, the best arrangement is owner/user personnel providing detection while not serving as the primary sentries.