A city contractor's Instagram is public, but the matching LinkedIn profile is locked to connections. What is the correct OPSEC and collection choice?
Select an answer to reveal the explanation.
Short Explanation
A locked LinkedIn is a closed door—you do not knock with a real city badge or a fake one. Stay on the public Instagram and any other open pages. Private profiles are outside OSINT until they are public again.
Full Explanation
When a city contractor’s Instagram is public but the matching LinkedIn profile is locked to connections, the correct OPSEC and collection choice is to leave the locked LinkedIn out of OSINT and work remaining public platforms such as Instagram. Locked profiles are closed doors for PORP-style work even when the civic question is important. Sending a connection request from a real city staff LinkedIn to bypass the lock fails by leaking civic interest and using authentic identity to pierce privacy settings. Creating a fake civic-employee LinkedIn and endorsing the contractor until they accept fails as deceptive sock use aimed at unlocking non-public fields. Ignoring Instagram because a locked LinkedIn means no social OSINT is allowed fails; other public platforms remain fully in scope for due diligence. Exam caveat: if LinkedIn later becomes public, it can be added; until then, do not social-engineer access. Operational check: collect public Instagram artifacts needed for the civic question; note LinkedIn as locked and out of scope with the observation date; revisit only if the profile privacy state changes publicly. In municipal practice, record the rationale in the case file so future staff know which control was chosen and which failure modes the rejected options would create for city services.