Book III · The Shadow System · How To · No. 38
The Citizen Soldier
For when defence stops being someone else's job.
Defence is no longer the sole domain of specialised agencies — every citizen, every mindful choice, contributes to collective resilience.
A neighbour two doors down loses access to their bank account for three days after a ransomware attack hits half the town's small businesses at once. Nobody official turns up to help them recover. It's the retired network engineer down the street who walks them through changing every password from a clean laptop.
That's not a story about a hero. It's a story about what happens when enough ordinary people already know what to do before the crisis arrives. The line between civilian and combatant in a digital conflict has blurred past the point where defence can stay someone else's department.
The card sets out three practice areas, drawn from the source chapter's wider cast of citizen-soldier personas. The Digital Fortifier hardens their own devices and contributes to the open-source tools everyone relies on. The Cognitive Defender triages what they share before amplifying it. Underneath both sits the essential foundation everyone needs regardless of persona: a password manager, multi-factor authentication, and a real backup.
It comes from The Shadow System, where the fuller argument for collective digital resilience gets made at length. The card doesn't need the book to make sense — it stands on its own. A companion card, The Blueprint for the Future, covers the other two personas from the same chapter.
Print it, pin it, or send it to whoever in your life still thinks their own security habits don't affect anyone else's.
The Digital Fortifier and Cognitive Defender are roles one person can practise alone. The harder question: what would it take for a whole street, or a whole town, to practise them together?
The Citizen Soldier
Personas of Defence
The Digital Fortifier
- Fortify your own perimeter first. Change default passwords on your router and IoT devices immediately, keep firmware updated, and segment your network so one compromised device can't become the weak link in a larger attack.
- Strengthen the code everyone relies on. If you have technical skills, contribute to open-source security — auditing code, fixing vulnerabilities, or improving documentation for the tools the digital world runs on.
- Report flaws through the front door. Learn how authorised bug bounty and vulnerability disclosure programmes work; reporting a flaw is worth infinitely more than leaving it undiscovered.
The Cognitive Defender
- Triage before you amplify. Before reposting inflammatory content, ask who authored it, what their motive is, and whether it's designed to provoke outrage — cross-check against reliable sources first.
- Learn to spot the synthetic. Notice the tell-tale signs of deepfakes — glitches, strange lighting, awkward speech — and remember that seeing is no longer believing; verify through official channels.
- Correct falsehoods, politely and factually. Use trusted, independent verification platforms, and address misinformation in your own network directly; correcting it among friends inoculates the people closest to you.
Essential Foundation of Personal Defence
- Use a password manager. One leaked password shouldn't compromise every account that shares it — unique, high-entropy passwords close that door.
- Enable multi-factor authentication. Even a stolen password fails an attacker who can't clear the second check — it stops the majority of targeted attacks outright.
- Keep software updated and back up the 3-2-1 way. Updates patch known exploits before they're used against you; three copies of your data on two media, one offsite, mean ransomware never gets to hold you hostage.
You don't need elite skills to make a difference.
From The Shadow System · © Neil Catton · Filed under security and safety
Read it alongside
Companion card · No. 45The Blueprint for the FutureFor the citizen roles that don't fit inside your own four walls.
Also from The Shadow System · No. 31Fortify the EnterpriseFor when the human element is your strongest layer of defence, not your weakest.
Also from The Shadow System · No. 24Secure the Smart HomeFor the moment you realise nobody in the house has thought about the smart speaker's security since the day it went in the box.