You would think that the CIA/NSA has a team whose job is to try and identify their own people using just public information. Like white hat penetration testers to ensure you spot weaknesses in your own processes/systems before the enemy does. Or at least have a new team try it out once a year so you have a variety of different approaches tried.