7/28/2019 4. Operational Security

1/16

Introduction to OperationsSecurity (OPSEC)

Updated 09/28/111

Security is Everyone's Responsibility See

7/28/2019 4. Operational Security

2/16

Understand the core of Operations

Security (OPSEC)

Define & identify targets and threats

Establish countermeasures

Identify the Critical InformationCommandments

Decipher the value of information

Objective

2Security is Everyone's Responsibility See

7/28/2019 4. Operational Security

3/16

What is OPSEC?

Have you ever taken precautions against

Someone

breaking into your house while youre on

vacation?

stealing your purse?

stealing packages from your car while yourshopping?

fraudulently using your credit card?

Then you have used OPSEC!

3Security is Everyone's Responsibility See

7/28/2019 4. Operational Security

4/16

OPSEC is a risk management instrument

that enables a manager or commander

to view an operation or activity from the

perspective of an adversary. It is a

process of identifying, analyzing andcontrolling critical information.

4Security is Everyone's Responsibility See

What is OPSEC?

7/28/2019 4. Operational Security

5/16

Identify Critical Information

Analyze Threats

Discover Vulnerabilities

Assess Risks

DevelopCountermeasures

Spies

Ops

Privacy

Caution

Foresight

Terror

Home

Theft

5Security is Everyone's Responsibility See

What is OPSEC?

7/28/2019 4. Operational Security

6/16

Identify Critical Information: Personal information, operational info, itineraries,

passwords, patterns, changes in patterns, OPLAN andorders, information base systems, etc..

Analyze Threat: Adversaries, Intelligence agencies Open source

information, clandestine operations, eavesdropping,photographing, etc

6Security is Everyone's Responsibility See

What is OPSEC?

7/28/2019 4. Operational Security

7/16

Discover Vulnerabilities: Flow of information, operations, timing of events,

how an adversary would acquire the information,etc

How would the adversaries access to suchinformation impact the organization?

Assess Risks: Estimated loss x impact of risk x likelihood of risk = $

Does the solution outweigh the loss?

7Security is Everyone's Responsibility See

What is OPSEC?

7/28/2019 4. Operational Security

8/16

Develop Countermeasures: are based on the vulnerabilities and inherent risks.

Are dictated by cost, timing, feasibility, andimagination of involved personnel. Simplicity,straightforwardness, and inexpensiveness are key tothe most effective countermeasure solutions.

OPSEC is a DIFFERENT WAY of SEEING

8Security is Everyone's Responsibility See

What is OPSEC?

7/28/2019 4. Operational Security

9/16

Take note of suspicious behavior

HUMINT-

If you see something, say something

Be consistent with the testing of systems There is always room for improvement

Security is Everyone's Responsibility See9

How Do I Identify Threats &

Vulnerabilities?

7/28/2019 4. Operational Security

10/16

Critical Information Commandments

1. Thou must protect the information that

the adversary needs to accomplish his

mission.

2. Thou shall not try to protect everything.

3. Consider who thy adversaries are and whatinformation they require to inflict harm to

you.

10Security is Everyone's Responsibility See

7/28/2019 4. Operational Security

11/16

4. Thou shall consult all sources of

information to determine what thine

enemies know about you.

5. Once thou has determined what

information is critical, thou shalldetermine if that information is associated

with thine activities.

1Security is Everyone's Responsibility See

Critical Information Commandments

7/28/2019 4. Operational Security

12/16

Information that the adversary needs to

accomplish their mission.

Intelligence information

Technical information on

communications

Security is Everyone's Responsibility See1

What Information Should I Protect?

7/28/2019 4. Operational Security

13/16

Tactical information concerning

intentions

Scientific information regarding newtechnologies

Military capabilities

Commercial information on new

technologies

Security is Everyone's Responsibility See1

What Information Should I Protect?

7/28/2019 4. Operational Security

14/16Security is Everyone's Responsibility See1

What Information Should I Protect?

Military weapons information: Capabilities, manufactures, purpose, vulnerabilities,

effectiveness, type, testing details, etc

Scientific Industrial Information Technology & Research

Technical specifications Marketing plans

Key personnel

Breakthroughs

7/28/2019 4. Operational Security

15/16

15Security is Everyone's Responsibility See

What Information Should I Protect?

Law Enforcement plans & information

sources Warrants, Witnesses, Evidence, Capabilities, Raids,

Who, What, Where, How, etc

7/28/2019 4. Operational Security

16/16

Conclusion

OPSEC is critical to our National Security

OPSEC is everyones concern and

responsibility

OPSEC may mean the success or failure

of our mission

Security is Everyone's Responsibility See16