Provided by OSPA www'opsecprofessionals'org

1
Operations Security (OPSEC)
Provided by OSPA (www.opsecprofessionals.org)
2
OPSEC

• What is it?
• Why do we need it?
• The 5-step OPSEC process
• The OPSEC 2-step

3
What is OPSEC?

• Simply, a process designed to protect sensitive
  unclassified information
• And a way to keep our sensitive/critical
  information out of the hands of the bad guys

4
What is an OPSEC Indicator?
5
Why do we need OPSEC?

• You tell me
• Situations and examples
• Company phone directory
• TrashInt
• Visitor Authentication

6
The 5 Steps of OPSEC

• Identify Critical Information
• Analyze Threats
• Analyze Vulnerabilities
• Assess Risk
• Apply Countermeasures

7
The OPSEC 2-step

• What do you need to protect?
• How do you protect it?

8
What do we need to protect?

• Personal information (PII)
• OUO
• Business strategy
• Network systems

9
How do we protect it?

• Be aware of potential unauthorized personnel
• Ask to see badge
• Secure information (e.g. locked desk or file
  cabinet)
• Log out or lock computer
• Be aware of your surroundings on the telephone
• Verify the source when asked for information on
  the telephone or by e-mail

10

• The number of known adversaries conducting
  research on information attacks is increasing
  rapidly and includes intelligence services,
  criminals, industrial competitors, hackers and
  disgruntled or disloyal insiders.
• -George Tenet
• Former Director, CIA

11
REMEMBER

• Remember what to protect
• Remember how to protect it
• And remember that protecting this information is
  YOUR responsibility!