What is OPSEC?
- Millitary term for Operations Security
- Five-step process / Simplified Two-step
- Supplements formal security disciplines
- Industry wide (private and govt.)
Goals of OPSEC
- To raise security awareness
- Make intelligence or information gathering difficult
- To attempt to stop adversaries from obtaining classified or sensitive information
Basic OPSEC Practices
- Properly handle and destroy classified and sensitive unclassified information
- Phones, Cell phones, faxes, and radios are subject to interception
- Be security minded when doing these activities
- Use the most secure means of communicating
- Guard against unsolicited inquiries to obtain sensitive information (by person, phone, email, or social sites)
- Ensure sensitive information is not put in recycling or trash
- When off of SNL premises, keep your SNL badge out of site
- Don’t reveal sensitive info on internet social sites
- MySpace, Facebook, Twitter, LinkedIn, etc.
- Avoid listing your SNL association
- Observe the Need-to-Know principle
OPSEC SimplifiedTwo Steps:
- Know what needs to be protected!
- Know how to protect it!
Helpful Resources
The following brochures, published by the Office of Homeland Security, are helpful resources in explaning the OPSEC process, both at work and at home.
|