What is OPSEC?
- Millitary term for Operations Security
- Five-step process / Simplified Two-step
- Supplements formal security disciplines
- Industry wide (private and govt.)
Goals of OPSEC
- To raise security awareness
- Make intelligence or information gathering difficult
- To attempt to stop adversaries from obtaining classified or sensitive information
Basic OPSEC Practices
- Properly handle and destroy classified and sensitive unclassified information
- Phones, Cell phones, faxes, and radios are subject to interception
- Be security minded when doing these activities
- Use the most secure means of communicating
- Guard against unsolicited inquiries to obtain sensitive information (by person, phone, email, or social sites)
- Ensure sensitive information is not put in recycling or trash
- When off of SNL premises, keep your SNL badge out of site
- Don’t reveal sensitive info on internet social sites
- MySpace, Facebook, Twitter, LinkedIn, etc.
- Avoid listing your SNL association
- Observe the Need-to-Know principle
- Know what needs to be protected!
- Know how to protect it!
The following brochures, published by the Office of Homeland Security, are helpful resources in explaning the OPSEC process, both at work and at home.