Opsec Rules

by **Admin** Mon Feb 15, 2010 10:35 pm

OPSEC RULES

What is OPSEC?
"Operations security (OPSEC) is an analytic process used to deny an adversary information - generally unclassified - concerning friendly intentions and capabilities by identifying, controlling, and protecting indicators associated with planning processes or operations. OPSEC does not replace other security disciplines - it supplements them." (Wikipedia)

OPSEC is simply denying an adversary information that could harm you or benefit them. Another form of OPSEC, although not as widely accepted, is the intentional mis-information of an adversary, designed to protect your true secrets.

OPSEC is a process, but it is also a mindset. By educating oneself on OPSEC risks and methodologies, protecting sensitive information becomes second nature.

OPSEC is unique as a discipline, because it is understood that the OPSEC manager must make certain decisions when implementing OPSEC measures. Most of these measures will involve a certain expenditure of resources, so an estimate must be made as to whether the assumed gain in secrecy is worth the cost in those resources. If the decision is made not to implement a measure, then the organization assumes a certain risk. This is why OPSEC managers or Commanders must be educated and aware of the OPSEC process.

OPSEC is not only for Military or Government entities. More individuals and Corporations are realizing the importance of protecting trade secrets, personal security and intentions. Whatever the organization and purpose, OPSEC can, and will, increase the overall security posture.
Why OPSEC?

We are in a world increasingly dependent on information. In this world, pieces of information (internet postings, work schedules, phone directories and more) may be assembled in order to form the “big picture” of an organization or operation.

Your adversaries in a military or business sense practice OPSEC to varying degrees, and it would be unwise to discount the capabilities of your adversary. Your adversary will constantly probe your organization, so the importance of a solid understanding of OPSEC cannot be understated.
What are OPSEC indicators?
An indicator is a "piece of the puzzle". In other words, an indicator is any piece of information that can be exploited to gain further information, or be combined with other indicators to build a more complete profile of your operations.

For example, an OPSEC indicator could be when you go to work, what you do at work, large group or troop movements or financial transactions such as life insurance appointments. Before releasing information, consider the potential value to your adversaries.
What are the capabilities of your adversary?

The unfortunate fact is that you don’t know. Your adversary may have internal spies, skilled photographers or any other manner of resources at their disposal. You may never be able to determine the full capability of your adversary, so you can only protect your information on your end.

OPSEC Rules for The Ones Left Behind:

1. Do not post exact deployment dates or redeployment dates
2. Do not reveal camp locations, including nearby cities. After the deployment is officially announced by Military officials, you may discuss locations that have been released, normally on the Country level.
3. Do not discuss convoy routes (“we travelled through Takrit on our way to X”)
4. Detailed information on the mission, capabilities or morale of a unit
5. Specific names or actual nicknames
6. Personnel transactions that occur in large numbers (Example: pay information, powers of attorney, wills, etc)
7. Details concerning security procedures, response times, tactics
8. Don’t discuss equipment or lack thereof, to include training equipment
9. Don’t speculate about future operations
10. If posting pictures, don’t post anything that could be misconstrued or used for propaganda purposes. A good rule of thumb is to look at your picture without your caption or explanation and consider if it could be re-captioned to reflect poorly on coalition forces. For example, your image might show your Soldier rescuing a child from a blast site, but could be re-captioned to insinuate that the child being captured or harmed. (it’s happened!)
11. Do not use count-up or count-down tickers for the same reason as rule #1
12. be very careful if posting pictures of your loved one. Avoid images that show significant landmarks near their base of operations, and black out last names and unit affiliations.
13. Do not, ever, post information about casualties (coalition or enemy) before the official release of the information.
14. Do not pass on rumors (“I heard they’re coming home early”, etc)

If you have any questions, please feel free to contact Admin.

These OPSEC rules are not here to keep you from your right of free speech, but are in place to protect the men and women who protect us.

OPSEC IS A FAMILY AFFAIR - DISCUSS OPSEC WITH YOUR FAMILY

obtained from: www.heartsofourtroops.com