OPSEC Flashcards
An information-related capability that preserves friendly essential secrecy by using a process to identify, control, and protect critical information and indicators.
Operations Security (OPSEC)
Any entity with goals counter to your own.
Adversary
Adversary with the capability and intent to undertake action detrimental to mission success.
Threats
Exists when the adversary is capable of collecting critical information and/or indicators, correctly analyzing them, and acting quickly enough to impact friendly objectives.
Vulnerabilities
Specific facts about friendly activities, intentions, capabilities, or limitations an adversary seeks in order to gain a military, diplomatic, economic, or technological advantage.
Critical Information
List the five-step OPSEC Process
- Identify Critical Information
- Analyze Threats
- Analyze Vulnerabilities
- Assess Risks
- Apply OPSEC Countermeasures
Five-step OPSEC Process
- Information that an organization has determined is valuable to an adversary.
- This information will vary based on the organization’s role.
- It is best identified by the personnel responsible for planning and executing the organization’s mission.
Identify Critical Information
Five-step OPSEC Process
- Threat information is necessary to develop appropriate countermeasures.
- The threat analysis includes identifying potential adversaries and their associated capabilities and intentions to collect, analyze, and exploit information and indicators.
Analyze Threats
Five-step OPSEC Process
- An OPSEC vulnerability exists when the adversary is capable of collecting critical information to exploit our vulnerabilities.
Analyze Vulnerabilities
Five-step OPSEC Process
- Assessing the adversary’s ability to exploit vulnerabilities that would lead to the exposure of critical information and the potential impact it would have on the mission.
Assess Risks
Five-step OPSEC Process
- Countermeasures are implemented after a risk assessment is conducted and the amount of risk is deemed unacceptable. These countermeasures should mitigate the risk or reduce the risk to an acceptable level.
Apply OPSEC Countermeasures