1. Provided by OSPA (www.opsecprofessionals.org) Operations Security (OPSEC)

2. OPSEC… What is it? Why do we need it? The 5-step OPSEC process The OPSEC 2-step

3. What is OPSEC? Simply, a process designed to protect sensitive unclassified information And a way to keep our sensitive/critical information out of the hands of the “bad guys”

4. What is an OPSEC Indicator?

5. Why do we need OPSEC? You tell me… Situations and examples: –Company phone directory –TrashInt –Visitor Authentication

6. The 5 Steps of OPSEC 1.Identify Critical Information 2.Analyze Threats 3.Analyze Vulnerabilities 4.Assess Risk 5.Apply Countermeasures

7. The OPSEC 2-step What do you need to protect? How do you protect it?

8. What do we need to protect? Personal information (PII) OUO Business strategy Network systems

9. How do we protect it? Be aware of potential unauthorized personnel Ask to see badge Secure information (e.g. locked desk or file cabinet) Log out or lock computer Be aware of your surroundings on the telephone Verify the source when asked for information on the telephone or by e-mail

10. “The number of known adversaries conducting research on information attacks is increasing rapidly and includes intelligence services, criminals, industrial competitors, hackers and disgruntled or disloyal insiders.” -George Tenet Former Director, CIA

11. REMEMBER Remember what to protect Remember how to protect it And remember that protecting this information is YOUR responsibility!