JS Operations Security (OPSEC)
_____________________ are like pieces of a puzzle an adversary uses to reveal a
picture of our operations. - answer Indicators
Which is not an example of an OPSEC countermeasure? - answer Sudden change to a
predictable routine
Match the five-step OPSEC process with the action associated with the step - answer
Identify critical information - This step identity the information that must be protected
and why it needs to be protected
Analyze threats - Identifies who the adversary is, the intentions of the adversary, and
the adversary's capabilities
Analyze vulnerabilities - Identifies the weaknesses the adversary can exploit to uncover
critical information
Assess risks - Identifies the impact to the mission if the adversary exploits a vulnerability
and the overall impact of the adversary learning our critical information.
Apply countermeasures - Identifies the actions that need to be taken to protect critical
information
The following should be considered when assessing risk. - answer All:
The consequences of your actions.
How will an adversary benefit from the indicator?
Will something you do or say provide an indicator to the adversary.
What's the effect on the mission?
What's the cost of avoiding risk?
Work related information posted to social networking sites or discussed in public may
create _________ that can be exploited by the adversary. - answerVulnerabilities
What is OPSEC? - answerA method for denying an adversary access to our critical
information
A process, not a set of rules
Part of everyone's job - including yours
_____________________ are like pieces of a puzzle an adversary uses to reveal a
picture of our operations. - answer Indicators
Which is not an example of an OPSEC countermeasure? - answer Sudden change to a
predictable routine
Match the five-step OPSEC process with the action associated with the step - answer
Identify critical information - This step identity the information that must be protected
and why it needs to be protected
Analyze threats - Identifies who the adversary is, the intentions of the adversary, and
the adversary's capabilities
Analyze vulnerabilities - Identifies the weaknesses the adversary can exploit to uncover
critical information
Assess risks - Identifies the impact to the mission if the adversary exploits a vulnerability
and the overall impact of the adversary learning our critical information.
Apply countermeasures - Identifies the actions that need to be taken to protect critical
information
The following should be considered when assessing risk. - answer All:
The consequences of your actions.
How will an adversary benefit from the indicator?
Will something you do or say provide an indicator to the adversary.
What's the effect on the mission?
What's the cost of avoiding risk?
Work related information posted to social networking sites or discussed in public may
create _________ that can be exploited by the adversary. - answerVulnerabilities
What is OPSEC? - answerA method for denying an adversary access to our critical
information
A process, not a set of rules
Part of everyone's job - including yours
