What is OPSEC?

So What Is OPSEC Anyway?
Operations security (OPSEC) is a process that identifies critical information to determine if friendly actions can be observed by enemy intelligence, determines if information obtained by adversaries could be interpreted to be useful to them, and then executes selected measures that eliminate or reduce adversary exploitation of friendly critical information.

In a more general sense, OPSEC is the process of protecting individual pieces of data that could be grouped together to give the bigger picture (in this case, about our military). OPSEC is the protection of critical information deemed mission essential from military commanders, senior leaders, management or other decision-making bodies.

“RULES” OF OPSEC
Don’t post detailed information about the mission of assigned units.
Also do not post details on locations and times of unit deployments.
Do NOT, under any circumstance, post information about casualties before the information is released by the official channels.
Don’t list your spouse’s specific job on social media.
Do not post specifically where your spouse is ported.
It’s important to not post details on locations and times of unit trainings.
If you happen to know, do not post unit/service member itineraries.
Do not post references to unit morale or personnel problems.
Do not post details concerning response time, tactics or security procedures within unit.
Avoid posting all Personal Identifying Information (PII) – This could include middle names (or even last names) on your social media accounts.
Do not post exact deployment dates or homecoming dates (see guidelines below).
Avoid passing on rumors (“I heard they’re coming home early”, etc) even if you feel you have the right information.
Do not reveal camp or deployment locations, including nearby cities.
Don’t discuss convoy routes (“we travelled through ‘such-and-such’ on our way to X”).
Additional Guidelines to Follow
Social media is not going away any time soon. More and more issues arise with social media and consequences hit much harder and much faster (with consequently less time to “undo” a mistake).

Countdowns
We use countdowns in deployments all the time; with our kids and with ourselves. Paper chains, candy kisses in the jar, or bucket lists help us to pass the time and gives us things to look forward to.

I personally love the electronic countdowns and they are by far the most popular. However, they are extremely specific and by posting those on the web, it is basically providing times and dates for deployment, homecomings or transfers to anyone to see.

Posting
You may want to limit your posts to friends-only. Defaults can change on Facebook regularly, and you won’t even know you’re posting to the public. If your FRG or MILSO group has a facebook group, ask the leader if it’s secret, closed, or public. What you post to a group may appear on other people’s timelines as well.

Photos
Do NOT be shy about taking pictures! It is extremely important to document all the comings and goings of your SO, your children at homecomings and that first (and last) kiss. Put these photos in albums and special keepsake boxes and they will be treasured for years to come.

Posting photos on social media is when things get a little tricky. If you must post photos, take some precautions. Consider cropping or blurring some details on pictures. Make sure your exact location, names or location details are not available. Delay posting on social media until 2-3 days after the event as well.

Geotagging
This is really important and super easy to do: Turn your location services setting off. GPS location services are on so many apps so be sure to go to each one to turn off those that you do not need/use. GPS services are easy to track and keep tabs on.

Announcements
OPSEC rules are here to help ensure the safety and security of our nation’s military. They aren’t meant to limit your free speech or liberties- after all, that’s what our men and women in uniform fight to protect. Announcements of deployments and homecomings are emotional times and a vital part of coping (looking for the support). Consider delaying the announcements until the next day if possible.

It’s Still Your Story
Sometimes, people take OPSEC as sometimes meaning that you should NEVER talk about deployments, which is not the case. Having a loved one gone for weeks, months or even years is extremely difficult AND it’s a part of YOUR story.

OPSEC is not trying to take that away from you. Your story matters, but its important to not include all those details that could threaten the safety of your spouse or others. Simply take note of the “rules” while still documenting your story!

What OPSEC “Rule” Was New To You??

MORE INFO
https://www.slideshare.net/grugq/opsec-for-hackers
https://www.slideshare.net/grugq/underground-education
https://www.slideshare.net/grugq/on-cyber-54919602
https://www.slideshare.net/grugq/mobile-opsec/2-AGENDA_OPSEC_Refresher_Phones_Suck