Operations Security (OPSEC) Concepts Flashcards

What is the first step in the OPSEC process?

Answer: Identifying critical information

The first step in the OPSEC process is identifying critical information — determining what information, if obtained by adversaries, would be most harmful to the mission or operation.

What is a 'critical information list' (CIL) in OPSEC?

Answer: A prioritized compilation of information that must be protected from adversary collection

A CIL is a prioritized listing of the critical information that an organization must protect because its compromise would provide adversaries with a significant advantage.

What is an 'OPSEC indicator' as used in the five-step OPSEC process?

Answer: Observable actions or information that could allow an adversary to detect, identify, or derive critical information

OPSEC indicators are observable data or activities that can be detected and analyzed by an adversary to deduce critical information about friendly operations.

What is the purpose of OPSEC 'countermeasures'?

Answer: To eliminate or reduce OPSEC vulnerabilities by protecting critical information from adversary collection

OPSEC countermeasures are actions taken to eliminate or reduce OPSEC vulnerabilities by preventing adversaries from detecting indicators of critical information or exploiting those indicators.

What is 'threat analysis' in the OPSEC process?

Answer: Identifying potential adversaries, their capabilities, and their likely intelligence collection methods

Threat analysis identifies who the adversaries are, what they are capable of collecting, and what their likely targets and collection methods are.

What does 'vulnerability analysis' determine in the OPSEC process?

Answer: Whether adversaries can obtain critical information by exploiting observable indicators

Vulnerability analysis determines whether adversaries could exploit observable indicators or other weaknesses to collect and correctly interpret the organization's critical information.