About OPSEC
OPSEC is a process used to identify and deny critical information (specific information about capabilities and/or intentions) from adversaries who seek to exploit such information for their advantage and our disadvantage. The OPSEC process involves systems, threat and vulnerability analyses, risk assessment, and cost-effective countermeasure planning and implementation. Its results include improved understanding of:
1) the specific items deemed critical to the mission
2) indicators of that information
3) countermeasures that protect this information from the adversary, and
4) an analytical basis for these decisions, if the process is applied properly.
OPSEC differs from traditional security because it is based on analysis from an adversary’s perspective, “What does the adversary need?”
While modern OPSEC originates from military operations, we can also apply the discipline to protect critical economic, technological, and business proprietary information from adversaries who seek to exploit such information to their benefit. The process is applicable to government, supporting industry, public sector essential services, and private sector activities. On a personal level, it also supports privacy, asset protection, and safety.
Page Last Updated On March 20, 2008