opsec for ombudsmen
DESCRIPTION
A short presentation on OPSEC as it relates to common questions received from OMBUDSMEN and other family support organizations.TRANSCRIPT
Naval OPSEC Support TeamNavy Information Operations Command, [email protected]
Ombudsman Hot Topic: Social Media Trends
Naval OPSEC Support Team
OPSEC. Because you are not a Navajo code talker, and you’re really not fooling anyone.
OPSEC Best Practice
Operations Security is a 5-step process that:1. Identifies Critical Information2. Identifies credible threats3. Assess vulnerabilities4. Assess risks associated with vulnerabilities5. Develop countermeasures
Naval OPSEC Support Team
Bumper stickers. Because every random stranger driving near you should know exactly how many children you have and where they go to school.
OPSEC Best Practice
• Look at your daily activities from the enemies’ point of view.• Understand what an enemy might learn about you and your
family from the information and details that you make available.
• Assess the level of risk that this places on you and your family.• Develop and apply counter measures, which help to prevent
the enemy from obtaining your critical information and using it against you.
Naval OPSEC Support Team
Most people don’t know this, but you don’t need to post, tweet, blog, chat, pin, upload, whisper, snap chat, text, email, Skype, or facetime every time you go to the gym.
OPSEC Best Practice
What you really learn from Facebook pages and profiles:• Average income• Security clearance level• Family makeup• Current psychological state• Current location and contact information• Ships roster• Sensitive deployment dates and locations• Relative readiness condition
Naval OPSEC Support Team
“Well here is your problem!Privacy never includes the internet.”
OPSEC Best Practice
• Your security settings are only as good as your most public friend
• One persons private tweet is another persons public post• Security settings are often underutilized and easy to bypass
Who needs your home address when I have access to your Instagram?
Naval OPSEC Support Team
OPSEC Best Practice
• Understand your technology• Always consider how else this information can be used
Naval OPSEC Support Team
The smarter the phone the greater the risk.
OPSEC Best Practice
• Anti virus?• Password protected• Malware: there’s an app for that• Convenience vs. vulnerability
Naval OPSEC Support Team
SnapChat. Because anything that needs to be deleted after 15 seconds is never a bad idea.
OPSEC Best Practice
• If it sounds too good to be true, it is. Every single time. • Don’t trust third party applications with personal, private or
critical information• There is no such thing as private online• Consider how your content can be used against you• There is no true delete function on the internet
Naval OPSEC Support Team
If you have to ask “can I post…”, the answer is always no.
OPSEC Best Practice
• Never share anything you would not tell directly to the enemy• Never post private or personal information• Assume any information you share will be made public
Naval OPSEC Support Team
Loose lips still sink ships… And rob homes, compromise personal information and drain bank accounts.
OPSEC Best PracticeKnowledge is power …. for both you and the adversary• Understand the value of your information• Be suspicious of unsolicited phone calls, online requests, or
emails• Be suspicious when information about you and your family is
requested• Always ask yourself, do they have the “need to know”• Share the OPSEC message with friends and extended family
members
Naval OPSEC Support TeamNavy Information Operations Command, [email protected] Hot Topic- Social Media Trends
Questions?www.facebook.com/navalOPSEC
www.twitter.com/navalOPSECwww.slideshare.net/navalOPSEC
www.youtube.com/USNopsec