The Five Steps Of Operations Security Information Technology Essay

Operations security is sensitive information which provides protection for sensitive information. It provides essential secrecy for the required files and it is used to develop an effective operations security program the threat information that used by the OPSEC program will help in developing protection and it was developed as an unclassified document and allow the possible circulation of threat data within organizations that may be targeted by intelligence collection activities and by implementing effective program prevents the inadvertent compromise of sensitive information. The operation security program to be effective and the personal information must be aware of OPSEC concerns and implement OPSEC countermeasures when appropriate collection of activities are directed at their organization and this is only possible if the members of the organization understand the range of threats affecting their organization and actively support the OPSEC program.

It is used to deny sensitive information and they also have capabilities by identifying, controlling and protecting indicators. It is a process that identifies critical information to determine and the actions can be observed by adversary intelligence systems and they determines if information obtained by adversaries could be interpreted to be useful to them and slowly then executes selected measures that eliminate or reduce adversary exploitation of friendly critical information. The more information is a business organization the more protection is to be done and they are maintained securely in the system. When coming to certain organization they try to use encryption method to provide security.

Why operation Security:

By identifying, protecting and controlling give evidence for planning and the unclassified information that gives evidence for the sensitive activities. It is applicable to the R&D military facility and they even try to administrate the files. Operation security is our traditional security programs that are working just fine and it is the last time when someone went to will leave a document on the top of the door and it is unlocked and when is the last time someone got a opens the unlocked door then that stuff only happens to those other units if the most part the traditional security programs are working just fine and these programs have finite requirements expressed in regulations and directives that concentrate on safeguarding classified information which they do it quite well and what happens to the unclassified information and actions .

Testing from the adversary’s point of view not only when deployed at all times and the protection is done through the back door method and is a scenario that illustrates the potentially damaging effects of unauthorized disclosure of unclassified information and the unit has been notified to deploy for a rotation to Bosnia in support of the U.S. peace operations there and has initiated preparations to the next paragraphs discuss the possible pitfalls for OPSEC failures regarding unclassified information.

Process and uses:

Identifying information needed by an adversary or a critical information needed which focuses the remainder of the OPSEC process on protecting vital information and rather than attempting to protect all classified or sensitive unclassified information and the research analysis of the intelligence, counter measures are used to identify the information for a planned operation.

It examining each aspect of the planned operation to identify the OPSEC indicators that could reveal critical information and then they even comparing those indicators with the adversary’s intelligence collection capabilities identified in the previous action which are to be used for planners analyze the vulnerabilities identified in the previous action and they even identify possible OPSEC measures for each vulnerability. Second, specific OPSEC measures are selected for execution based upon a risk assessment done by the commander and staff and the command implements the OPSEC measures selected in the assessment of risk and in the case of planned future operations and activities that includes the measures.

The five steps of operations security:

Identify Critical Information

Threat Analysis

Vulnerability Analysis

Assessment of Risks

Application of appropriate measures 

Identify Critical Information

It is the information has to be protected and for long time and that critical information does the adversary requirement with enough time to collect and then to analyze it to be determine to your operation and the critical information is to be shown identical and they are to be supported and they are deploy unit will be located and testing these answers to your Security Classification Guide if the information is classified and then you will have security programs to protect it and they help to protect the unclassified information and observable activities that indicate or disclose the entire critical information.

Threat Analysis:

It identify your threat and determine their collection of capabilities and request this information through your intelligence channels and most of the collection techniques in the HUMINT and the phone intercept was Signals Intelligence (SIGINT) and these press release is Open Source will let us assume that all of the unclassified information above was collected.

Vulnerability Analysis

 When we look at the analysis observable actions and indicators and the information is vulnerable to collection by your adversary and they determine what protective measures we can use to reduce this vulnerability and the most desirable protective measure provides the needed protection at the least cost to operational efficiency and they are three types of measures that you can apply to the auction to eliminate the indicator and the countermeasures  attack the adversary collection system with the help of using physical destruction and the counter analysis  provides a possible alternative for the intelligence analyst and they try to confuse the adversary analyst through deception and cover to at least one measure for every vulnerability.

Assessment of Risks:

 The purpose of assessment of risk is to identify the best OPSEC measures to use and only the commander can make this decision we need and must balance the operational failure against the cost of the measure and he must consider the impact of the measure to operational efficiency to which the risk to mission success does not implement the measure and the risk to mission success if the measures do not work.

Application of appropriate measures:

 The measures chosen by the commander will be applied to the ongoing activities and they are incorporated into future plans and the Operations plans in the orders and or an OPSEC plan will direct the measures of the soldiers and government contractors have to implement and the required measures are to be taken according to that and they require to the appropriate measure required to it and the application of the counter measure are been required and they are to be transferred from the one operation level to other and they are done vice versa.

Operation attacks of operating system:

An attack of operation is primarily an attack and the targeting the attacks are optional and it varies the system and some attacks and counter measures that reduce the impact on it. The main reason to be considered is social engineering.

Social Engineering:

It is a person to person attack where an individual is trying to do something improper such as provide improper and a third party to allow entering in to the secure facility. The primary counter measure to social engineering is counted measure that is better prepared to move and recognize a better engineering attacks and respond to that accordingly

Sabotage

 It is a action aimed at weakening to another entity through subversion and obstruction or destruction and in a workplace setting the sabotage is the conscious withdrawal of efficiency with generally directed at causing some change in one workplace conditions and one who engages in sabotage is a sabotage and they try to conceal their identities because of their consequences of their actions and considering an environmental pressure group might be happy to be identified to the act of sabotage and it would not want the individual identities as shown.

Theft and disappearance:

It is certain and effective attacks on operation they have portable media such as drivers etc. thousand are lost and stolen every month and it is considered in a bank premises if money and securities are lost due to dishonesty, disappearance, or destruction and coverage of those money and securities being transported by unknown messenger outside an and they are lost due to dishonesty, disappearance, or destruction. The coverage can be added through endorsement, including check fakeness and paymaster robbery broad form payroll robbery coverage inside the premises and forgery of warehouse receipts.

Extortion

It is demanding or obtaining property from one another through the use of the threats and this can include threats of physical harm or some form of each blackmail such as threats to cause harm to one’s reputation, livelihood, marriage and each is not usually a violent crime but if a person is forced to do so then it goes into involuntarily submitting to sexual acts in exchange for a person not filing a criminal complaint and saying information to the public to injuring the victim.