A3 OPSEC for Contractors.pdf

SOCIAL NETWORKING SITES (SNS), like Facebook® and Twitter®, connect people and information in spontaneous, interactive ways. While useful and fun, SNS can provide adversaries, such as terrorists, spies and criminals, with critical information (CI) needed to harm you or disrupt your mission. Practicing Operations Security (OPSEC) will help you to recognize your CI and protect it from an adversary. Here are a few safety tips to get you started.

Personal Information Settings and Privacy

Did you: Do you:

⎯ Keep sensitive, work-related information OFF ⎯ Carefully look for and set all your privacy your profile? and security options?

⎯ Keep your plans, schedules and location data ⎯ Determine both your profile and search to yourself? visibility?

⎯ Protect the names and information of ⎯ Sort “friends” into groups and networks, co-workers, friends, and family members? and set access permissions accordingly?

⎯ Tell friends to be careful when posting photos ⎯ Verify through other channels and information about you and your family? that a “friend” request was actually from your friend?

Posted Data ⎯ Add “untrusted” people to the group with the lowest permissions and Before posting, did you: accesses?

⎯ Check all photos for indicators in Security the background or reflective surfaces?

Remember to:

⎯ Check filenames and file tags for sensitive data (your name, organization or other details)? ⎯ Beware of links, downloads, and attachments just as you would in e-mails.

Passwords ⎯ Beware of “apps” or plug-ins, which are often written by unknown third parties

Are they: who might use them to access your data and friends.

⎯ Unique from your other online passwords? ⎯ Look for HTTPS and the lock icon that ⎯ Sufficiently hard to guess? indicate active transmission security ⎯ Adequately protected (not shared or given away)? before logging in or entering sensitive data (especially when using Wi-Fi hotspots).

THINK BEFORE YOU POST! Your information could become public at any time due to hacking, configuration errors, social engineering or the business practice of selling or sharing user data.

OPSEC

Safety Checklist

Critical information is specific facts about friendly intentions, capabilities, and activities vitally needed by adversaries for them to plan and act effectively to guarantee failure or unacceptable consequences for friendly mission accomplishment. The below Critical Information List (CIL) includes a broad range of UNCLASSIFIED information requiring protection.

a. GENERAL

(1) Privacy Act information (personal information such as social security numbers, etc)

(2) Recall rosters (home/cell phone numbers and addresses listings of unit personnel)

(3) Duty schedules (day-to-day and exercise work hours, crew rest status, etc)

(4) Dates of current/future operations and exercises (Temporary Duty, deployments, etc)

(5) Travel itineraries (specific flight information, dates/times, etc)

b. OPERATIONS

(1) Mission capabilities to include limitations and constraints

(2) Force size and capability

(3) Details of any ongoing or future exercise/operation

(4) Base Support arrangements (pre-deployment briefings, etc)

(5) Designation of participating units or personnel

c. LOGISTICS

(1) Fact and frequency of deployments

(2) Deployment locations

d. SECURITY

(1) Increased security measures (barrier placement, increased building security, etc)

(2) Personnel off-duty status (leave/vacation, crew rest, telephone stand-by, alert, etc)

OPSEC

131 BW OPSEC Progam Managers Maj Jon Arnold 660-687-2046 CMSgt Candace Moore 314-527-8818 MSgt Tim Reynolds 314-527-881