Attach. 2 - OPSEC Information.pdf

Operations Security Provisions within Fairchild AFB OPSEC

Level 0 and 1 Contracts

Operations Security (OPSEC) Requirements. Contract personnel will apply OPSEC to protect critical and/or sensitive information and operational indicators from disclosure. Contractor personnel will:

OPSEC Awareness Training. Within 30 days of commencing contract employment, and annually thereafter, study the provided OPSEC awareness training materials provided.

Contractor OPSEC training must be documented. Initial and annual OPSEC training credit may be satisfied through organizational training. Additionally, contractor personnel will:

Become familiar with the types of critical information and indicators which must be protected from disclosure.

Not photograph or video Fairchild AFB main base or remote locations without written approval from the 92d Air Refueling Wing Public Affairs office.

Avoid publishing critical information, operational indicators or other sensitive information via social media and other Internet-based capabilities.

OPSEC Measures. DoD Contractors must ensure their employees’ professional and personal conduct do not compromise the organization’s sensitive missions and related information.

Contract personnel will comply with provisions listed in Fairchild AFB Contractor OPSEC

Measures.

FA462023AQ226 Attachment 2: OPSEC Information Page 1 of 35

FAFB OPSEC 1

Fairchild AFB Contractor OPSEC Level 1 Measures

1. The Operations Security (OPSEC) program reduces potential vulnerabilities of Air Force missions to hostile intelligence collection by preventing exposure of sensitive information.

OPSEC applies to all activities that prepare, sustain, or employ forces during both peacetime and wartime operations.

2. As your organization is contracted to perform work in support of the Fairchild Air Force

Base mission, you are responsible to protect this information. Sensitive, or Critical Information, includes specific facts about U.S. Air Force operational intentions, capabilities or activities that are vitally needed by potential enemies to plan and act against US military mission accomplishment.

3. Contractor employees who visit Fairchild AFB or remote FAFB installations, or remotely monitor or maintain Fairchild AFB infrastructure will:

a. Within 30 days of reporting for duty become familiar with the following types of

Fairchild AFB Critical Information and Operational Indicators that must be protected from disclosure. These include details of the following information categories:

- Critical Information

Current and future operations / exercises

Vulnerabilities, degradation /outages of critical infrastructures or telecommunications

Personnel, acquisition and logistics information

Key personnel/VIP schedules and travel itineraries

Emergency response or contingency plans

Freedom of Information Act (FOIA) protected information

- Operational Indicators

Unit recall

Unplanned Strike Meetings / Mobility Processing

Abnormal Changes of Duty Schedules

Increased Security and/or Transport Activity

Unusual Working Hours

Unusual Increase in Aircraft Maintenance or Servicing

b. Protect this information from disclosure to people who are unauthorized to possess it.

These include other employees who are not part of the contracted work project, associates, family members and members of the news media.

c. Prevent disclosure of critical and sensitive information in any public domain to include but not limited to the Internet and other public forums. Avoid publishing photographs, blogs, tweets that describe or display sensitive operations. Examples include but are not limited to military formations and exercises, drills, emergency response procedures, and the protective measures of military facilities.

d. Destroy (burn, shred, etc.) critical and sensitive information that is no longer needed to prevent the inadvertent disclosure or reconstruction of this material.

e. Actively encourage others (including family members) to protect critical and sensitive information.

FA462023AQ226 Attachment 2: OPSEC Information Page 2 of 35

Fairchild AFB Contractor OPSEC Level 1 Measures – 2

NOTE. Contract employees who fail to protect critical information from unauthorized disclosure may be subject to adverse administrative, disciplinary or contractual action.

4. Contract employees will consider any attempt by unauthorized personnel to solicit critical information or sensitive information as a human intelligence (HUMINT) incident against the

U.S. Air Force. If you have been involved in, or have knowledge of, a possible HUMINT incident, please report all facts immediately to the local Air Force Office of Special

Investigations (AFOSI). If AFOSI is not readily available, report HUMINT incidents to the supported organization’s security manager, commander, or one of the other offices listed below:

Commercial DSN

Air Force Office of Special Investigation (509) 247-2591/2592 657-2591/2592

92 ARW OPSEC Signature Manager (509) 247-3012/5258 657-3012/5258

Fairchild Antiterrorism Office (509) 247-9498 657-9498

Fairchild Information Protection Office (509) 247-2144/2076 657-2144/2076

Fairchild Public Affairs Office (509) 247-5705 657-5705

FA462023AQ226 Attachment 2: OPSEC Information Page 3 of 35

What is OPSEC?

Operation Security (OPSEC) is a method to deny adversaries information about friendly intentions and capabilities, which they need to make effective and timely decisions. OPSEC prevents or lessens an adversary’s ability to use our sensitive information to disrupt friendly operations.

FACT: More than 80% of our adversaries’ intelligence needs come from unclassified sources.

In today’s world of global acquisition where so much information is available at a stroke of a key, unclassified information has taken on an entirely new importance. While the Internet provides the main avenue of information loss, our adversaries use others sources to collect on us. These include:

Social Engineering

Elicitation / Solicitation

Press Releases

Surveillance

Eavesdropping

Trash Analysis

Who’s the adversary? Our adversaries include but are not limited to:

Foreign Intelligence Services (FIS)

Hackers / Hacker Groups

Criminals

Terrorists

Anarchists

Disgruntled Insiders

What are they after? All military operations depend upon some form of secrecy, tactical or technological advantage for mission success! Avoid disclosing the following information:

Details of future Operations/Exercises

Defensive and Offensive Tactics

Unit strengths

Names/photographs/travel plans of VIPs

Present and future US capabilities

Supply Inventories

Locations of Critical Infrastructure

Training Deficiencies

OPSEC has never been more important than it is today and will be in the future. It is what helps us to protect and maintain the technological advantage we have.

What can I do?

There are many things that you could do to apply OPSEC in your everyday procedures:

Don’t post sensitive information, to include photos, to the Internet.

Shred Sensitive Unclassified paperwork, such as alert rosters, work orders or technical manuals.

Report suspicious activities on or near the installation to the Unit Security Manager.

Avoid wearing your security badge outside the installation.

Only share information with those who have a ‘need to know’ to accomplish our mission.

Don’t photograph exercises or operations without authorization.

FA462023AQ226 Attachment 2: OPSEC Information Page 4 of 35

Team Fairchild

Contractor Operations Security (OPSEC)

Awareness Training

92d Air Refueling Wing Plans OPSEC Signature Managers

(509) 247-3012 / (509) 247-5258

FA462023AQ226 Attachment 2: OPSEC Information Page 5 of 35

Operations Security (OPSEC) Purpose

OPSEC measures reduces adversary’s ability to collect and exploit Critical

Information and Operations Indicators

When lost, these details about friendly activities permit …

• Adversaries to prevent friendly mission accomplishment

• Adversaries to identify and exploit friendly vulnerabilities

• Increased risk to mission failure or loss of life

FA462023AQ226 Attachment 2: OPSEC Information Page 6 of 35

Critical Information Defined

Critical information (CI) comprise Specific Facts about Friendly …

• Activities

• Intentions

• Capabilities, or

• Limitations

• … that an adversary seeks in order to gain a military or technological advantage.

Most Critical Information is UNCLASSIFIED, yet Sensitive

FA462023AQ226 Attachment 2: OPSEC Information Page 7 of 35

Critical Information, when Revealed

Critical Information, when revealed to an Adversary may …

• Prevent or degrade mission accomplishment

• Cause loss of life

• Damage friendly resources

FA462023AQ226 Attachment 2: OPSEC Information Page 8 of 35

FAFB Critical Information List

Detailed Information on:

• Current and future operations / exercises

• Vulnerabilities, degradation /outages of critical infrastructures or telecommunications

• Personnel, acquisition and logistics information

• Key personnel/VIP schedules and travel itineraries

• Emergency response or contingency plans

• Freedom of Information Act (FOIA) protected information

FA462023AQ226 Attachment 2: OPSEC Information Page 9 of 35

Operations Indicators

Friendly detectable actions and open-source information that can be interpreted or pieced together by an adversary to derive Critical

Information

FA462023AQ226 Attachment 2: OPSEC Information Page 10 of 35

FAFB Operations Indicators List

Unit recall

Unplanned Strike Meetings / Mobility Processing

Abnormal Changes of Duty Schedules

Increased Security and/or Transport Activity

Unusual Working Hours

Unusual Increase in Aircraft Maintenance or Servicing

FA462023AQ226 Attachment 2: OPSEC Information Page 11 of 35

Expectations

USAF uses OPSEC to protect its Critical Information

OPSEC is Everyone’s Responsibility

Failure to use OPSEC can Result in:

• Serious injury or death to personnel

• Damage to weapons systems, equipment and facilities

• Loss of sensitive technologies

• Mission degradation or failure

FA462023AQ226 Attachment 2: OPSEC Information Page 12 of 35

Your OPSEC Responsibilities

DoD contractors will:

• Be familiar with Fairchild’s Critical Information and Operations Indicators and

Protect it from disclosure

Do Not publicly disseminate, or publish photographs displaying Critical

Information or Operations Indicators. Examples include:

• FAFB flight line activities

• Special or unusual aircraft

• FAFB deployment activities

• Unusual activities taking place

• FAFB security force dispositions or tactics

• Protective measures of military facilities

FA462023AQ226 Attachment 2: OPSEC Information Page 13 of 35

Do Not include Critical Information in:

• Social media postings

• Web log (blog) postings

• Unencrypted e-mail

• Letters, resumes, articles, books, collegiate papers

• Internet message board discussions

• Other forms of dissemination or documentation

FA462023AQ226 Attachment 2: OPSEC Information Page 14 of 35

Apply “Need-to-Know”

Do keep shop talk in the shop

• Before, during and after operations, exercises or deployments

Those without a need-to-know include:

• Family members

• Neighbors

• Reporters

• Foreign nationals

• Anyone who is NOT directly involved in your deployment, sensitive mission or exercise!

FA462023AQ226 Attachment 2: OPSEC Information Page 15 of 35

Report Suspicious Contacts

Consider attempts by unauthorized personnel to solicit Critical / Sensitive

Information as a Human Intelligence (HUMINT) gathering incident

• Contractor personnel involved in, or having knowledge of, a possible HUMINT incident will immediately report all facts immediately to the Air Force Office of

Special Affairs (AFOSI)

FA462023AQ226 Attachment 2: OPSEC Information Page 16 of 35

Don’t Give Your Critical Information to

These Guys!

FA462023AQ226 Attachment 2: OPSEC Information Page 17 of 35 and Data Mining!!!

Help Shut the Pie Hole!!!

Practice OPSEC

• OPSEC Signature Managers

(509) 247-3012 / 247-5258

• AFOSI

(509) 247-2591/ 247-2592

• Anti-terrorism Office

(509) 247-9498

FA462023AQ226 Attachment 2: OPSEC Information Page 18 of 35

What is OPSEC?

Operation Security (OPSEC) is a method to deny adversaries information about friendly intentions and capabilities, which they need to make effective and timely decisions. OPSEC prevents or lessens an adversary’s ability to use our sensitive information to disrupt friendly operations.

FACT: More than 80% of our adversaries’ intelligence needs come from unclassified sources.

In today’s world of global acquisition where so much information is available at a stroke of a key, unclassified information has taken on an entirely new importance. While the Internet provides the main avenue of information loss, our adversaries use others sources to collect on us. These include:

Social Engineering

Elicitation / Solicitation

Press Releases

Surveillance

Eavesdropping

Trash Analysis

Who’s the adversary? Our adversaries include but are not limited to:

Foreign Intelligence Services (FIS)

Hackers / Hacker Groups

Criminals

Terrorists

Anarchists

Disgruntled Insiders

What are they after? All military operations depend upon some form of secrecy, tactical or technological advantage for mission success! Avoid disclosing the following information:

Details of future Operations/Exercises

Defensive and Offensive Tactics

Unit strengths

Names/photographs/travel plans of VIPs

Present and future US capabilities

Supply Inventories

Locations of Critical Infrastructure

Training Deficiencies

OPSEC has never been more important than it is today and will be in the future. It is what helps us to protect and maintain the technological advantage we have.

What can I do?

There are many things that you could do to apply OPSEC in your everyday procedures:

Don’t post sensitive information, to include photos, to the Internet.

Shred Sensitive Unclassified paperwork, such as alert rosters, work orders or technical manuals.

Report suspicious activities on or near the installation to the Unit Security Manager.

Avoid wearing your security badge outside the installation.

Only share information with those who have a ‘need to know’ to accomplish our mission.

Don’t photograph exercises or operations without authorization.

FA462023AQ226 Attachment 2: OPSEC Information Page 19 of 35

FAFB OPSEC 1

Fairchild AFB Contractor OPSEC Level 1 Measures

1. The Operations Security (OPSEC) program reduces potential vulnerabilities of Air Force missions to hostile intelligence collection by preventing exposure of sensitive information.

OPSEC applies to all activities that prepare, sustain, or employ forces during both peacetime and wartime operations.

2. As your organization is contracted to perform work in support of the Fairchild Air Force

Base mission, you are responsible to protect this information. Sensitive, or Critical Information, includes specific facts about U.S. Air Force operational intentions, capabilities or activities that are vitally needed by potential enemies to plan and act against US military mission accomplishment.

3. Contractor employees who visit Fairchild AFB or remote FAFB installations, or remotely monitor or maintain Fairchild AFB infrastructure will:

a. Within 30 days of reporting for duty become familiar with the following types of

Fairchild AFB Critical Information and Operational Indicators that must be protected from disclosure. These include details of the following information categories:

- Critical Information

Current and future operations / exercises

Vulnerabilities, degradation /outages of critical infrastructures or telecommunications

Personnel, acquisition and logistics information

Key personnel/VIP schedules and travel itineraries

Emergency response or contingency plans

Freedom of Information Act (FOIA) protected information

- Operational Indicators

Unit recall

Unplanned Strike Meetings / Mobility Processing

Abnormal Changes of Duty Schedules

Increased Security and/or Transport Activity

Unusual Working Hours

Unusual Increase in Aircraft Maintenance or Servicing

b. Protect this information from disclosure to people who are unauthorized to possess it.

These include other employees who are not part of the contracted work project, associates, family members and members of the news media.

c. Prevent disclosure of critical and sensitive information in any public domain to include but not limited to the Internet and other public forums. Avoid publishing photographs, blogs, tweets that describe or display sensitive operations. Examples include but are not limited to military formations and exercises, drills, emergency response procedures, and the protective measures of military facilities.

d. Destroy (burn, shred, etc.) critical and sensitive information that is no longer needed to prevent the inadvertent disclosure or reconstruction of this material.

e. Actively encourage others (including family members) to protect critical and sensitive information.

FA462023AQ226 Attachment 2: OPSEC Information Page 20 of 35

Fairchild AFB Contractor OPSEC Level 1 Measures – 2

NOTE. Contract employees who fail to protect critical information from unauthorized disclosure may be subject to adverse administrative, disciplinary or contractual action.

4. Contract employees will consider any attempt by unauthorized personnel to solicit critical information or sensitive information as a human intelligence (HUMINT) incident against the

U.S. Air Force. If you have been involved in, or have knowledge of, a possible HUMINT incident, please report all facts immediately to the local Air Force Office of Special

Investigations (AFOSI). If AFOSI is not readily available, report HUMINT incidents to the supported organization’s security manager, commander, or one of the other offices listed below:

Commercial DSN

Air Force Office of Special Investigation (509) 247-2591/2592 657-2591/2592

92 ARW OPSEC Signature Manager (509) 247-3012/5258 657-3012/5258

Fairchild Antiterrorism Office (509) 247-9498 657-9498

Fairchild Information Protection Office (509) 247-2144/2076 657-2144/2076

Fairchild Public Affairs Office (509) 247-5705 657-5705

FA462023AQ226 Attachment 2: OPSEC Information Page 21 of 35

Team Fairchild

Contractor Operations Security (OPSEC)

Awareness Training

92d Air Refueling Wing Plans OPSEC Signature Managers

(509) 247-3012 / (509) 247-5258

FA462023AQ226 Attachment 2: OPSEC Information Page 22 of 35

Operations Security (OPSEC) Purpose

OPSEC measures reduces adversary’s ability to collect and exploit Critical

Information and Operations Indicators

When lost, these details about friendly activities permit …

• Adversaries to prevent friendly mission accomplishment

• Adversaries to identify and exploit friendly vulnerabilities

• Increased risk to mission failure or loss of life

FA462023AQ226 Attachment 2: OPSEC Information Page 23 of 35

Critical Information Defined

Critical information (CI) comprise Specific Facts about Friendly …

• Activities

• Intentions

• Capabilities, or

• Limitations

• … that an adversary seeks in order to gain a military or technological advantage.

Most Critical Information is UNCLASSIFIED, yet Sensitive

FA462023AQ226 Attachment 2: OPSEC Information Page 24 of 35

Critical Information, when Revealed

Critical Information, when revealed to an Adversary may …

• Prevent or degrade mission accomplishment

• Cause loss of life

• Damage friendly resources

FA462023AQ226 Attachment 2: OPSEC Information Page 25 of 35

FAFB Critical Information List

Detailed Information on:

• Current and future operations / exercises

• Vulnerabilities, degradation /outages of critical infrastructures or telecommunications

• Personnel, acquisition and logistics information

• Key personnel/VIP schedules and travel itineraries

• Emergency response or contingency plans

• Freedom of Information Act (FOIA) protected information

FA462023AQ226 Attachment 2: OPSEC Information Page 26 of 35

Operations Indicators

Friendly detectable actions and open-source information that can be interpreted or pieced together by an adversary to derive Critical

Information

FA462023AQ226 Attachment 2: OPSEC Information Page 27 of 35

FAFB Operations Indicators List

Unit recall

Unplanned Strike Meetings / Mobility Processing

Abnormal Changes of Duty Schedules

Increased Security and/or Transport Activity

Unusual Working Hours

Unusual Increase in Aircraft Maintenance or Servicing

FA462023AQ226 Attachment 2: OPSEC Information Page 28 of 35

Expectations

USAF uses OPSEC to protect its Critical Information

OPSEC is Everyone’s Responsibility

Failure to use OPSEC can Result in:

• Serious injury or death to personnel

• Damage to weapons systems, equipment and facilities

• Loss of sensitive technologies

• Mission degradation or failure

FA462023AQ226 Attachment 2: OPSEC Information Page 29 of 35

DoD contractors will:

• Be familiar with Fairchild’s Critical Information and Operations Indicators and

Protect it from disclosure

Do Not publicly disseminate, or publish photographs displaying Critical

Information or Operations Indicators. Examples include:

• FAFB flight line activities

• Special or unusual aircraft

• FAFB deployment activities

• Unusual activities taking place

• FAFB security force dispositions or tactics

• Protective measures of military facilities

FA462023AQ226 Attachment 2: OPSEC Information Page 30 of 35

Do Not include Critical Information in:

• Social media postings

• Web log (blog) postings

• Unencrypted e-mail

• Letters, resumes, articles, books, collegiate papers

• Internet message board discussions

• Other forms of dissemination or documentation

FA462023AQ226 Attachment 2: OPSEC Information Page 31 of 35

Apply “Need-to-Know”

Do keep shop talk in the shop

• Before, during and after operations, exercises or deployments

Those without a need-to-know include:

• Family members

• Neighbors

• Reporters

• Foreign nationals

• Anyone who is NOT directly involved in your deployment, sensitive mission or exercise!

FA462023AQ226 Attachment 2: OPSEC Information Page 32 of 35

Report Suspicious Contacts

Consider attempts by unauthorized personnel to solicit Critical / Sensitive

Information as a Human Intelligence (HUMINT) gathering incident

• Contractor personnel involved in, or having knowledge of, a possible HUMINT incident will immediately report all facts immediately to the Air Force Office of

Special Affairs (AFOSI)

FA462023AQ226 Attachment 2: OPSEC Information Page 33 of 35

Don’t Give Your Critical Information to

These Guys!

FA462023AQ226 Attachment 2: OPSEC Information Page 34 of 35 and Data Mining!!!

Help Shut the Pie Hole!!!

Practice OPSEC

• OPSEC Signature Managers

(509) 247-3012 / 247-5258

• AFOSI

(509) 247-2591/ 247-2592

• Anti-terrorism Office

(509) 247-9498

FA462023AQ226 Attachment 2: OPSEC Information Page 35 of 35