Attachment 2 - Fairchild OPSEC Info.pdf

Operation Security (OPSEC) is a method to deny adversaries information about friendly intentions and capabilities, which they need to make effective and timely decisions. OPSEC prevents or lessens an adversary’s ability to use our sensitive information to disrupt friendly operations.

FACT: More than 80% of our adversaries’ intelligence needs come from unclassified sources.

In today’s world of global acquisition where so much information is available at a stroke of a key, unclassified information has taken on an entirely new importance. While the Internet provides the main avenue of information loss, our adversaries use others sources to collect on us. These include:

Social Engineering

Elicitation / Solicitation

Press Releases

Surveillance

Eavesdropping

Trash Analysis

Who’s the adversary? Our adversaries include but are not limited to:

Foreign Intelligence Services (FIS)

Hackers / Hacker Groups

Criminals

Terrorists

Anarchists

Disgruntled Insiders

What are they after? All military operations depend upon some form of secrecy, tactical or technological advantage for mission success! Avoid disclosing the following information:

Details of future Operations/Exercises

Defensive and Offensive Tactics

Unit strengths

Names/photographs/travel plans of VIPs

Present and future US capabilities

Supply Inventories

Locations of Critical Infrastructure

Training Deficiencies

OPSEC has never been more important than it is today and will be in the future. It is what helps us to protect and maintain the technological advantage we have.

What can I do?

There are many things that you could do to apply OPSEC in your everyday procedures:

Don’t post sensitive information, to include photos, to the Internet.

Shred Sensitive Unclassified paperwork, such as alert rosters, work orders or technical manuals.

Report suspicious activities on or near the installation to the Unit Security Manager.

Avoid wearing your security badge outside the installation.

Only share information with those who have a ‘need to know’ to accomplish our mission.

Don’t photograph exercises or operations without authorization.

FA462022RA202 Attachment 2

1. The Operations Security (OPSEC) program reduces potential vulnerabilities of Air Force missions to hostile intelligence collection by preventing exposure of sensitive information.

OPSEC applies to all activities that prepare, sustain, or employ forces during both peacetime and wartime operations.

2. As your organization is contracted to perform work in support of the Fairchild AFB mission, you are responsible to protect this information. Sensitive, or Critical Information includes specific facts about U.S. Air Force operational intentions, capabilities or activities that are vitally needed by potential enemies to plan and act against US military mission accomplishment.

3. Contractor employees who visit Fairchild AFB or remote FAFB installations will within 30 days of reporting for duty —

a. Become familiar with each item of the Fairchild AFB Critical Information List below:

- Current and future operations and/or exercises

- Vulnerabilities, degradation, outages of critical infrastructures / telecommunications

- Key personnel/VIP schedules and travel itineraries

- Personnel, acquisition and logistics information

- Emergency response or base defense plans

- Freedom of Information Act (FOIA) Information

- Perceived changes to, or details of, normal operating procedures

b. Protect the information from disclosure to unauthorized people. These include other employees that are not part of the contracted work project, associates, family members and members of the news media.

c. Prevent disclosure of critical and sensitive information in any public domain to include but not limited to the Internet and other public forums.

d. Avoid publishing photographs, blogs, tweets that describe or display sensitive operations.

Examples include but are not limited to military formations and exercises, drills, emergency response procedures, and the protective measures of military facilities.

e. Destroy (burn, shred, etc.) critical and sensitive information that is no longer needed to prevent the inadvertent disclosure or reconstruction of this material.

NOTE. Contract employees who fail to protect critical information from unauthorized disclosure may be subject to adverse administrative, disciplinary or contractual action.

4. Contract employees will consider attempts by unauthorized personnel to solicit critical information or sensitive information as a human intelligence (HUMINT) incident against the

U.S. Air Force. If you have been involved in, or have knowledge of, a possible HUMINT incident, please report all facts immediately to the Fairchild Office of Special Investigations

(AFOSI). If AFOSI is not readily available, report HUMINT incidents to the supported organization’s security manager, commander, or one of the other offices listed below:

Commercial DSN

Fairchild AFOSI (509) 247-2591/2592 657-2591/2592

Fairchild Antiterrorism Office (509) 247-9498 657-9498

92 ARW OPSEC Program Manager (509) 247-3012/5258 657-3012/5258

92d Air Refueling Wing

OPSEC Awareness Training

92d Air Refueling Wing Plans and Programs

247-3012

FOR OFFICIAL USE ONLY

Operations Security Definition

OPSEC is a Systematic and Proven Method of

• Identifying

• Controlling

• Protecting…

Generally UNCLASSIFIED Evidence of planning and execution of sensitive activities

Expectations

OPSEC is Everyone’s Responsibility

USAF uses OPSEC to protect its Critical Information

Failure to use OPSEC can Result in:

• Serious injury or death to personnel

• Damage to weapons systems, equipment and facilities

• Loss of sensitive technologies

• Mission degradation or failure

OPSEC

Your Responsibilities

DoD contractors will:

• Be familiar with the organization’s critical information and indicators

• Protect critical information and indicators from disclosure

Critical Information Defined

Critical information (CI) is a Specific Fact about

Friendly …

• Activities

• Intentions

• Capabilities, or

• Limitations

• … that an adversary seeks in order to gain a military or technological advantage.

Critical Information Defined

CI revealed to an Adversary may

• Prevent or degrade mission accomplishment

• Cause loss of life

• Damage friendly resources

92 ARW Critical Information List

Detailed Information on:

• Specific operations or exercises

• Locations/status of critical comm systems infrastructures

• Movement of key personnel/VIP schedules & travel itineraries

• Personnel, acquisition and logistics information

• Computer system logon ID’s and passwords

• Emergency response or contingency plans

• Privacy Act Information

Personal Critical Info

Personally Identifiable Information (PII)

• Home addresses, locations

• Home email, phone numbers

• Schedules / travel itineraries

• Areas frequented by family members

• Future plans or vacations

• Details about your family

• Social Security numbers

• Credit Card info

• Vehicle tag and registration

• Full birthdays

OPSEC Indicators

Friendly detectable actions and open-source information that can be interpreted or pieced together by an adversary to derive critical information

OPSEC Indicators

Abnormal Changes of Duty Schedules

Unplanned Mobility Processing

Unit recall

Unusual Working Hours

Staging Vehicles

Increased Security

Protect Critical Info and Indicators

Do not publicly disseminate, or publish photographs displaying critical information.

Examples include:

• FAFB flight line activities

• Special or unusual aircraft

• FAFB deployment activities

• Unusual activities taking place

• FAFB security force dispositions or tactics

• Protective measures of military facilities

Protect Critical Info and Indicators

Do not include Critical Information in:

• Social media postings

• Web log (blog) postings

• Unencrypted e-mail

• Letters, resumes, articles, books, collegiate papers

• Internet message board discussions

• other forms of dissemination or documentation

Apply “Need-to-Know”

Keep shop talk in the shop

• Before, during and after deployment

Those without a need-to-know include:

• Family members

• Neighbors

• Reporters

• Foreign nationals

• Anyone who is NOT directly involved in your deployment, sensitive mission or exercise!

Report Suspicious Contacts

Consider Attempts by Unauthorized Personnel to

Solicit Critical / Sensitive Information as Human

Intelligence (HUMINT) Gathering

• Consider it a HUMINT incident

• AF Personnel Involved in, or having Knowledge of, a possible HUMINT incident will immediately report all facts immediately to the AFOSI office

Don’t Give Your Critical

Information to These Guys!

Practice OPSEC Support Eagle Eyes

Mr. Herb Henderson

OPSEC Prgm Mgr, 247-3012

Mr. Kurt Tempel

Alt OPSEC Prgm Mgr, 247-5218

Ms. Melissa Johnson

Eagle Eyes Prgm Mgr, 247-9498

Questions???

and Surfing!!!

Help Shut the Pie Hole!!!

O

PE

RATIONS

S E C U R I T Y

OPERATIONS SECURITY

Your OPSEC Coordinators are:

PRIMARY:

ALTERNATE: