Attachment 4_OMD_AT L1_OPSEC Trifold.pdf

State OPSEC Program Manager / Antiterrorism Officer – MAJ Rocky Kumlin – 503 584 2838

OREGON MILITARY

DEPARTMENT

ANTITERRORISM BASICS

& OPSEC TRAINING

For contractors

Operations Security (OPSEC) is a critical component of the broader Oregon Military Department (OMD) system of security related programs that help to safeguard our personnel, facilities, equipment, information systems, and records.

OPSEC Defined: An analytic process by which an organization can deny potential adversaries information about capabilities and intentions by identifying, controlling, and protecting evidence of the planning and execution of sensitive activities and operations.

OPSEC is a process by which an organization identifies controls and protects critical information. Potential adversaries come in many forms; not all of them want to kill or destroy. It is the responsibility of everyone in the unit to be familiar with the Critical Information List (CIL) and comply with the unit’s OPSEC plan.

Practicing OPSEC means protecting information that is sensitive or critical; information that someone could use to:

Harm personnel or their families Disrupt missions, exercises, and daily activities Reduce overall unit readiness and effectiveness Profit at the expense of the government or individuals

Critical Information List (CIL):

Information important to the successful achievement of OMD objectives and missions, or which may be of use to an adversary of the

OMD.

1 - Privacy Act Information, alert rosters, and unit personnel directories 2 - Continental and overseas deployment locations, schedules, personnel, readiness, and logistics information (includes drill and all other training dates) 3 - Details on the pre-positioning of OMD materials, equipment, and personnel 4 - Strength and readiness of OMD personnel, facilities, and assets 5 - Observed/assessed vulnerabilities of any OMD facility 6 - Communication links, frequencies, passwords, and call signs 7 - Arms, Ammunition, and Explosives (AA&E), to include sensitive and high value items 8 - Security system types, access control procedures, and vulnerabilities 9 - Identification and location of devices capable of processing classified data and classified material storage

OMD OPSEC Measures:

1 - Follow unit/facility physical security plan 2 - Maximize use of secure communications;

“encrypt” e-mails with critical/sensitive information 3 - Use OMD/AKO for official e-mail; not personal accounts

4 - Use only official websites for posting official CI; review these sites for content regularly using the CIL 5 - Use the CIL to review documents prior to sending or posting them outside the organization; check unit bulletin boards 6 - Safeguard all documents with CI (especially PII); disseminate only to those with a “need-to-know” 7 - Label all documents with CI as FOUO 8 - Control trash and shred any documents with CI 9 - Limit “public” discussions involving CI 10 - OPSEC includes personal correspondence on social media sites 11 - Integrate and incorporate unit security programs into daily routines 12 - Ask for clarification if unsure; report OPSEC violations

Operations Security

State OPSEC Program Manager / Antiterrorism Officer – MAJ Rocky Kumlin – 503 584 2838

The purpose of this pamphlet is to increase your awareness of terrorism and improve your ability to apply protective measures. Terrorism is the calculated use of unlawful violence or threat of violence to incite fear; intended to coerce or to intimidate governments or societies in the pursuit of goals that are generally political, religious, or ideological.

Consider ways you might become a victim of a terrorist attack. Several factors to keep in mind include:

Location: Terrorists may target locations such as military facilities, public transportation centers, and mass population gathering areas.

Association: Terrorists may focus on personnel associated with the US Government, and individuals who appear to be high-ranking or important.

Opportunity: Terrorists look for "soft targets."

Maintain vigilance, practice good personal safety, and alert the proper authorities of suspicious behavior.

To attack you, terrorists generally must perceive you, your association, or your location as a target. Do not be an easy target!

Within the United States, several organizations and individuals use terrorist tactics to achieve their goals.

Other organizations provide direct and indirect assistance through fund-raising, recruiting, and training support. Homegrown terrorism is also a reality. Homegrown terrorists have employed various tactics such as rudimentary letter bombs, improvised explosive devices, small arms attacks, and truck bombs. Bioterrorism is also a concern in view of the anthrax attacks in 2001 using the US Postal Service.

Terrorists prepare and conduct attacks through predictable steps. In conducting surveillance, terrorists will attempt to blend in with the environment to avoid arousing suspicion. Through vigilance, you may be able to recognize preparations for an attack before it is executed. Be alert to unusual behavior that may indicate intelligence gathering, surveillance, collecting materials for attack, dry runs, and rehearsals.

For example:

Taking photos or videos of potential targets Writing notes or sketching details about a possible target Showing abnormal attention to details of routine activities and security measures People loitering in or coming back to the same general area without a recognizable legitimate reason

People that appear preoccupied with a specific building or area, to include taking pictures, making notes, or drawing sketches

Electronic audio and video devices in unusual places or that are not DOD property

Learn your environment and recognize suspicious behavior. Informed vigilance is fundamental to personal security. Even within the United States, you may observe activity leading up to a terrorist attack.

Surveillance may be conducted over a long period of time and employ various methods:

Stationary surveillance: a common method in which operatives observe from a fixed location.

• Operative try to blend in by doing ordinary tasks

• Operatives may seek to recruit support personnel with access to installations or residences Moving surveillance: conducted on foot or in vehicles, generally in teams.

• Vehicle surveillance may include one or more vehicles

• Generally uses two or more people, one driving while the others observe Technical surveillance: uses electronic means to record or gain access to security information.

• May use still and video cameras, including cell phones Casual questioning: used to elicit security information from approachable personnel.

• Operatives may portray themselves as non-threatening and friendly

• Operatives may use members of the opposite sex to gain access to facilities and collect information

US military facilities use a variety of protective measures to reduce vulnerability to terrorist attack.

These measures are organized in a system called Force Protection Conditions (FPCON). As the threat changes, Commanders change the FPCON to protect personnel.

FPCONs are organized in five levels with increasing measures of protection: NORMAL, ALPHA, BRAVO, CHARLIE, and DELTA. As the FPCON increases, you should expect delays at entrances, gate checks, more detailed inspections, gate closures, and increased guard presence. FPCON CHARLIE and DELTA are very restrictive and rarely used.

Normal operations will be reduced or suspended in these cases.

The success of installation security protocols and procedures depends on their consistent application.

This requires the discipline, attention, and cooperation of everyone. By being alert, you may see something that dedicated security personnel are not able to see, or you may see a problem that is not obvious to others.

• Be aware of the current Force Protection

Condition (FPCON) and comply with security and response protocols

• Understand the features of your installation's security system

• Recognize problems in non-malicious compromises in security and take steps to correct them

• Recognize potentially malicious threats to security and report them

• Know what to do in response to an incident Installation security is a team effort and everyone has a security responsibility. Most importantly, make security a part of your routine.

If you see something unusual, report it immediately to security officials for further investigation. Make a note of the individual's description and activities, the time of day, and equipment being used.

If you have questions/concerns, please see the Unit Representative, State Antiterrorism Officer or Program Manager 503-584-2838 / 2839.

ANTITERRORISM BASICS