(U) NGAI52004_rev1_Instruction_for_Operations_Security_OPSEC.pdf
PDF 16 KB Posted
- Solicitation number
- HM047625R0016_Bidder_Library
About this file
This document is an NGA Instruction for Operations Security (OPSEC), a policy directive establishing procedures for protecting sensitive, unclassified critical information within the National Geospatial-Intelligence Agency.
The instruction applies to all NGA personnel, organizations, and activities and establishes a comprehensive OPSEC program designed to protect unclassified activities and information that could reveal NGA technological capabilities and intentions to adversaries. The Security and Installations Operations Directorate (SI), specifically the Security Office (SIS), manages the overall program and designates an OPSEC program manager located in the Information Security Staff Division (SISQ) to develop, implement, and ensure compliance with referenced guidance. The SI's Counterintelligence Office (SIC) provides threat analysis support by researching intelligence, counterintelligence, and open source information. Each Directorate and Office must designate an OPSEC officer and alternate and integrate the OPSEC process into planning and implementation of all activities, including systems acquisition.
The OPSEC process consists of five sequential steps: identifying sensitive, unclassified critical information observable and analyzable by adversaries; analyzing current threats; analyzing vulnerabilities to identify OPSEC indicators; assessing risk and identifying countermeasures; and implementing relevant countermeasures while monitoring adversarial activity. Organization OPSEC officers, project managers, site security officers, and assistant security officers manage the OPSEC effort by identifying critical information elements, assessing threats and vulnerabilities with SIC assistance, assessing risks with OPSEC coordinator support, identifying OPSEC indicators, and initiating appropriate measures based on acceptable risk levels. The OPSEC manager ensures mandatory annual awareness training for all NGA workforce members, initial orientation training for new employees, and specialized training for Directorate and Office OPSEC officers covering OPSEC Fundamentals, Officer's Orientation, and Analysis courses. Program evaluation occurs through assessments, surveys, random inspections, and workforce pop quizzes. Directorates and Offices must submit annual OPSEC activity reports to the OPSEC manager, with an annual program review and validation due September 30 to the Director of NGA and the USD(I).
View the file
Other files
Show 40 more
Latest 50 of 80 listed here. See the rest on GovTribe.
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
UNCLASSIFIED
NI 5200.4R1
Subgroup: Security Approved: 10 November 2008
NGA Instruction for Operations Security (OPSEC)
1. References.
a. Primary. NGA PD 5200R2, Operational Security, 24 November 2003.
b. Secondary.
(1) DoD Directive 5205.02, DoD Operations Security (OPSEC) Program, 6 March 2006.
(2) JCS Joint Publication 3-13.3, Joint Doctrine for Operations Security, 29 June 2006.
2. Purpose. Establish policies and procedures for an operations security (OPSEC) program that protects sensitive, but unclassified, critical information.
3. Policy. NGA will use OPSEC to maintain essential protection of unclassified activities and information that can be observed and analyzed by adversaries to reveal NGA technological capabilities and intentions.
4. Applicability and Scope. This instruction applies to all NGA personnel, organizations, and activities.
5. Definitions. Terms are defined in the secondary references.
6. Responsibilities.
a. The Security and Installations Operations Directorate (SI), Security Office
(SIS)
(1) Manages the OPSEC program including written designation of an OPSEC program manager.
(2) Supports the OPSEC program including training, surveys, and incorporation of OPSEC for all Agency initiatives.
b. The OPSEC manager located in the SIS, Information Security Staff Division
(SISQ).
(1) Develops and implements the OPSEC program.
(2) Ensures the OPSEC program complies with referenced guidance.
(3) Supports the OPSEC programs of other DNI/DoD Components.
Operations Security (OPSEC)
c. SI, Counterintelligence Office (SIC) researches and analyzes intelligence, counterintelligence, and open source information in order to provide current threat information.
d. Directorates and Offices.
(1) Designate an organization OPSEC officer and alternate for OPSEC responsibilities.
(2) Integrate the OPSEC process into planning and implementation of all activities including systems acquisition.
7. Procedures.
a. The OPSEC process includes five steps which are further detailed in JCS Joint Publication 3-13.3 (reference 1.b.(2)).
(1) Identify sensitive, but unclassified, critical information that can be observed and analyzed by adversaries to reveal U.S. military, political, commercial, diplomatic or technological capabilities and intentions.
(2) Analyze current threats based on analysis of intelligence, counterintelligence, and open source information.
(3) Analyze vulnerabilities to identify OPSEC indicators that could reveal critical information to an adversary.
(4) Assess risk of each vulnerability, identify possible OPSEC countermeasures, and determine the impact of the implementation of each countermeasure to projects and activities. D/NGA, or his designee, selects specific OPSEC measures based upon the risk assessment.
(5) Implement relevant OPSEC countermeasures and monitor changes in adversarial activity.
b. Designated organization OPSEC officers, project managers, site security officers (SSOs) and assistant SSOs manage the OPSEC effort within their organizations and apply the OPSEC process to their projects and activities by
(1) Identifying critical elements of information for projects and activities.
(2) Assessing adversarial threats and vulnerabilities to projects, with the assistance of SIC.
(3) Assessing the risks to projects, with the assistance of OPSEC coordinators.
Operations Security (OPSEC)
(4) Identifying OPSEC indicators for projects.
(5) Initiating OPSEC measures or determining if the risk factor is at a level acceptable to continue current operational procedures.
c. Training. The OPSEC manager ensures and documents OPSEC training.
(1) Annual awareness training is mandatory for the NGA workforce.
(2) Initial orientation training is required at entry-on-duty and provides
(a) Essential elements of OPSEC fundamentals.
(b) A basis for more specialized training.
(3) Training for the Directorate and Office OPSEC officers includes
(a) OPSEC Fundamentals Course
(b) OPSEC Officer’s Orientation
(c) OPSEC Analysis Course
d. OPSEC program evaluation. The OPSEC manager, in coordination with organization OPSEC officers, project managers, SIC personnel, SSOs, assistant SSOs, and other subject matter experts, evaluates OPSEC programs by using assessments, and surveys. The OPSEC manager also conducts random inspections and gives OPSEC pop quizzes to the workforce.
e. Reporting requirements.
(1) Directorates and Offices submit an annual OPSEC activity report to the OPSEC manager.
(2) An annual review and validation of the NGA OPSEC program, due 30 September, is coordinated through D/NGA to USD(I).
NGA Instruction for Operations Security (OPSEC)
File details come from the government source that posted it. Updated .