OPSEC Process Five Steps
Identification of critical information โ Ans - - The information that an
adversary would need in order to degrade services, disrupt operations, and
impact the reputation of an organization.
What are the OPSEC five steps? โ Ans - 1. Identification
2. Analysis of threats
3. Analysis of vulnerabilities
4. Assessment of risks
5. Application of appropriate countermeasures
Identification of critical information (Step 1) โ Ans - The information
that an adversary would need in order to degrade services, disrupt operations,
and impact the reputation of an organization.
Examples for step 1 โ Ans - - Core network infrastructure
- Information security capability
- Business information
- Business critical applications
- Employee information
- Intellectual property
Business information โ Ans - Mergers and acquistion
Business critical applications โ Ans - - Manufacturing applications
- Enterprise resource management platforms
Employee information โ Ans - Identification of system administrators
Intellectual property โ Ans - - Planning documentation
- Schematics
- Blueprints
Analysis of threats (Step 2) โ Ans - Deals with identification the
adversaries, their intent, and their capability to use the information against an
organization. Once we identify the threats, we can study their Techniques,
