Operations Security by Atiqah Ibrahim https://padlet.com/atiqah0086/opsec All About OS en-us 2018-10-15 05:09:46 UTC 2018-10-15 17:01:28 UTC hello@padlet.com 1) What is Operations Security? cynlxy https://padlet.com/atiqah0086/opsec/wish/292661183

-Process  that identifies critical information to determine if friendly actions can be observed by enemy intelligence/ 
 Process of protecting individual pieces of data that could be grouped together to give the bigger picture (called aggregation) 

-Determines if information obtained by adversaries could be interpreted to be useful to them, and then executes selected measures that eliminate/reduce adversary exploitation of friendly critical information
]]> 2018-10-15 05:14:24 UTC https://padlet.com/atiqah0086/opsec/wish/292661183 2) What are some topics under Operations Security? atiqah0086 https://padlet.com/atiqah0086/opsec/wish/292661217 The Five Steps of the OPSEC Iterative Process
1.  Identification of Critical information 
2.  Analysis of Threats - 
3.  Analysis of Vulnerabilities
4.  Assessment of Risk 
5.  Application of Appropriate OPSEC Measures

]]> 2018-10-15 05:14:43 UTC https://padlet.com/atiqah0086/opsec/wish/292661217 3) What is an example to show Operations Security at work in an organisation? deelia103 https://padlet.com/atiqah0086/opsec/wish/292661339
  • Architecture (or algorithm) set in place: This is the formal specification. In cryptography it is the algorithm itself, in the case of MPLS VPNs, it is the formal specification (as defined in RFC4364).
  • Implementation of the architecture or algorithm: Refers to how the architecture or algorithm is actually being implemented. Programming mistakes, such as buffer overflows, can affect this component.
  • Operation thereof: This includes operator issues, such as choosing weak passwords on routers or workstations, or accidental disclosure of a shared key. For example, configurations could be sent to untrusted third parties. 
1.  Operational security policy
2.  Change management process
3.  Access control
4. Authorization
5.  Dual control
6.  Secure and verify
7.   Automation
]]> 2018-10-15 05:15:41 UTC https://padlet.com/atiqah0086/opsec/wish/292661339