Naval OPSEC Support Team Navy Information Operations Command, Norfolk #Don’tDoThat: Social Media Trends

Naval OPSEC Support Team OPSEC. Because you are not a Navajo code talker, and you’re really not fooling anyone.

OPSEC Best Practice Operations Security is a 5-step process that: 1. Identifies Critical Information 2. Identifies credible threats 3. Assess vulnerabilities 4. Assess risks associated with vulnerabilities 5. Develop countermeasures

Naval OPSEC Support Team Bumper stickers. Because every random stranger driving near you should know exactly how many children you have and where they go to school.

OPSEC Best Practice Look at your daily activities from the adversaries point of view. Understand what an adversary might learn about you and your family from the information and details that you make available. Assess the level of risk that this places on you and your family. Develop and apply countermeasures, which help to prevent an adversary from obtaining your critical information and using it against you.

Naval OPSEC Support Team Most people don’t know this, but you don’t need to post, tweet, blog, chat, pin, upload, whisper, snap chat, text, , Skype, or FaceTime every time you go to the gym.

OPSEC Best Practice What you really learn from Facebook pages and profiles: Average income Security clearance level Family makeup Current psychological state; physical aliments Current location and contact information Command roster Sensitive deployment dates and locations Relative readiness condition- limitations and capabilities

Naval OPSEC Support Team “Well here is your problem! Privacy never includes the internet.”

OPSEC Best Practice Your security settings are only as good as your most public friend One persons private tweet is another persons public post Security settings are often underutilized and easy to bypass

Who needs your home address when I have access to your Instagram? Naval OPSEC Support Team

OPSEC Best Practice Understand your technology Always consider how else this information can be used

Naval OPSEC Support Team The smarter the phone the greater the risk.

OPSEC Best Practice Anti virus? Password protected Malware: there’s an app for that Convenience vs. vulnerability

Naval OPSEC Support Team SnapChat. Because anything that needs to be deleted after 15 seconds is never a bad idea.

OPSEC Best Practice If it sounds too good to be true, it is. Every single time. Don’t trust third party applications with personal, private or critical information There is no such thing as private online Consider how your content can be used against you There is no true delete function on the internet

Naval OPSEC Support Team If you have to ask “can I post…”, the answer is always no.

OPSEC Best Practice Never share anything you would not tell directly to the adversary Never post private or personal information Assume any information you share will be made public

Naval OPSEC Support Team Loose lips still sink ships… And rob homes, compromise personal information and drain bank accounts.

OPSEC Best Practice Knowledge is power …. for both you and the adversary Understand the value of your information Be suspicious of unsolicited phone calls, online requests, or s Be suspicious when information about you and your family is requested Always ask yourself, do they have the “need to know” Share the OPSEC message with friends and extended family members

Naval OPSEC Support Team Navy Information Operations Command, Norfolk #Don’tDoThat: Social Media Trends Questions?