OPSEC is used to protect sensitive information; which of the following describes its purpose and gives examples of indicators it guards?

• A. OPSEC protects sensitive information by identifying critical information, analyzing threats, evaluating vulnerabilities, and applying countermeasures; examples: troop movement schedules, location and timing of critical facilities
• B. OPSEC is a training program for physical security measures at facilities
• C. OPSEC is only about cyber protection
• D. OPSEC focuses on public relations and media handling

Answer: (A)

OPSEC is about protecting sensitive information by managing what can be observed about operations. It starts with identifying the critical information—the data whose exposure could reveal capabilities or intentions. Then threats are analyzed to see who might observe or exploit it, and vulnerabilities are evaluated to find gaps where information could leak. Countermeasures are applied to close those gaps, reducing the chances that indicators could be noticed by an adversary.

Indicators are observable signs that could reveal that sensitive information is exposed, so OPSEC focuses on minimizing and masking those signs. Examples like troop movement schedules and the location and timing of critical facilities illustrate how seemingly small details can reveal important capabilities or plans if left unprotected.

This isn’t just a physical security training program, nor is it limited to cyber protection or to public relations concerns. It’s a holistic approach aimed at keeping critical information from reaching potential adversaries by controlling what is observable about operations.