Naval OPSEC Support TeamNavy Information Operations Command, Norfolk757-417-7100opsec@navy.mil

#Don’tDoThat: Social Media Trends

Naval OPSEC Support Team

OPSEC. Because you are not a Navajo code talker, and you’re really not fooling anyone.

OPSEC Best Practice

Operations Security is a 5-step process that:1. Identifies Critical Information2. Identifies credible threats3. Assess vulnerabilities4. Assess risks associated with vulnerabilities5. Develop countermeasures

Naval OPSEC Support Team

Bumper stickers. Because every random stranger driving near you should know exactly how many children you have and where they go to school.

OPSEC Best Practice

• Look at your daily activities from the adversaries point of view.

• Understand what an adversary might learn about you and your family from the information and details that you make available.

• Assess the level of risk that this places on you and your family.• Develop and apply countermeasures, which help to prevent

an adversary from obtaining your critical information and using it against you.

Naval OPSEC Support Team

Most people don’t know this, but you don’t need to post, tweet, blog, chat, pin, upload, whisper, snap chat, text, email, Skype, or FaceTime every time you go to the gym.

OPSEC Best Practice

What you really learn from Facebook pages and profiles:• Average income• Security clearance level• Family makeup• Current psychological state; physical aliments • Current location and contact information• Command roster• Sensitive deployment dates and locations• Relative readiness condition- limitations and capabilities

Naval OPSEC Support Team

“Well here is your problem!Privacy never includes the internet.”

OPSEC Best Practice

• Your security settings are only as good as your most public friend

• One persons private tweet is another persons public post• Security settings are often underutilized and easy to bypass

Who needs your home address when I have access to your Instagram?

Naval OPSEC Support Team

OPSEC Best Practice

• Understand your technology• Always consider how else this information can be used

Naval OPSEC Support Team

The smarter the phone the greater the risk.

OPSEC Best Practice

• Anti virus?• Password protected• Malware: there’s an app for that• Convenience vs. vulnerability

Naval OPSEC Support Team

SnapChat. Because anything that needs to be deleted after 15 seconds is never a bad idea.

OPSEC Best Practice

• If it sounds too good to be true, it is. Every single time. • Don’t trust third party applications with personal, private or

critical information• There is no such thing as private online• Consider how your content can be used against you• There is no true delete function on the internet

Naval OPSEC Support Team

If you have to ask “can I post…”, the answer is always no.

OPSEC Best Practice

• Never share anything you would not tell directly to the adversary

• Never post private or personal information• Assume any information you share will be made public

Naval OPSEC Support Team

Loose lips still sink ships… And rob homes, compromise personal information and drain bank accounts.

OPSEC Best PracticeKnowledge is power …. for both you and the adversary• Understand the value of your information• Be suspicious of unsolicited phone calls, online requests, or

emails• Be suspicious when information about you and your family is

requested• Always ask yourself, do they have the “need to know”• Share the OPSEC message with friends and extended family

members

Naval OPSEC Support TeamNavy Information Operations Command, Norfolk757-417-7100opsec@navy.mil#Don’tDoThat: Social Media Trends

Questions?www.facebook.com/navalOPSEC

www.twitter.com/navalOPSECwww.slideshare.net/navalOPSEC

www.youtube.com/USNopsec