230 likes | 510 Views
# Don’tDoThat : Social Media Trends. Naval OPSEC Support Team Navy Information Operations Command, Norfolk 757-417-7100 opsec@navy.mil. OPSEC. Because you are not a Navajo code talker, and you’re really not fooling anyone. Naval OPSEC Support Team. OPSEC Best Practice.
E N D
#Don’tDoThat: Social Media Trends Naval OPSEC Support Team Navy Information Operations Command, Norfolk 757-417-7100 opsec@navy.mil
OPSEC. Because you are not a Navajo code talker, and you’re really not fooling anyone. Naval OPSEC Support Team
OPSEC Best Practice Operations Security is a 5-step process that: 1. Identifies Critical Information 2. Identifies credible threats 3. Assess vulnerabilities 4. Assess risks associated with vulnerabilities 5. Develop countermeasures
Bumper stickers. Because every random stranger driving near you should know exactly how many children you have and where they go to school. Naval OPSEC Support Team
OPSEC Best Practice • Look at your daily activities from the adversaries point of view. • Understand what an adversary might learn about you and your family from the information and details that you make available. • Assess the level of risk that this places on you and your family. • Develop and apply countermeasures, which help to prevent an adversary from obtaining your critical information and using it against you.
Most people don’t know this, but you don’t need to post, tweet, blog, chat, pin, upload, whisper, snap chat, text, email, Skype, or FaceTimeevery time you go to the gym. Naval OPSEC Support Team
OPSEC Best Practice What you really learn from Facebook pages and profiles: • Average income • Security clearance level • Family makeup • Current psychological state; physical aliments • Current location and contact information • Command roster • Sensitive deployment dates and locations • Relative readiness condition- limitations and capabilities
“Well here is your problem! Privacy never includes the internet.” Naval OPSEC Support Team
OPSEC Best Practice • Your security settings are only as good as your most public friend • One persons private tweet is another persons public post • Security settings are often underutilized and easy to bypass
Who needs your home address when I have access to your Instagram? Naval OPSEC Support Team
OPSEC Best Practice • Understand your technology • Always consider how else this information can be used
The smarter the phone the greater the risk. Naval OPSEC Support Team
OPSEC Best Practice • Anti virus? • Password protected • Malware: there’s an app for that • Convenience vs. vulnerability
SnapChat. Because anything that needs to be deleted after 15 seconds is never a bad idea. Naval OPSEC Support Team
OPSEC Best Practice • If it sounds too good to be true, it is. Every single time. • Don’t trust third party applications with personal, private or critical information • There is no such thing as private online • Consider how your content can be used against you • There is no true delete function on the internet
If you have to ask “can I post…”, the answer is always no. Naval OPSEC Support Team
OPSEC Best Practice • Never share anything you would not tell directly to the adversary • Never post private or personal information • Assume any information you share will be made public
Loose lips still sink ships… And rob homes, compromise personal information and drain bank accounts. Naval OPSEC Support Team
OPSEC Best Practice Knowledge is power …. for both you and the adversary • Understand the value of your information • Be suspicious of unsolicited phone calls, online requests, or emails • Be suspicious when information about you and your family is requested • Always ask yourself, do they have the “need to know” • Share the OPSEC message with friends and extended family members
Questions? www.facebook.com/navalOPSEC www.twitter.com/navalOPSEC www.slideshare.net/navalOPSEC www.youtube.com/USNopsec Naval OPSEC Support Team Navy Information Operations Command, Norfolk 757-417-7100 opsec@navy.mil #Don’tDoThat: Social Media Trends