Which of the following statements is related with the first law of OPSEC?

Question

Options

• AIf you are not protecting it (the critical and sensitive information), the adversary wins!
• BIf you don't know what to protect, how do you know you are protecting it?
• CIf you don't know about your security resources you could not protect your network.
• DIf you don't know the threat, how do you know what to protect?

• A
  2% (1)
• B
  6% (3)
• C
  2% (1)
• D
  91% (49)

Explanation

OPSEC (Operations Security) is governed by a set of laws that guide how organizations protect sensitive information. The first law of OPSEC is: 'If you don't know the threat, how do you know what to protect?' This establishes that threat identification is the prerequisite to all protective action - you cannot define what needs protection without first understanding who might target it and why. The second law ('If you don't know what to protect, how do you know you are protecting it?') follows logically once the threat is known. The third law ('If you are not protecting it, the adversary wins!') closes the loop. Option C is not a recognized OPSEC law. The sequence - know the threat, identify what to protect, then actually protect it - is the foundational OPSEC logic.

No community discussion yet for this question.