QuestionQ18

Enterprise Environment Incident Response

Which of the following are referred to as the three laws of OPSEC?

Each correct answer represents part of the solution.

Choose three
  • A If you are not protecting it (the critical and sensitive information), the adversary wins!
  • B If you don't know the threat, how do you know what to protect?
  • C If you don't know what to protect, how do you know you are protecting it?
  • D If you don't know about your security resources you cannot protect your network.
Explanation

The three laws of OPSEC emphasize understanding the threat in order to know what needs protection, knowing what must be protected in order to verify it is protected, and preventing an adversary from gaining unprotected critical or sensitive information.

Community Discussion

No comments yet. Be the first to start the discussion!