CISSP-ISSMP: Information Systems Security Management Professional

The three laws of OPSEC establish that understanding the threat identifies what requires protection, identifying what requires protection enables confirmation that it is protected, and failure to protect critical and sensitive information lets the adversary win.