CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

Question

Which of the following are referred to as the three laws of OPSEC? Each correct answer represents part of the solution.

Choose three

A If you don't know the threat, how do you know what to protect?
B If you don't know what to protect, how do you know you are protecting it?
C If you are not protecting it (the critical and sensitive information), the adversary wins!
D If you don't know about your security resources you cannot protect your network.

Explanation

The three laws of OPSEC establish that understanding the threat identifies what requires protection, identifying what requires protection enables confirmation that it is protected, and failure to protect critical and sensitive information lets the adversary win.

CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

AstroTutor

Notes

Readiness

QuestionQ202

Community Discussion