Results for information security

Army Information Security Program

AR 380-5 governs how the Army classifies, marks, stores, transmits, and destroys classified information. It is the regulation behind end-of-day checks, safe custodian duties, and security incident reporting. Anyone holding a clearance or running a security container is accountable to it.

What is OPSEC, and what is critical information?

Operations security is the process of denying an adversary the unclassified indicators that, pieced together, would reveal friendly intentions, capabilities, or vulnerabilities. Critical information is the specific information about friendly plans and operations an adversary needs to act effectively against us. Most of what OPSEC protects is not classified.

What three conditions must be met before a person may be given access to classified information?

The person must hold an eligibility determination at or above the level of the information, must have a valid need to know it to do their job, and must have signed a classified information nondisclosure agreement, the SF 312. A clearance by itself is not authority to see everything at that level.

Under the Threat Awareness and Reporting Program, what are you required to report?

Any contact, behavior, or activity that suggests foreign intelligence collection, international terrorism, insider threat, or an attempt to obtain classified or sensitive information. Report it to your commander, security manager, or supporting counterintelligence office. The duty to report belongs to every Soldier, civilian, and contractor, regardless of clearance.

What are the five steps of the OPSEC process?

Identify critical information, analyze the threat, analyze vulnerabilities, assess risk, and apply OPSEC measures or countermeasures. The process is continuous, not a one-time check.

What are the three levels of classification and the damage standard for each?

Top Secret, where unauthorized disclosure could reasonably be expected to cause exceptionally grave damage to national security. Secret, where it could be expected to cause serious damage. Confidential, where it could be expected to cause damage.

What is a SALUTE report?

The standard format for reporting information about the enemy. Size, activity, location, unit or uniform, time, and equipment. Report it accurately and fast, and keep facts separate from your assessment.