What is the definition of OPSEC?

• A. The practice of securing information through encryption and access controls
• B. The act of documenting all information within a mission area
• C. The process of denying information about friendly capabilities and intentions to the enemy
• D. Sharing operational details with allied partners to improve coordination

Answer: (C)

OPSEC is about protecting sensitive information by preventing adversaries from learning our capabilities and intentions. It involves identifying what information must be kept secret, examining how that information could be exposed through actions, appearances, or communications, and applying measures to reduce those exposures. Encryption and access controls are useful tools, but OPSEC is the broader practice of managing what we reveal and how we present indicators of our operations. It isn’t about indiscriminately documenting everything, which can create more risk, nor about sharing details freely with others; any sharing should be tightly controlled to avoid giving away what could compromise missions. In short, OPSEC aims to deny the enemy timely and accurate information about what we can do and what we plan to do.