What is OPSEC?

• A. The system of policies, procedures, and requirements established to protect information
• B. The protective measures to deny unauthorized persons information from telecommunications
• C. A formal program that identifies and protects sensitive but unclassified information that ensures mission success
• D. A set of encryption standards

Answer: (C)

OPSEC is a formal program designed to identify and protect sensitive but unclassified information that could affect mission success. It starts by pinpointing what information, if exposed, could give adversaries actionable insights, then analyzes who might threaten it and where vulnerabilities exist, and finally applies practical countermeasures to reduce risk. This makes it distinct from general information protection policies, cryptography, or telecom-specific security. Encryption standards focus on safeguarding data in transit, while OPSEC targets the broader set of unclassified information that, if revealed, could compromise operations. The best answer captures the structured, mission-focused approach of identifying sensitive information and taking steps to protect it.