| "The right response"
As an OPSEC Professional, you understand the "why" of OPSEC. You understand that it saves lives, jobs and livelihoods, and are most likely pretty passionate about the subject. Therefore, it's no surprise if you should take it seriously whenever someone violates OPSEC policy. The general rule of thumb for OPSEC violations is "Policies and Procedures = Good; Catapults = Bad". When obtaining management/leadership support for OPSEC programs, be sure to clearly define the roles and procedures, as well as the policy for OPSEC violations. Without clear cut responsibilies and consequences, the OPSEC program has no teeth. OPSEC is everyone's responsibility- even management and leadership. |