🔐The Operational Security (OPSEC) Framework

Been working on developing a framework for assessing and improving OPSEC.

This is what I've come up with.

Check out what each phase of the OPSEC Framework represents in the thread below.

Would love to hear feedback! 🙏

Security, privacy, crypto, web3 | Doing security stuff @coinbase since 2018

Objective

What are your objectives for improving your operational security?

Do you want to become fully anon?

Do you want to be harder to attack?

Clearly identify all of your objectives so that you know where you need to focus your security efforts.

Security

What is your approach to security of the items in step two?

Work through each item. Assess each component's security posture.

Is there data breach exposure? Are passwords unique? Is 2FA enabled?

This is where the bulk of OPSEC improvement happens.

Evaluation

This is where you assess the last three steps.

Have you tangibly achieved the OPSEC improvements you’ve identified in step one?

What potential gaps have you missed?

Revisit this phase often or as you discover new threats to your OPSEC objectives.

Continuity

This phase is important because you should have plans in place for recovering accounts in case of a catastrophe.

What if you die?

Will your family know how to recover important accounts, crypto wallets, files, etc.?

Ensure you have a continuity plan in place.

This is an initial attempt to simplify a concept that is often perceived as complex.

OPSEC does not have to be complex if you follow the right framework.

Let me know if you have any questions or comments.

Happy to further discuss!

Presence

What is your current online presence like?

List out all the connections to the objectives you’ve identified in step one.

Want to make yourself more resilient to financial fraud?

Think through all of your financial accounts and the credentials associated with them.