Comments for The Revelator http://whatisopsec.com "That's Not OPSEC" Sat, 22 Nov 2008 04:54:04 +0000 http://wordpress.org/?v=2.2.1 Comment on Me & Mrs. Jones by Revelator http://whatisopsec.com/2008/10/28/me-mrs-jones/#comment-1404 Revelator Wed, 29 Oct 2008 21:59:19 +0000 http://whatisopsec.com/2008/10/28/me-mrs-jones/#comment-1404 You're an angel Karen. Keep spreading the Gospel of OPSEC! Revelator. You’re an angel Karen. Keep spreading the Gospel of OPSEC!
Revelator.

]]> Comment on Me & Mrs. Jones by Karen Brown http://whatisopsec.com/2008/10/28/me-mrs-jones/#comment-1384 Karen Brown Wed, 29 Oct 2008 16:29:47 +0000 http://whatisopsec.com/2008/10/28/me-mrs-jones/#comment-1384 That was excellent! I'm posting copies in our Break Rooms. It shines an entertaining light on OPSEC! That was excellent! I’m posting copies in our Break Rooms. It shines an entertaining light on OPSEC!

]]> Comment on Won’t Get Fooled Again by Revelator http://whatisopsec.com/2008/10/17/wont-get-fooled-again/#comment-816 Revelator Tue, 21 Oct 2008 14:20:08 +0000 http://whatisopsec.com/2008/10/17/wont-get-fooled-again/#comment-816 Thanks Numlock. Keep fighting the good fight brother! Thanks Numlock. Keep fighting the good fight brother!

]]> Comment on Won’t Get Fooled Again by Frank Koza http://whatisopsec.com/2008/10/17/wont-get-fooled-again/#comment-814 Frank Koza Tue, 21 Oct 2008 13:57:54 +0000 http://whatisopsec.com/2008/10/17/wont-get-fooled-again/#comment-814 Yay!!! Great post. You finally hit the nail on the head, Rainman. :) I keep having folks tell me that leadership doesn't 'get it' about the importance of OPSEC and that they have no support or advocacy. I just tell them that we do a horrible job of teaching people how to properly qualitatively and quantitatively assess risk and how to do a cost/benefit analysis on measures. When you give your bosses crap, then expect crap back. Now if ye can just convince them that it's more than just protecting against communications intercept, open source, and social engineering. Yay!!! Great post. You finally hit the nail on the head, Rainman. :)

I keep having folks tell me that leadership doesn’t ‘get it’ about the importance of OPSEC and that they have no support or advocacy. I just tell them that we do a horrible job of teaching people how to properly qualitatively and quantitatively assess risk and how to do a cost/benefit analysis on measures. When you give your bosses crap, then expect crap back.

Now if ye can just convince them that it’s more than just protecting against communications intercept, open source, and social engineering.

]]> Comment on I Wanna Be Sedated by Revelator http://whatisopsec.com/2008/10/06/i-wanna-be-sedated/#comment-734 Revelator Thu, 09 Oct 2008 17:42:17 +0000 http://whatisopsec.com/2008/10/06/i-wanna-be-sedated/#comment-734 Thanks for the kind words John. Of course you can use anything you find here - and please accept my thanks for spreading the Gospel of OPSEC. Revelator. Thanks for the kind words John. Of course you can use anything you find here - and please accept my thanks for spreading the Gospel of OPSEC. Revelator.

]]> Comment on I Wanna Be Sedated by John Waller http://whatisopsec.com/2008/10/06/i-wanna-be-sedated/#comment-733 John Waller Thu, 09 Oct 2008 17:13:07 +0000 http://whatisopsec.com/2008/10/06/i-wanna-be-sedated/#comment-733 Sir: I really thought your "Anvils Awards" were excellent and creative and true. I will be teaching a Physical Security class at the Centers for Disease Control (CDC) in a few weeks and I wonder if you would let me use those in my classes (with attribution of course). In return, I will steer my students to your blog as an excellent source of OPSEC information.......John Waller Sir: I really thought your “Anvils Awards” were excellent and creative and true. I will be teaching a Physical Security class at the Centers for Disease Control (CDC) in a few weeks and I wonder if you would let me use those in my classes (with attribution of course). In return, I will steer my students to your blog as an excellent source of OPSEC information…….John Waller

]]> Comment on You Ain’t Seen Nothing Yet by Revelator http://whatisopsec.com/2008/08/01/you-aint-seen-nothing-yet/#comment-423 Revelator Fri, 22 Aug 2008 16:58:21 +0000 http://whatisopsec.com/2008/08/01/you-aint-seen-nothing-yet/#comment-423 There are many ways to handle that based on the significance of the compromise but I think the most important thing is that you know...that you are aware of the compromise and can now deal with the assumption that your adversary has this information. There are many ways to handle that based on the significance of the compromise but I think the most important thing is that you know…that you are aware of the compromise and can now deal with the assumption that your adversary has this information.

]]> Comment on You Ain’t Seen Nothing Yet by bigbeebopper http://whatisopsec.com/2008/08/01/you-aint-seen-nothing-yet/#comment-416 bigbeebopper Thu, 21 Aug 2008 04:57:44 +0000 http://whatisopsec.com/2008/08/01/you-aint-seen-nothing-yet/#comment-416 So then what do you do if there's already been a compromise?? So then what do you do if there’s already been a compromise??

]]> Comment on You Ain’t Seen Nothing Yet by Chris Cox http://whatisopsec.com/2008/08/01/you-aint-seen-nothing-yet/#comment-396 Chris Cox Tue, 05 Aug 2008 21:37:50 +0000 http://whatisopsec.com/2008/08/01/you-aint-seen-nothing-yet/#comment-396 Great point, Revelator. You're absolutely right, and it's clear that an OPSEC program is most effective (some would say ONLY effective!) when all of the entities are aware of it and understand how it applies to them. Great point, Revelator. You’re absolutely right, and it’s clear that an OPSEC program is most effective (some would say ONLY effective!) when all of the entities are aware of it and understand how it applies to them.

]]> Comment on You Ain’t Seen Nothing Yet by Revelator http://whatisopsec.com/2008/08/01/you-aint-seen-nothing-yet/#comment-395 Revelator Tue, 05 Aug 2008 19:35:00 +0000 http://whatisopsec.com/2008/08/01/you-aint-seen-nothing-yet/#comment-395 I don't ask for management support right off the bat. I get with the webmaster or senior IT person to discuss how OPSEC can support network security. Once I've concvinced them that this is actually possible then we can find ways to mutually support each other. If we get to this point then we hit up leadership as a united front and increase our success rate (for whatever it is we want) exponentially. I realize there are 1,001 different scenarios for this and I've just touched on one. If you'll go to the OPSEC Professionals Association web site you can ask any question you want to their bank of Subject Matter Experts. In this way you can be very specific and get back a very specific answer that should help you immediately. Revalator I don’t ask for management support right off the bat. I get with the webmaster or senior IT person to discuss how OPSEC can support network security. Once I’ve concvinced them that this is actually possible then we can find ways to mutually support each other. If we get to this point then we hit up leadership as a united front and increase our success rate (for whatever it is we want) exponentially. I realize there are 1,001 different scenarios for this and I’ve just touched on one. If you’ll go to the OPSEC Professionals Association web site you can ask any question you want to their bank of Subject Matter Experts. In this way you can be very specific and get back a very specific answer that should help you immediately.
Revalator

]]>