Topic: OPSEC, Rumours and annoucements

[Mike Bobbitt]

All,

Just a friendly reminder that we need to be very careful in how we handle potentially sensitive information here. Unfortunately, we are visited from time to time by those who would wish to do harm to our forces, as they seek out information that may be useful to them.

In the past, DND has shut down websites to ensure sensitive information remains out of sight, and we have a responsibility here as well.

What can you do? If you think information may be sensitive, don't post it. You can always ask someone in the know if posting that type of information will cause a problem. You can also ask publicly, so long as it is in general terms. (For example, asking "Is it appropriate to post the location of Canadian ships?" is OK, asking "Can I post that I saw HMCS Ottawa docked at Halifax last week?" means you've just done so.)

If you see information that you believe is sensitive, please use the "report to moderator" button. That will bring it to our immediate attention and we can quickly review the post and take the appropriate action.

As a reminder, here are a couple of pertinent excerpts from the Army.ca Terms and Conditions:

Violate the applicable laws and principles relating to Operational Security, Communications Security and Personal Security as set out in the National Defence Act, the Security of Information Act and any other statute which, without limitation, deals with similar matters of information security.

and from the Conduct Guidelines:

You will not post sensitive or non-public information.

Both of these are mandatory reading for all Army.ca users, but a reminder is often helpful. Thanks for your cooperation.


Mike

[Michael O'Leary]

Ladies and Gentlemen,

With the recent deaths in Afghanistan it was necessary that the staff of army.ca take measures to mitigate the efforts of some to share casualty information before the official announcements by DND.  It was made clear on these means that no official announcement had been made, which was reflected by reports in reputable media sources, and reinforced that the same message was being passed on Army and Regimental nets.

Despite these measures, there remain some who feel that they should cross-post information from any outside source – whether that be personal contacts or media rumours – in order to be the first to post information on these boards.  That approach runs against the spirit of being supportive of the troops, and their families, at a time of great personal loss and grief.

In keeping with past practice, army.ca will do its best to respect the wishes of the families of the fallen.  In particular, this means that names of wounded or deceased members of the Canadian Forces will not be posted on these forums until after the official news release has been made by DND.

For those who watched recent developments in the media, they will note that errors were published – ranks, appointments – which shows how desperate some members of the media are to “scoop” their competitors without respect for families or facts.  I would urge you to think what the repercussions may have been if the errors, in this situation or another, had included names, perhaps leading other families to think their loved ones had been involved.  Such an error would be unforgivable, and so would any attempt to share such an unsubstantiated rumour.

There are countless threads on army.ca where the media has been lambasted for their accuracy and ethics.  If we allow a similar lack of respect in such situations, then our stance is weakened every time our members use similar tactics.

If we wish to declare ourselves in control of the moral high ground, we actually have to occupy it.

[Teddy Ruxpin]

There are no OPSEC issues on either site mentioned, which are designed to provide information to those deploying or considering deploying.  The managed readiness plan is unclassified and units deploying are widely known (indeed, an out of date version of the plan was developed as a poster, but I digress).  Essentially, one should steer away from discussing the following:

• Any immediate operational plans, including deployment plans, timings, prepositioning, convoy timings and structure, covert OP locations, and the usual "operational" stuff
• Movement timings, including deployment timings (the CF will generally release dates, though), chalk lists, chalk timings, aircraft tail numbers - especially US aircraft
• Details of some specific weapons systems - armour penetration by some rounds is a good example
• Any SF capabilities - names, numbers, training, equipment, deployments, conduct of operations
• Any issues surrounding force protection, including details of camp defences, search procedures, defence force structure, QRF readiness, etc.
• States of readiness and notices to move - except in specific instances
• Ammunition and POL holdings, particularly when expressed in days of supply.  This can include specific holding of supply items.
• Intelligence and intelligence capabilities, unless assigned a differing classification by the originator
• Rules of engagement, national caveats, etc.
• Reconnaissance and surveillance capabilities and systems
• Future operations that have not been announced by the Government of Canada and/or that are still in the planning stage.  People try and post this type of information here all the time.
• Developing TTPs that have been assigned a classification by the originating party.  Counter-IED and IED defeat tactics are a good example of things that should never appear here.
• Although unclassified, full unit ORBATs - including structures, weapons distribution and command and control - are not for public consumption
• Names and parent units of CF casualties before they have been publicly announced by Ottawa.

This is not all-inclusive and there are many others, but the above list should be a good place to start - none of the above should appear on this site.  Generally, real OPSEC breaches are jumped on right away here and the mods do a decent job of intervening.  Moreover, it is incumbent upon every serving member to hit the "report to moderator" button if they see suspect information being posted.

[MCG]

UNCLAS CANFORGEN 038/08 SJS 007 - OPERATIONAL SECURITY

REF: A-SJ-100-001, NATIONAL DEFENCE SECURITY INSTRUCTIONS (NDSI) -
30 SEP 98

1.  ACCESS TO INFORMATION REGARDING THE GOVERNMENT OF CANADA S
ACTIVITIES IS AN IMPORTANT PRINCIPLE IN THE DEMOCRATIC SOCIETY IN
WHICH WE LIVE AND IS A PRINCIPLE THAT THE CF SUPPORTS. HOWEVER,
THERE IS A HIGH LEVEL OF RISK INHERENT IN SOME OF OUR ONGOING
MILITARY OPERATIONS THAT MAKE IT IMPRACTICAL TO RELEASE ALL OF THE
INFORMATION AT A TIME THAT IS CONVENIENT FOR EVERYONE. THE NEED TO
SAFEGUARD OUR PLANS  VULNERABILITIES AND TO PROTECT OUR INTENT FROM
AN ADVERSARY IS A FUNDAMENTAL PART OF HOW WE CONDUCT MILITARY
OPERATIONS.  TRADITIONAL SECURITY MEASURES SUCH AS: PROTECTING VITAL
INTERESTS AGAINST THEFT, DIVERSION AND SABOTAGE, DENYING
UNAUTHORIZED PERSONS ACCESS TO VITAL INFORMATION ABOUT OUR OWN
CAPABILITIES AND INTENTIONS, AND ASSURING THE LOYALTY AND
RELIABILITY OF THOSE PERSONS WHO ARE AUTHORIZED TO HAVE ACCESS TO
CLASSIFIED OR OTHERWISE SENSITIVE ASSETS, CONTINUE TO BE AN
IMPORTANT ELEMENT OF OUR DAILY ROUTINE ACTIVITIES.  WHAT I WOULD
LIKE TO STRESS, HOWEVER, IS THE INCREASED PERSONAL AND COLLECTIVE
VIGILANCE WE MUST ADOPT AGAINST THE INADVERTENT RELEASE OF
INFORMATION, WHICH COULD BE EXPLOITED BY AN ADVERSARY

2.  CANADIAN OPERATIONS ARE TAKING PLACE IN A VARIETY OF
ENVIRONMENTS IN WHICH INFORMATION CAN BE READILY COLLECTED AND
SHARED WORLDWIDE, IN NEAR REAL TIME.  THE POTENTIAL SOURCES OF
INFORMATION FOR AN ADVERSARY INCLUDE THE FULL RANGE OF OPERATIONAL,
LOGISTICAL, ADMINISTRATIVE, FORCE DEVELOPMENT, AND PROCUREMENT
DOCUMENTS. THEY ALSO INCLUDE FORMAL OR INFORMAL BRIEFINGS, DND OR CF
WEBSITES, AND OFFICIAL OR UNOFFICIAL EMAIL EXCHANGES, CONVERSATIONS,
WEB-BLOGS AND PHOTOGRAPHS AS WELL AS MOST ANY OTHER METHOD OF
CONVEYING INFORMATION FROM ONE PARTY TO ANOTHER.  WE MUST ALL
THEREFORE BE MINDFUL OF THE NEED TO PROTECT OPERATIONALLY SENSITIVE
INFORMATION, EVEN THOUGH THE INFORMATION MAY APPEAR INSIGNIFICANT ON
ITS OWN.  THE CAPABILITY OF AN ADVERSARY TO QUICKLY COLLECT AND
PIECE TOGETHER INFORMATION CANNOT BE DISMISSED

3.  THE NATIONAL DEFENCE SECURITY INSTRUCTIONS (NDSI) AT REF, DEFINE
OPERATIONS SECURITY OR OPSEC AS AN OPERATIONAL DISCIPLINE DESIGNED
TO DENY ACCESS TO, AND PROTECT OPERATIONALLY SENSITIVE INFORMATION
FROM AN ENEMY, ADVERSARY OR ANYONE WHO COULD EXPLOIT THE INFORMATION
OR INTENTIONS, CAPABILITIES, LIMITATIONS AND ACTIVITIES OF AN
ORGANIZATION. THE BASICS OF OPERATIONS SECURITY (OPSEC) ARE EASILY
UNDERSTOOD AND CAN BE EFFECTIVE IN SUPPORTING MISSION SUCCESS WHILE
KEEPING PERSONNEL SAFE. SIMPLY PUT, OPSEC IS A WAY OF THINKING THAT
REQUIRES US TO BE ATTENTIVE TO INFORMATION THAT IS OPERATIONALLY
SENSITIVE OR DESIRABLE TO AN ADVERSARY, AND THEN TO TAKE PROACTIVE
STEPS TO SAFEGUARD IT

4.  OPERATIONAL SECURITY IS BOTH A PERSONAL AND A COMMAND
RESPONSIBILITY.  COMMANDERS AT ALL LEVELS SHALL INSTITUTE
APPROPRIATE MECHANISMS USING THE OPSEC PROCESS TO IDENTIFY
OPERATIONALLY SENSITIVE INFORMATION, AND SHALL ESTABLISH COORDINATED
PROACTIVE MEASURES TO SAFEGUARD INFORMATION UNTIL SUCH TIME THAT THE
RELEASE OF ANY PARTICULAR INFORMATION WILL NOT GIVE ANY ADVANTAGE TO
AN ADVERSARY

5.  IN GENERAL, WHEN ASSESSING THE SENSITIVITY OF INFORMATION, ANY
INFORMATION DEALING WITH PERSONNEL, EQUIPMENT, INSTALLATION OR
OPERATIONS COULD VERY WELL BE SENSITIVE, IF NOT SECRET, AND IF SO
MUST BE PROTECTED FROM INAPPROPRIATE, INADVERTENT OR UNAUTHORIZED
RELEASE. THIS APPLIES TO BOTH INFORMATION RELATING TO NATIONAL
ISSUES AND ACTIVITIES, AS WELL AS ALL INFORMATION PROVIDED TO CANADA
IN CONFIDENCE BY OUR ALLIES.  SPECIFIC CATEGORIES OF OPSEC ARE
OUTLINED AS FOLLOWS:

5.A.  PERSONNEL RESPONSIBLE FOR PREPARING INFORMATION FOR RELEASE TO
THE PUBLIC MUST ENSURE THAT OPERATIONALLY SENSITIVE INFORMATION IS
PROTECTED FROM INADVERTENT RELEASE.  THOSE PERSONNEL RESPONSIBLE FOR
RESPONDING TO REQUESTS UNDER THE ACCESS TO INFORMATION ACT MUST BE
FAMILIAR WITH THE ACT, AS WELL AS WITH THE PROCEDURES THAT HAVE BEEN
PUT IN PLACE TO REVIEW OPERATIONALLY SENSITIVE MATERIAL BY THE
INFORMATION SUPPORT TEAM ESTABLISHED FOR THAT PURPOSE WITHIN THE
STRATEGIC JOINT STAFF

5.B. THE USE OF THE INTERNET CAN BE AN INVALUABLE TOOL FOR MANY
THINGS, NOT THE LEAST OF WHICH IS TO STAY IN CONTACT WITH THOSE AT
HOME WHILE PERSONNEL ARE DEPLOYED. IT IS IMPORTANT TO BE AWARE THAT
THE INTERNET IS NOT SECURE. ALL TRAFFIC CAN BE MONITORED, AND MUCH
OF IT IS OPEN TO INADVERTENT EXPLOITATION. ONLY
UNCLASSIFIED/NON-SENSITIVE INFORMATION IS TO BE SENT ON THE
INTERNET/DWAN OR STORED ON UNCLASSIFIED COMPUTERS.  SENSITIVE
INFORMATION MUST NOT BE PASSED ON, OR STORED ON COMPUTERS CONNECTED
TO, THE INTERNET

5.C.  IF NOT PROPERLY MANAGED WEBSITES, FORMAL OR INFORMAL, AND
UNIT, FORMATION, OR OTHER NEWSLETTERS AND SIMILAR PUBLICATIONS CAN
BE A MAJOR SOURCE OF INFORMATION FOR THE ENEMY.  DND AND CF WEB
SITES AND NEWSLETTERS MUST NOT DISCLOSE SENSITIVE INFORMATION, SUCH
AS THE SPECIFIC CAPABILITIES OF OUR WEAPON SYSTEMS, THE DETAILS OF
OUR OPERATING PROCEDURES OR OUR ORDER OF BATTLE, AND VERY
IMPORTANTLY INFORMATION THAT CAN LEAD TO THE ENEMY BEING ABLE TO
IDENTIFY AND THEREFORE TARGET INDIVIDUALS OR ORGANIZATIONS
COOPERATING WITH THE CANADIAN FORCES OR ITS ALLIES IN AN OPERATIONAL
AREA

5.D.  PHOTOGRAPHS AND VIDEOS (E.G. YOU TUBE, ETC.) POSTED TO THE WEB
IN ANY CAPACITY, INCLUDING DND/CF WEBSITES, SOCIAL NETWORK SITES,
PERSONAL BLOGS, OR E-MAIL OR OTHER WEB-BASED CORRESPONDENCE (SUCH AS
CHAT) MUST BE CAREFULLY CONSIDERED BEFOREHAND TO ENSURE THAT THEY DO
NOT CONTAIN ANY INFORMATION THAT CAN BE OF USE TO THE ENEMY

5.E.  SENSITIVE INFORMATION, WHETHER CLASSIFIED OR UNCLASSIFIED,
SUCH AS OUR TACTICS, TECHNIQUES, AND PROCEDURES, OR OUR OPERATIONAL,
ADMINISTRATIVE, AND LOGISTIC PLANS (INCLUDING OUR MOVEMENT PLANS),
SHOULD NEVER BE DISCLOSED IN ANY UNCLASSIFIED WEB-BASED FORUM,
PASSED BY INSECURE E-MAIL OR TELEPHONE, NOR DISCUSSED IN ANY MANNER
WITH PERSONS WHO DO NOT HAVE A NEED TO KNOW

5.F.  DOCUMENTATION MUST BE PROTECTED.  IF YOU DO NOT WORK IN A
CLASSIFIED AREA, YOUR SPACE MUST BE SECURED IF YOU ARE GOING TO BE
ABSENT FOR MORE THAN A SHORT PERIOD OF TIME. CO-WORKERS IN ADJOINING
CUBICLES SHOULD BE MADE AWARE OF YOUR ABSENCE AND LOCATION IF YOU
WILL BE AWAY FROM YOUR DESK FOR SHORT-PERIODS OF TIME

5.G.  CLASSIFIED OR SENSITIVE MATERIAL IS TO BE DISPOSED OF BY
APPROVED METHODS. BLUE RECYCLING WASTEBASKETS ARE TO BE REMOVED OR
MADE DIFFICULT TO ACCESS WHEREVER THERE IS A CHANCE UNCLASSIFIED
INFORMATION CAN BECOME CROSS-CONTAMINATED WITH SENSITIVE OR
CLASSIFIED MATERIAL - PARTICULARLY AROUND PRINTERS OR COPYING
MACHINES

5.H.  INFORMATION THAT FALLS INTO THE ABOVE BROAD CATEGORIES MUST
NOT BE DISCUSSED IN PUBLIC PLACES, AND ONLY WITH A PERSON WHO HAS
THE NEED TO KNOW.  EVEN WITHIN DND BUILDINGS, CLASSIFIED OR
SENSITIVE CONVERSATIONS MUST TAKE PLACE ONLY IN APPROPRIATELY
CLEARED LOCATIONS

6.  FINALLY, WE MUST ALSO REMEMBER THAT WHEN WE RETURN FROM DEPLOYED
OPERATIONS, THE MISSION MAY HAVE ENDED FOR US, BUT IS LIKELY
ON-GOING FOR SOMEONE ELSE. THEREFORE, WE MUST NOT LET OUR GUARD
DOWN, BUT CONTINUE TO MANAGE AND CONTROL CLASSIFIED, SENSITIVE OR
VALUABLE INFORMATION AND ASSETS DILIGENTLY TO PROTECT BOTH THE
INTEGRITY OF THE ON-GOING MISSION AND THE LIVES OF CANADIAN AND
ALLIED SOLDIERS, SAILORS, AND AIR PERSONNEL INVOLVED

7.  THE ABOVE LIST IS NOT EXHAUSTIVE, AND EACH MEMBER MUST MAKE IT
HIS OR HER PERSONAL RESPONSIBILITY TO ENSURE SENSITIVE INFORMATION
IS NOT COMPROMISED. IF IN DOUBT, TREAT IT AS CLASSIFIED. THE
CANADIAN FORCES ARE ENGAGED IN COMBAT OPERATIONS AND THE SAFETY AND
WELFARE OF OUR PEOPLE ARE AT STAKE

THINK OPSEC.  WE MUST ALL DO OUR PART

[MCG]

Just a reminder that spreading rumour can cause significant damages to the CF.  Be careful what you hear & choose to repeat. 

[George Wallace]

Just a reminder to members of the site to read this topic starting from the first post and be conscious of what you post.  We are not out to make you paranoid in what you are doing, just to remind you that this site is a perfect site for friendly and not so friendly Intelligence agencies to collect Open Source Intelligence.  What you post here, may be used in some way, at some time, to benefit another government. 

Read this topic and reflect on what you are posting, or thinking of posting.

We also have other topics that may help those with no military experience at this time to perhaps better understand what OPSEC is about.  One such topic is Killing with Keyboards.  Guidance on Blogs and other Internet Communications is another valuable topic to read.

Think before you hit "Post".