Chapter 7. Operations Security

OBJECTIVES

Identify the key roles of operations security.

  • Identify resources to be protected.

  • Identify privileges to be restricted.

  • Identify available controls and their type.

  • Describe the OPSEC process.

  • Loosely defined, operations represent the “do.” For a business, this can mean production, distribution, transportation, and any function that gets the main work of the organization done. Operations security then, could be considered the mechanisms that protect these essential functions. However, for many of us, operations security has come to mean the protection of the computing infrastructure, the information it processes and its input and output. I will pursue this meaning, but to do so I'll first define its key ...

Get CISSP Training Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.