- Hae ye defined yer operation, the area o' interest, the overall situation, the area o' operation, and the past setup - as-is-status? Dae ye hae the same for future plans?
- Dae ye hae a list o' what needs tae be protected in detail? Yer personnel, tools, equipment, procedures, and areas o' operation?
- Dae ye hae a list o' adversaries that already are or could be in the future interested in influencin', disruptin', manipulatin', utilizin' or destroyin' yer operation? Dae ye hae an estimation o' their determination, resources, personnel, equipment, and techniques that could be used or is used now against yer operation?
- Dae ye hae a detection system in place that alerts ye if yer adversaries target ye? Dae ye hae a detection system in place that alerts ye in case adversaries are actively attackin' yer operation?
- Accordin' tae the above, dae ye hae a list o' existin' vulnerabilities in yer setup that could be utilized by yer adversaries tae a) get ye on the radar and b) actively attack yer operation?
- Dae ye hae a deception system in place that deceives an adversary and protects ye from a) gettin' ye on the radar and b) bein' effectively targeted?
- Dae ye hae a list o' yer countermeasures, active and passive, tae counter different adversarial attacks based on the above?
- Dae ye evaluate periodically and proactively yer security posture in the changin' situation?
- Dae ye hae a clear list o' vulnerabilities in yer security posture that ye didnae manage tae counter well?
- Is yer personnel trained well in yer OPSec throughout yer operation?
- Dae ye hae yer OPSec well compartmentalized horizontally as well as vertically within yer operation?
- Dae ye hae enough robust contingency plannin'?
- Are all parts o' yer OpSec interconnected and maintained in a way that is easy tae understand, followed and maintained throughout yer normal operation?
- Are there available verified and secure communication channels tae update yer OpSec in normal operation as well as in the alarm event?
If aye, ye can talk aboot havin' OpSec. Otherwise, ye'd best be gettin' yer act