Service
We assess threats to people, information and planned organisational activities. We examine what communications, routines and preparations reveal, who could use that information and which changes could reduce the risk.
Operational security concerns the information an activity reveals through schedules, behaviour and digital traces. A disclosure of intent or a misplaced assumption about discretion can affect negotiations, internal reviews, travel or organisational change.
The scope follows the question and the material available.
We identify the activity and the critical information that needs restricted access.
We assess what can be inferred from routine communication, preparation and behaviour.
We consider potential adversaries, their interests and capabilities. If no particular party can be identified, we describe a relevant category rather than invent an identity.
We recommend practical changes to reduce access to critical information and opportunities to exploit it.
An assessment of critical information, disclosures and potential uses, with recommendations to reduce risk. It is not a guarantee that threats will be eliminated.
We agree the form of the deliverable and the scope of recommendations before work begins. The outcome includes limitations and questions that remain unresolved.
