OPSEC is a Waste of Time

Описание: In more than a decade teaching people the principles of Operations Security (aka Privacy, aka Infosec safety, aka Security Awareness), what I've learned is that program managers make the mistake of using THEIR training materials to teach others.

"Here's a five-step risk management process with risk math and blah blah blah"

It's crazy. No one cares and no one needs to unless you're the program manager. For everyone else, it's simply a matter of knowing what the risks are and what to do about it.

This briefing - originally delivered at the National OPSEC Symposium in 2017 - has been updated and recorded to help people:
Think about the power of their information
The ways they give it away without meaning to
The damage that can cause
How to "think OPSEC" and protect yourself better.

Note that image and story attribution is in each slide, but if it's not visible because of my glorious face and you want that source, please let me know. Please leave questions in the comments.

Also I know this is a bit muted compared to my normal delivery - I'm still new to Youtube and need to figure out how to bring that "on stage" energy from when I deliver at conferences and such. Regardless, the information is solid and it's condensed down to 30 minutes. I hope you enjoy it :)