# Operational Security **Domain:** Security / Risk Management / Information Protection **Doc Type:** Canonical Practice Node **Maturity:** Foundational ## Definition **Operational security**, or **OPSEC**, identifies information, behaviors and dependencies that could reveal capabilities, intentions or vulnerabilities to an adversary and applies measures to reduce that exposure. ## Personal Context For a highly targeted individual, OPSEC can include device separation, restricted communications, stronger authentication, reduced attack surface and careful recovery procedures. Defensive isolation can reduce exposure while also imposing social and psychological costs. ## See Also [[wiki/Threat Modeling|Threat Modeling]], [[wiki/Highly Targeted Individuals|Highly Targeted Individuals]], [[wiki/Attack Surface|Attack Surface]]