The First Law of OPSEC

If you don't know the threat, how do you know what to protect? 

The Second Law of OPSEC

If you don't know what to protect, how do you know you are protecting it? The "what" is the critical and sensitive, or target, information that adversaries require to meet their objectives. 

The Third Law of OPSEC

If you are not protecting it (the critical and sensitive information), the adversary wins! 

Thank you for stashing this, Jared.

It's frightening to apply this to Americans with respect to violations of their privacy:

1. They don't know the threat.

2. They don't know what to protect.

3. They don't know that they're able to protect it.