Which of the following is an OPSEC indicator?

• A. A standard operating procedure document.
• B. A routine staff meeting schedule.
• C. An observable action or information that could reveal critical details to an adversary.
• D. An internal risk assessment memo.

Answer: (C)

OPSEC indicators are observable actions or information that could reveal critical details to an adversary. This choice best captures what OPSEC looks for: things you can see or learn about someone’s operations that, if noticed by a would-be attacker, could let them deduce sensitive details like plans, vulnerabilities, or timing.

The other items are important assets or ordinary information, but they aren’t in themselves indicators of exploitable operational detail. A standard operating procedure document is a stored procedure—a sensitive asset if exposed, but not an observable signal that leaks operational details. A routine staff meeting schedule shows when people meet but doesn’t reveal how operations are conducted. An internal risk assessment memo contains risk evaluations for internal use, not outward indicators of how operations are executed.