| The IOSS accredits six courses with the National Cryptologic School (NCS), and is pursuing ACE accreditation for OPSE-2500 and OPSE-2400, which are the two forty-hour courses in the curriculum. These courses are taught at the IOSS Training Center, by Adjunct Training partners throughout the Federal government, and by mobile training teams (MTT) at customer request. The annual schedule can be found at www.ioss.gov. The course list includes:
| OPSE-1300, Fundamentals of Operations Security |
MTT only |
| OPSE-1500, OPSEC on the Web: Impacts of Public Release |
Classroom or MTT |
| OPSE-2500, OPSEC Analysis and Program Management |
Classroom only |
| OPSE-2380, OPSEC Analysis |
MTT only |
| OPSE-2400, DoD OPSEC Program Manager's Course |
Classroom only |
| OPSE-3500, OPSEC and Web Risk Assessment |
Classroom or MTT |
Standard Courses
OPSE-1300, Fundamentals of Operations Security 
Prerequisite : None.
Length : 1 day
Method of instruction : Platform instruction. This course is taught by mobile training team for at least 25 students at a sponsoring organization. Contact the IOSS at 443-479-4677 for more information on mobile training teams.
Description : The focus of this course is to provide students with an introduction to the five-step OPSEC process.
Objective : Upon completing this course, students will be able to:
- Demonstrate basic understanding of the OPSEC Process
- Describe how they contribute to a good OPSEC posture for their organization
- Assist leadership with OPSEC issues in a crisis situation
Requires a U.S. SECRET Clearance (May be taught at the unclassified level by special arrangement with the instructor.)
Target student population : This course is designed for individuals performing in the following types of positions and functions:
- OPSEC support duties (Working Group member, Coordinator, etc)
- Web Masters
- Public Affairs
- Classification Review
- Speech Writers
- Freedom of Information Act
Public Release Decision Makers
OPSE-1500, OPSEC on the Web: Impacts of Public Release
Note: This course was previously titled “ OPSEC and Web Content Vulnerability ”
Prerequisite : None.
Length : 2 days
Method of instruction : Platform instruction. This course is taught at the IOSS Training Center in Greenbelt, MD, at adjunct locations certified by the IOSS, and by mobile training team for at least 25 students at a sponsoring organization. Contact the IOSS at 443-479-4677 for more information on mobile training teams.
Description : The focus of this course is to enable students to use the concepts of OPSEC risk analysis in the performance of their jobs, to introduce students to common vulnerabilities associated with the World Wide Web (WWW), and to provide students with the knowledge and skills necessary to review material for public release considering the risks to critical information.
Objective : Upon completing this course, students will be able to:
- Apply OPSEC principles to use of the WWW
- Describe the concept of value of unclassified information (critical information)
- Describe vulnerabilities associated with the WWW
- Review written and spoken material for OPSEC concerns, and make recommended changes to the content that will achieve the originator's objective without compromising critical information.
Requires a U.S. SECRET Clearance (May be taught at the unclassified level by special arrangement with the instructor.)
Target student population : This course is designed for individuals performing in the following types of positions and functions:
- OPSEC support duties (Working Group member, Coordinator, etc)
- Web Masters
- Public Affairs
- Classification Review
- Speech Writers
- Freedom of Information Act
- Public Release Decision Makers
NOTE : Students who elect to attend OPSE 1500 and either OPSE 2300, 2380 or 2400 will find some duplicate material in the more advanced course.
OPSE-2500, Operations Security (OPSEC) Analysis and Program Management
Prerequisite : OPSE-1300 or OPSE 1301 (CBT), or other equivalent fundamentals course
Length : 5 days
Method of instruction : Platform instruction. This course is taught at the IOSS Training Center in Greenbelt, MD and at adjunct locations certified by the IOSS.
Description : The focus of this course is on the basic skills and knowledge needed to conduct an OPSEC risk analysis (apply the five steps) and to implement an OPSEC program. The student is afforded the opportunity to apply OPSEC tools and lessons through a variety of practical exercises and case studies.
Objective : Upon completing this course, students will be able to:
- Apply the systems analysis methodology to their own organizations and activities
- Identify sources of information and support materials for OPSEC practitioners
- Conduct an OPSEC analysis of a program, activity or operation
- Market an OPSEC program
- Write an OPSEC policy
- Implement and manage an OPSEC program
Requires a U.S. SECRET Clearance (May be taught at the unclassified level by special arrangement with the instructor.)
Target student population : This course is designed for individuals performing in the following types of positions and functions:
- OPSEC Program Managers
- OPSEC Coordinators
- OPSEC Working Group members
NOTE : Academic content of OPSE 2500 and OPSE 2400 are the same. DoD students may attend either, but OPSE 2400 is tailored specifically to DoD requirements.
OPSE-2400, DoD OPSEC Officer's Course
Prerequisite : OPSE-1300 or OPSE 1301 (CBT), or other equivalent fundamentals course
Length : 5 days
Method of instruction : Platform instruction. This course is taught at the Defense Security Service Academy in Linthicum, MD, at the Joint OPSEC Support Center in San Antonio, TX, at the Naval Information Operations Center (Norfolk and San Diego), at the 39 th IOS, Hurlburt Field, FL, and at other adjunct locations certified by the IOSS. (See IOSS training calendar at www.ioss.gov.)
Description : This course is designed to prepare DoD OPSEC personnel to provide OPSEC planning and analysis support to their commanders, to develop and implement an OPSEC program, to integrate OPSEC into mission planning and to plan and conduct OPSEC assessments.
Objective : Upon completing this course, students will be able to:
- Apply the systems analysis methodology to their own organizations and activities
- Identify sources of information and support materials for OPSEC practitioners
- Conduct an OPSEC analysis of a program, activity or operation
- Market an OPSEC program
- Write an OPSEC policy
- Implement and manage an OPSEC program
Requires a U.S. SECRET Clearance (May be taught at the unclassified level by special arrangement with the instructor.)
Target student population : This course is designed specifically for Department of Defense individuals performing in the following types of positions and functions:
- OPSEC Program Managers
- OPSEC Coordinators
- OPSEC Working Group members
NOTE : Academic content of OPSE 2500 and OPSE 2400 are the same. DoD students may attend either, but OPSE 2400 is tailored specifically to DoD requirements.
OPSE- 2380, OPSEC Analysis Course
Prerequisite : None.
Length : 3 days
Method of instruction : Platform instruction. This course is taught by mobile training team at the request of a sponsoring organization by IOSS staff and certified adjunct faculty. Minimum 25 students required. Contact the IOSS at 443-479-4677 for more information.
Description : The focus of this course is on the basic skills and knowledge needed to conduct an OPSEC risk analysis (apply the five steps). The student is afforded the opportunity to apply OPSEC tools and lessons through a variety of practical exercises and case studies.
Objective : Upon completing this course, students will be able to:
- Apply the systems analysis methodology to their own organizations and activities
- Identify sources of information and support materials for OPSEC practitioners
- Conduct an OPSEC analysis of a program, activity or operation
Requires a U.S. SECRET Clearance (May be taught at the unclassified level.)
Target student population : This course is designed individuals performing in the following types of positions and functions:
- OPSEC Coordinators
- OPSEC Working Group members
- Traditional Security fields
NOTE : The academic content of this course is similar to material from OPSE 2500 and OPSE 2400, minus the lessons on OPSEC program development and management. Students who elect to attend OPSE 2380 and OPSE 2500 or 2400 will find duplicate instruction material.
OPSE-3500, OPSEC and Web Risk Assessment
Prerequisite : OPSE-1300 or OPSE 1301 (CBT), or other equivalent fundamentals course
Length : 3 days
Method of instruction : Platform instruction. This course is taught at the IOSS Training Center in Greenbelt, MD and at adjunct locations certified by the IOSS. This course can be taught by mobile training team for at least 25 students at a sponsoring organization if the sponsor can provide adequate classroom facilities and student access to the internet. Contact the IOSS at 443-479-4677 for more information on mobile training teams.
Description : Principles of reviewing web pages for OPSEC vulnerabilities are the primary subject of this course. The use of checklists, commercially available software, and government-developed software are addressed as evaluation and review techniques. The course also provides an overview of the nature and use of the internet to give the student an appreciation of why release of information on a web page might represent an unanticipated risk. Principles of reviewing information before it is approved for public release are discussed in the context of how improper release creates risk for the information owner.
Objective : Upon completing this course, students will be able to:
- Apply OPSEC principles to web risk assessment
- Describe common threats to the use of the internet
- Review published or proposed web pages for inappropriate or critical information
- Describe a variety of commercial and government software used for web risk assessment
Requires a U.S. SECRET Clearance
Target student population : This course is designed for OPSEC program managers and coordinators, individuals who are involved in performing web risk assessments, and individuals who post or review information to be released to the public. Graduates of OPSE 1500 who desire a more advanced look at the issues of public release will also benefit from this course.
Target student population : This course is designed individuals performing in the following types of positions and functions:
- OPSEC Program Managers and OPSEC Coordinators
- Web Risk Assessment team members
- Security professionals performing review of web page content
- Personnel participating in public release decisions for an organization
- Webmasters
| 
