OPSEC Disclosure Reporting: Required Information & Immediate Actions

Immediate Reporting Procedure

Report any suspected OPSEC disclosure to your unit security officer or OPSEC coordinator immediately.

Minimum Required Information

Field	Details to Provide
Incident Type	OPSEC disclosure
Location	Specific location (building, grid, cyber domain, etc.)
Date/Time	When the disclosure occurred (DTG format preferred)
How Disclosure Occurred	Mechanism (email, conversation, social media, lost device, etc.)
Classification Level	(If known) Unclassified//FOUO, Secret, TS, etc.
Individuals Involved	Names, ranks, units of discloser & recipients
Actions Taken	Immediate mitigation steps (recall email, remove post, secure area)
Recommended Countermeasures	Suggested steps to prevent recurrence
Additional Details	Context, sensitivity, potential impact assessment

Key Principles

• Speed matters: Early reporting limits damage.
• Accuracy: Provide facts, not speculation.
• Chain of command: Also inform your supervisor.
• No retaliation: Reporting in good faith is protected.

Follow your unit’s specific OPSEC SOP. This template aligns with DoD 5205.02‑M and CJCSI 3214.01F.