Introducing the OpSec Standard

NOTE: Version 1 of the OpSec Standards are currently in progress. Any information provided below is for illustrative purposes only and is subject to change. We expect to release Version 1 of the finalized standards in Q4 2026 or Q1 2027. Contact Us and join our mailing list to be notified on release.

The standards will be developed around a table of categories and levels. Each category will contain simple standards that support a certain level of operational integrity. A summary table will look something like the incomplete example below, with an accompanying document that lists more granular requirements for each box.

The finalized standards will also include templates for required documentation, like response team membership and breach notification procedures.

Choosing a Level

Different Levels written into the standard will allow small- and medium-sized businesses to easily tailor their level of security for their project or contract. Higher levels will provide greater protection, but will increase friction and costs.

Usage and Copyright

We anticipate that finalized standards will be made available without cost under the Creative Commons BY-ND 4.0 license. Roughly, this license means that the standards may be used commercially without payment, but may not be modified and OpSSC must be credited.