operation security risk