The Independent Countering Disinformation Centre (ICDC) continued its series of capacity-building activities this October with an online workshop on Operational Security (OpSec). The session was led by international experts  and gathered journalists, analysts, and civil society representatives to explore how to conduct digital investigations safely, effectively, and ethically.

The training offered a mix of practical exercises and strategic discussion, helping participants strengthen both their technical and analytical skills. Trainers underlined that the first step in any investigation is to define a clear purpose — whether verifying a piece of online content, identifying the actors behind it, or assessing the scope of a larger information campaign. Clear objectives, they explained, ensure focus and help avoid the common trap of information overload.

Participants were introduced to a three-layer model for approaching online investigations:

• Content analysis – identifying emotional framing, linguistic bias, and visual manipulation;
• Behavioural analysis – examining timing, engagement, and coordination patterns;
• Infrastructure analysis – uncovering links between domains, servers, and online assets.

This model encourages cross-verification between layers and helps produce evidence-based conclusions that can withstand scrutiny.

Balancing tools, ethics, and judgment

Throughout the discussion, facilitators emphasized that good operational security is as much about ethics as it is about tools. Participants learned how to use open-source intelligence (OSINT) platforms for verification and analysis, while also considering privacy, legality, and data-protection concerns. Trainers encouraged responsible use of technology and transparent documentation of findings to maintain credibility and accountability.

Another topic that sparked debate was how major social media platforms define and moderate harmful content. The group noted that inconsistent definitions and enforcement often make it harder to counter disinformation effectively across different platforms and jurisdictions. Stronger coordination and clearer communication between media actors, technology companies, and civil society were highlighted as essential steps toward improving collective resilience.

Strengthening a culture of responsibility

The session concluded with a shared message: operational security is not just a technical skill – it is a culture of responsibility. Participants agreed that credible investigations require planning, discipline, and ethical awareness at every stage of the process. Collaboration and peer learning were identified as powerful tools for maintaining high standards of accuracy and transparency in an increasingly complex digital environment.

The OpSec workshop forms part of ICDC’s broader commitment to helping local partners build safer and more resilient information ecosystems. As disinformation tactics grow more sophisticated, ICDC continues to create opportunities for learning, collaboration, and knowledge exchange – ensuring that media and civil society actors remain equipped to protect both themselves and the public they serve.