Which of the following are known as the three laws of OPSEC?

If you are not protecting it (the critical and sensitive information), the adversary wins!

If you don't know the threat, how do you know what to protect?

If you don't know what to protect, how do you know you are protecting it?

If you don't know about your security resources you cannot protect your network.