Ask HN: Resources for OpSec Guidelines, Analysis, Assessment, etc.

There’s current thread on SecureDrop user feedback survey trending on HN and thought it might be of use to be able to point people to resources on OpSec. Any suggestions?