Attachment 1- CUI-Enclosure 2 PNSY OPSEC Contract Requirements 24-284.pdf

This document is an Operations Security (OPSEC) Contract Requirements document for Portsmouth Naval Shipyard that outlines security protocols for protecting sensitive information. The document defines OPSEC as a process to protect Critical Information and Indicators (CII) from exploitation by adversaries, whether classified or unclassified.

The requirements specify that contractors must submit an OPSEC plan prior to work start date, which must be approved and forwarded to the contracting official via encrypted email through DoD SAFE or postal service. The document details restrictions on portable electronic devices (PEDs) including phones, laptops, and recording devices, requiring prior approval for use. Critical information that must be protected includes personally identifiable information (PII), shipyard work schedules, equipment capabilities, facility details, and photographs of work areas. Specific countermeasures are outlined, including prohibitions on posting CUI to company websites or social media, requirements for shredding sensitive documents, proper badge handling, and immediate reporting of unauthorized disclosures. The document is signed and dated 12/13/24 and references DoDM 5205.02 and PTSMHINST policies as governing documents.