Attachment 1- Enclosure 2 PNSY OPSEC Contract Requirements 24-241.pdf

This is an Operations Security (OPSEC) Contract Requirements document from Portsmouth Naval Shipyard that outlines security protocols for protecting sensitive information. The document defines OPSEC as a process to protect Critical Information and Indicators (CII) from exploitation by adversaries, whether classified or unclassified.

The document details specific requirements including: submission of an OPSEC plan prior to contract start date through encrypted email or SAFE system, restrictions on portable electronic devices (PEDs) like phones and laptops, and explicit prohibitions on sharing information through personal email or social media. Critical information to be protected includes personally identifiable information (PII), operation schedules, equipment capabilities, and facility details. Key countermeasures require contractors to: not post CUI on company websites or media, shred sensitive documents using NSA-approved shredders, remove badges when leaving the shipyard, and immediately report any unauthorized disclosures. The document is dated 10/17/24 and references DoDM 5205.02 and PTSMHINST policies as governing regulations.