Attachment 1- OPSEC Encl 2_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from the Portsmouth Naval Shipyard, outlining critical information protection protocols for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries, focusing on safeguarding Critical Information and Indicators (CII) that require protection whether classified or unclassified.

Key requirements include contractor responsibilities to avoid inadvertent disclosure of sensitive information, with specific guidelines on handling Controlled Unclassified Information (CUI). Contractors must protect all CII appropriately, avoid publicizing government information on corporate or public platforms, and immediately report any potential compromises. The document also includes a Portable Electronic Device (PED) Policy, detailing restrictions on device usage and listing examples of critical information that must be protected, such as personally identifiable information, operation schedules, equipment capabilities, and asset/facility identifications. Contractors are warned that unauthorized disclosure may result in criminal prosecution and penalties.