Attachment 1- OPSEC Encl 2_Redacted.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements specification that must be attached to solicitations and awards.

The requirements establish OPSEC procedures to protect sensitive government information from unauthorized disclosure during contract performance. An OPSEC plan is used to record, identify, and monitor contractor OPSEC activities; however, the document indicates that an OPSEC Plan is NOT required for this particular contract work (as indicated by the checked box dated 2/11/26). Contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information throughout the contract period. Personnel may be exposed to U.S. Government Critical Information and Indicators (CII), which must not be distributed to unauthorized third parties, including foreign entities under Foreign Ownership, Control or Influence (FOCI). CII must not be published in corporate communications, newsletters, trade magazines, displays, websites, or social media; transmission to personal email accounts and posting on social media platforms is prohibited.

The document specifies critical information categories requiring protection, including Personally Identifiable Information (PII), verbal discussions regarding shipyard work, operation and repair schedules, equipment capabilities and vulnerabilities, asset and facility identification, and photographs or videos taken within shipyard work areas. Countermeasures include prohibitions on posting classified or unclassified information to company media, proper shredding of sensitive documents using NSA-approved equipment, removal of badges upon departure, immediate reporting of unauthorized disclosures or suspected compromises to the sponsor and Activity Security Manager, and restricting use of portable electronic devices (PEDs) per shipyard guidance.