Attachment 1- OPSEC Encl 2_Redacted.pdf

This document is an Operations Security (OPSEC) Contract Requirements attachment for Portsmouth Naval Shipyard that outlines security protocols and sensitive information protection requirements for contractors.

The document specifies that an OPSEC plan must be signed by the Prime Contractor and forwarded to the assigned contracting official via encrypted email through the Department of Defense Safe (SAFE) Secure Access File Exchange or U.S. Postal Service. However, for this specific contract, an OPSEC plan is NOT required, though contractors may be required to receive basic OPSEC contract requirements. All contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information. The document prohibits disclosure of Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI) to unauthorized parties, including foreign entities. Specific restrictions include: no publication of U.S. Government CII in corporate newsletters, trade magazines, internet pages, or social media; no transmission to personal email accounts; and no posting on social media platforms. Contractors must report any unauthorized disclosure or compromise immediately to the Activity Security Manager and Industrial Security Officer. The document provides detailed examples of CII that must be protected, including personally identifiable information, operation schedules, equipment capabilities, facility identification, and photographs or videos taken in shipyard work areas. Countermeasures include proper disposal of sensitive documents using approved NSA crosscut shredders, removal of identification badges upon departure, and reporting of lost or stolen badges immediately.