Attachment 1 - OPSEC Enclosure 2.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements enclosure that must be attached to solicitations and awards.

The document establishes OPSEC protocols for all contractors and subcontractors working at Portsmouth Naval Shipyard to protect sensitive unclassified and classified information from unauthorized disclosure. An OPSEC plan is required to document, identify, and monitor contractor OPSEC activities during contract performance, signed by the prime contractor and submitted via encrypted email or U.S. Postal Service to the contracting officer. The specific checkbox on the form indicates that an OPSEC plan is NOT required for this particular contract; however, all contractors remain responsible for protecting Critical Information and Indicators (CII) and Controlled Unclassified Information (CUI). Contractors must prevent inadvertent disclosure of classified or unclassified information and understand that compromise of CII can result in removal or termination of the contract, criminal prosecution, and civil penalties.

The document specifies prohibited activities including: posting classified information or CUI on company websites, social media, or newsletters; taking photographs or videos in shipyard work areas, drydocks, and restricted areas; discussing operation schedules, ship repair schedules, and equipment capabilities; and distributing PII or sensitive government information to unauthorized parties. Countermeasures required include shredding sensitive documents using approved NSA crosscut shredders, removing identification badges upon departure, immediately reporting unauthorized disclosures to the security manager and contracting officer, and restricting shipyard-related information from all public communications. Portable electronic devices (PEDs) require sponsor approval before use on-site.