Attachment 1 - OPSEC Enclosure 2.pdf

This document is an Operations Security (OPSEC) Contract Requirements form from Portsmouth Naval Shipyard that establishes security protocols and information protection standards for contractors performing work at the facility.

The document outlines that OPSEC is a process designed to protect sensitive and classified information from exploitation by adversaries, with contractors required to submit an OPSEC Plan (unless marked as not required in this instance). All contractors and subcontractors are responsible for preventing inadvertent disclosure of classified or unclassified information throughout contract performance. The document specifies that Critical Information and Indicators (CII)—including personally identifiable information, operation schedules, equipment capabilities, facility details, and photographs of shipyard work areas—must be strictly protected and never distributed to unauthorized parties, posted on social media, or published in corporate communications. Contractors must shred all sensitive documents using NSA-approved methods and remove identification badges upon completion. The form identifies prohibited activities including verbal discussion of shipyard work, transmission to personal email accounts, and posting on social media platforms. All unauthorized disclosures or suspected compromises of CII must be immediately reported to the unit sponsor, prime contract officer, and the Activity Security Manager. The document also addresses Portable Electronic Device (PED) policies, requiring coordination with sponsors before using such devices on the premises. Violation of these requirements may result in individual removal, contract termination, and potential criminal prosecution.