Attachment 1 Opsec Enclosure 2_Redacted.pdf

This is an Operations Security (OPSEC) requirements document from Portsmouth Naval Shipyard that outlines security protocols for contractors. The document defines OPSEC as a process to protect sensitive information from exploitation by adversaries, covering both classified and unclassified Critical Information and Indicators (CII).

The document specifies that contractors must submit an OPSEC plan before contract start, which must be approved by the Prime contractor and forwarded to the contracting official via encrypted email through DoD SAFE or postal service. It details restrictions on portable electronic devices (PEDs), including smartphones, laptops, and recording devices, which require prior approval. Key sensitive information that must be protected includes personally identifiable information (PII), ship repair schedules, equipment capabilities, and facility details. Specific countermeasures are outlined, such as prohibitions on posting CII to social media or company websites, proper document destruction procedures, and requirements for badge control. The document emphasizes that unauthorized disclosure may result in contract termination and potential criminal penalties.