Attachment 1 OPSEC Redacted.pdf

This document is a Portsmouth Naval Shipyard Operations Security (OPSEC) Contract Requirements attachment that outlines security obligations for contractors and subcontractors performing work at the facility.

The document establishes that OPSEC is a process designed to protect sensitive information from unauthorized disclosure, whether classified or unclassified. Contractors must submit an OPSEC Plan, which must be signed by the Prime Contractor and forwarded to the assigned contracting official via encrypted email through the Department of Defense Safe (DoD SAFE) or U.S. Postal Service. However, the document indicates via a checkmark that an OPSEC Plan is NOT required for this specific contract, though one may be determined necessary depending on the installation work conducted. All contractors and subcontractors are responsible for avoiding inadvertent disclosure of unclassified or classified information and protecting Controlled Unclassified Information (CUI) through appropriate safeguarding and dissemination controls. Critical Information and Indicators (CII) protected under OPSEC include personally identifiable information, operation and repair schedules, equipment capabilities and vulnerabilities, and asset identification. Contractors must restrict verbal discussion of shipyard-related work, prohibit photographs or videos in shipyard work areas, remove access badges upon departure, and immediately report any unauthorized disclosures or suspected compromises to the unit sponsor, prime contract officer, and the Activity Security Manager. CUI cannot be posted to company websites, social media, newsletters, or public platforms, and transmission via personal email accounts is prohibited. Failure to comply may result in contract termination, criminal prosecution, and civil penalties.